No public evidencedbt Labs and GDPR
CertReports found no public GDPR evidence for dbt Labs as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Scope
- dbt Labs processes customer/client data, eg., minimal business contact personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, on customer instructions, and such personal data may include name, title, company, email address, IP address or other log-in credentials or other information that is customer determined. dbt Labs processes visitor data to the extent the visitor is an EU, UK or Swiss resident and opts-in to such data collection. dbt Labs processes HR data of its EU employees as needed to perform its obligations related to such employees. This information is shared only with subcontractors under contract including confidentiality obligations to perform services for dbt Labs, and is not shared with any third parties for reasons of dbt Labs's profit or gain other than to perform contracted services or as indicated in our privacy policy. The data of visitors to our website or conferences may be used as part of organizing events, responding to communications, enhancing visitors' experiences and may be shared with event organizers, venues, sponsors, partners, advertisers and web hosting services, among others, depending on the legal framework applicable to the visitor, and the visitor's opt-in, opt-out and other directions and requests. More information is available in our privacy policy at https://www.getdbt.com/cloud/privacy-policy.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | dbt Labs: Inactive | Live pagesha256 cf69e90a5f |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is dbt Labs GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Data platforms category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Data platforms vendor has GDPR evidence in the index yet.