How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
Coaching.com
GDPR evidence
Join the world’s largest coaching community with Coaching.com, the all-in-one platform designed to help you scale, manage, and grow your
No public evidenceCoaching.com and GDPR
CertReports found no public GDPR evidence for Coaching.com as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: EU-US Certification, UK Extension Certification, SW-US Certification
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 18 May 2017
- Expires or valid through
- 5 Jun 2027
- Scope
- CoachLogix, Inc. dba Coaching.com processes personal data received from the European Economic Area, United Kingdom, and Switzerland in reliance on the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) for the following purposes: Types of Personal Data Processed: CoachLogix, Inc. dba Coaching.com processes personal data of its customers' employees, coaches, coachees, and platform users, including: full name, work email address, job title, department, organizational affiliation, platform activity and engagement data, session participation records, authentication identifiers, and communications and notes generated within the platform. CoachLogix, Inc. dba Coaching.com does not sell personal data and does not process special categories of personal data as a matter of standard practice. Purposes of Processing: Personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF is processed solely to deliver CoachLogix, Inc. dba Coaching.com's cloud-based professional coaching and leadership development platform, including: creating and managing user accounts; facilitating coaching engagements and program administration; enabling communication between coaches and coachees; generating program participation and outcome reporting for customer administrators; providing customer support and maintaining platform security and integrity; and fulfilling legal and contractual obligations. Personal data is processed exclusively on behalf of and under the instruction of the customer (data controller) and is not used for any independent commercial purpose, advertising, or profiling. Third Parties to Whom Personal Data May Be Disclosed: CoachLogix, Inc. dba Coaching.com may disclose personal data received under the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to the following categories of third-party service providers, engaged solely to support platform delivery: Cloud infrastructure providers — for hosting, storage, and platform operations (DigitalOcean) Authentication and identity management providers — for user authentication and SSO facilitation (Auth0) Communications infrastructure providers — for email and SMS notifications within the platform (Nylas, Twilio) Security and performance providers — for web application firewall, DDoS protection, and DNS management (Cloudflare) All third-party service providers are bound by contractual obligations limiting their use of personal data to the purposes for which it was disclosed and are required to provide at least the same level of privacy protection as required by the EU-U.S. DPF Principles, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles respectively. CoachLogix, Inc. dba Coaching.com remains liable under the applicable DPF Principles for the processing of personal data by such third parties acting as agents on its behalf. Personal data received under the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF is not disclosed to third parties for their own independent marketing, advertising, or commercial purposes.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | Coaching.com: Active: EU-US Certification, UK Extension Certification, SW-US Certification | Live pagesha256 39f557fa5e |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Coaching.com GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Education category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Civitas Learning
Education
AI built on your data and designed for higher education, helping all teams drive institutional outcomes and better support every
KnowBe4
Education
Everything you need to reduce human risk and secure your agents all in one platform: Security Awareness Training, Email Security, Agent
Understand GDPR evidence
All articlesExplainers
The EU-US Data Privacy Framework, explained for vendor reviews
Solomon Amos · 7 Sep 2026 · 10 min read