Skip to main content
FastSpring logo

FastSpring

GDPR evidence

Sell globally and stay compliant with our merchant-of-record

fastspring.comPaymentsLast verified 2 Nov 2026
Request the report Are you FastSpring?
GDPR mark, CertReports state Vendor-stated as of 2 Nov 2026Vendor-stated

FastSpring and GDPR

FastSpring states it holds a data processing agreement. CertReports captured this on 2 Nov 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.

Evidence

Vendor-statedVendor states GDPR on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
2 Nov 2026GDPR
Live page Snapshotsha256 e72f4ff3e1
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026GDPR
Live page Snapshotsha256 c1ca699ea4
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026GDPR
Live page Snapshotsha256 d73e7f1018
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026GDPR
Live page Snapshotsha256 69e8d40621
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026GDPR
Live page Snapshotsha256 2334e984e3
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026GDPR
Live page Snapshotsha256 4fdba3b768
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026GDPR
Live page Snapshotsha256 de1b2dea8f
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026GDPR
Live page Snapshotsha256 defb7c9d07
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026GDPR
Live page Snapshotsha256 3d4a21177e
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026GDPR
Live page Snapshotsha256 6917228c03
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026GDPR
Live page Snapshotsha256 4cc0486d15
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026GDPR
Live page Snapshotsha256 210c9b4bd2
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026GDPR
Live page Snapshotsha256 7ef93a8867
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026GDPR
Live page Snapshotsha256 5a87e0e38c
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026GDPR
Live page Snapshotsha256 ef16a4e6ba
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026GDPR
Live page Snapshotsha256 905e6005cc
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026GDPR
Live page Snapshotsha256 744175d34f
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026GDPR
Live page Snapshotsha256 46dae88e54
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026GDPR
Live page Snapshotsha256 05f7ace567
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026GDPR
Live page Snapshotsha256 7d9e06e8cb
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026GDPR
Live page Snapshotsha256 1ac94a080d
FastSpring trust centre (Drata)
Vendor trust centre · HTTP 200
18 Sep 2026GDPR
Live page Snapshotsha256 517a1b095b
This is wrong
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%
Kind
Listing
Issued or listed
23 Jun 2017
Expires or valid through
31 Aug 2027
Scope
FastSpring processes personal data received in reliance on the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework to provide merchant-of-record, ecommerce, payment processing, tax compliance, fraud prevention, customer support, account management, and related business services. The categories of personal data processed may include customer (buyer), seller/reseller, prospect, visitor, and business contact information, including identifiers such as name, email address, mailing address, telephone number, IP address, account information, transaction details, payment and banking information, tax and regulatory information, geolocation data, and online activity information related to interactions with FastSpring's websites, applications, and services. FastSpring processes personal data to facilitate and document ecommerce transactions; verify identities; comply with legal, regulatory, tax, sanctions, anti-money laundering (AML), and know-your-customer (KYC) requirements; detect and prevent fraud; provide customer support and account management services; communicate with buyers and sellers; improve the quality, security, and functionality of its services and websites; conduct analytics and reporting; administer events and marketing activities; and fulfill contractual obligations with customers and business partners. FastSpring may disclose personal data to service providers, payment processors, banking and financial institutions, tax authorities, government and regulatory agencies, fraud prevention and identity verification providers, cloud hosting and technology providers, customer support providers, professional advisors, and other authorized business partners as necessary to provide services, complete transactions, comply with legal obligations, protect against fraud and security threats, and operate its business. Such disclosures are made only for the purposes described above and pursuant to applicable contractual, legal, and regulatory requirements.
SourceCapturedQuoteLinks
Data Privacy Framework list
Official registry · HTTP 200
2 Nov 2026FastSpring: Active: EU-US Certification, SW-US Certification, UK Extension Certification
Live pagesha256 b759e24345
This is wrong
What GDPR means, and what it does not

"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.

Read the GDPR guide and browse all vendors with evidence

Questions buyers ask

Is FastSpring GDPR compliant?

There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 22 Sep 2026DPA changedThe data processing agreement URL changed.
  2. 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.

Alternatives with GDPR evidence

Similar vendors (shared product tags or the Payments category) whose GDPR row is verified or vendor-stated, ranked by similarity.

Citcon logo

Citcon

Payments

Accept digital payments

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Verified
1 verified · 2 stated19 Oct 2026
checkout logo

checkout

Payments

Boost your acceptance rate, cut processing costs, fight fraud, and create extraordinary customer experiences with Checkout.com's payment

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state VerifiedISO 27001 mark, CertReports state Vendor-statedCyber Essentials mark, CertReports state Vendor-statedSOC 1 mark, CertReports state Vendor-stated
1 verified · 6 stated19 Oct 2026
Airwallex logo

Airwallex

Payments

Grow your business faster with Airwallex - global business accounts, high speed transfers, multi-currency cards, online payments, embedded

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state VerifiedISO 27001 mark, CertReports state Vendor-statedSOC 1 mark, CertReports state Vendor-stated
1 verified · 4 stated2 Nov 2026
Thredd UK logo

Thredd UK

Payments

Thredd is the AI-first issuer processing platform for prepaid, debit, credit, and virtual card

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state VerifiedISO 27001 mark, CertReports state Vendor-statedSOC 1 mark, CertReports state Vendor-statedISO 22301 mark, CertReports state Vendor-stated
1 verified · 5 stated2 Nov 2026
bvnk logo

bvnk

Payments

Enterprise stablecoin payments

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state VerifiedISO 27001 mark, CertReports state Vendor-statedSOC 1 mark, CertReports state Vendor-stated
1 verified · 4 stated2 Nov 2026

Understand GDPR evidence

All articles