No public evidenceDescartes Systems USA and GDPR
CertReports found no public GDPR evidence for Descartes Systems USA as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 21 Feb 2020
- Expires or valid through
- 2 Mar 2027
- Scope
- Personal data may be provided by the following individuals: visitors to the Descartes website; individuals contacting Descartes directly; individuals interacting with Descartes marketing and sales staff at events, trade shows, conferences, etc; prospective customers; customers; individuals who are customers of our customers ("End Customers"). Individuals interacting with Descartes who are not customers or End Customers may provide the following information: name; contact information; employer; and title and/or role at employer. Customers may be required to provide a name or unique identifier along with contact information for the purposes of setting up user accounts; providing support; and billing purposes. End Customers may provide information as required by the customer, but in any case is not expected to exceed the following: names, residential addresses, and contact information. This information will be processed for the purpose as specified by the customer, but is generally limited to things such as customs filings, denied party screening, or the routing of deliveries, packages, or other issues related to the transportation of goods. We may disclose the personal data of individuals who are not End Customers to certain third parties who assist us with tasks such as maintaining a CRM system, marketing and communications, or other common corporate functions. We may disclose the personal data of individuals who are End Customers to certain third parties to assist us with complying with our contractual obligations to our customers, which may include for data hygiene purposes, conversion or localization services, hosting or maintaining cloud computing services on which our applications may run on, or under direction of our Customers. Third parties who are provided personal data are identified in our Privacy Center’s supplemental information section (https://www.descartes.com/privacy-center/supplemental-privacy-information).
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Descartes Systems (USA) LLC: Active: UK Extension Certification, SW-US Certification, EU-US Certification | Live pagesha256 081a317963 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Descartes Systems USA GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Logistics and supply chain category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Logistics and supply chain vendor has GDPR evidence in the index yet.