No public evidenceFirework and GDPR
CertReports found no public GDPR evidence for Firework as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 24 Jan 2025
- Expires or valid through
- 30 Apr 2027
- Scope
- Firework is a software platform that assists other companies in website construction, website management, online marketing, customer management, and customer engagement, among a number of other services that generally help a business manage their website, online presence, and digital customer engagement. We act as a processor for the data that a business may input into our system in order to facilitate their use of the software. As a controller, the primary purposes for which Firework processes personal information is to facilitate our business customer's use of the services and/or to marketing the products to new business customers. For additional and the most up-to-date information about our processing of personal data, you can review our online privacy policy linked in this application. Firework offers products to business customers in jurisdictions around the world, including in jurisdictions that may not offer the same amount of protection as required by the EU. Firework segments and protects data accordingly, based on the location of our customers, and as such, not all product tiers offered by Firework are covered by this DPF Certification due to the potential for data storage in jurisdictions not covered by the DPF Certification. For the most up-to-date list of products that are compliant with the DPF Certification, please contact us. Currently, the list of products NOT covered by the DPF certification are the following: (i) customers with only non-EU end-users; (ii) customer that sign up for basic Firework subscription products through Shopify; or (iii) other customers as agreed to in a written agreement with Firework.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Firework: Active: EU-US Certification, UK Extension Certification | Live pagesha256 984d54eacc |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Firework GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the E-commerce category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No E-commerce vendor has GDPR evidence in the index yet.