Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
dbt Labs
GDPR evidence
dbt Labs empowers data teams to build reliable, governed data pipelines—accelerating analytics and AI initiatives with speed and
No public evidencedbt Labs and GDPR
CertReports found no public GDPR evidence for dbt Labs as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Scope
- dbt Labs processes customer/client data, eg., minimal business contact personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, on customer instructions, and such personal data may include name, title, company, email address, IP address or other log-in credentials or other information that is customer determined. dbt Labs processes visitor data to the extent the visitor is an EU, UK or Swiss resident and opts-in to such data collection. dbt Labs processes HR data of its EU employees as needed to perform its obligations related to such employees. This information is shared only with subcontractors under contract including confidentiality obligations to perform services for dbt Labs, and is not shared with any third parties for reasons of dbt Labs's profit or gain other than to perform contracted services or as indicated in our privacy policy. The data of visitors to our website or conferences may be used as part of organizing events, responding to communications, enhancing visitors' experiences and may be shared with event organizers, venues, sponsors, partners, advertisers and web hosting services, among others, depending on the legal framework applicable to the visitor, and the visitor's opt-in, opt-out and other directions and requests. More information is available in our privacy policy at https://www.getdbt.com/cloud/privacy-policy.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | dbt Labs: Inactive | Live pagesha256 cf69e90a5f |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is dbt Labs GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 19 Sep 2026Trust centre movedTrust centre URL is now https://trust.getdbt.com/.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Data platforms category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Fivetran
Data platforms
The leader in automated data movement
Coalesce
Data platforms
Coalesce is the data operating layer where humans and AI agents build, govern, and observe data together, in one governed
Polytomic
Data platforms
No-code data syncing between your systems
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read