Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
No public evidenceCollective i and GDPR
CertReports found no public GDPR evidence for Collective i as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 11 Apr 2018
- Expires or valid through
- 30 Mar 2027
- Scope
- All personal information collected by Collective[i] is done so in accordance with Collective[i]’s Privacy Policy. When customers use Collective[i]’s website, Collective[i] collects 1) information that customers may provide by filling out website forms, including in connection with subscribing to any service offered and posting any material on Collective[i]’s website (such as name, email address, phone number, company name and company location), and 2) information obtained as customers navigate through Collective[i]’s website (such as usage details, IP addresses, and cookies and web beacons). Collective[i] uses the information collected from website users in order to present the website and its contents in a suitable and effective manner, to provide customers with information about products or services and to notify customers about changes to services. Collective[i] also collects information from Collective[i]’s clients through Collective[i]’s data network platform. Such information is collected under the direction of Collective[i]’s clients (the data controllers), and Collective[i] has no direct relationship with the individuals whose personal data Collective[i]’s clients process. If requested by a client to correct, amend or delete inaccurate personal data, Collective[i] will respond within a reasonable timeframe. Collective[i] will retain personal data processed on behalf of Collective[i] clients for as long as needed to provide services to such clients, and Collective[i] will retain such personal information as necessary to comply with certain legal obligations, resolve disputes and/or enforce Collective[i]’s contractual agreements.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Collective[i]: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 24c9c68ad5 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Collective i GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the CRM category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read