Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Forcepoint
GDPR evidence
Forcepoint is a global data security leader headquartered in Austin, Texas, delivering AI-native protection for sensitive data across
Vendor-statedForcepoint and GDPR
Forcepoint states it holds a data processing agreement. CertReports captured this on 2 Nov 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.
Evidence
Vendor-statedVendor states GDPR on its trust centre
as of 2 Nov 2026 · confidence 80%| Source | Captured | Quote | Links |
|---|---|---|---|
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 1 Nov 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 31 Oct 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 29 Oct 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 27 Oct 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 25 Oct 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 23 Oct 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 21 Oct 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 19 Oct 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 17 Oct 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 15 Oct 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 13 Oct 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 11 Oct 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 9 Oct 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 7 Oct 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 5 Oct 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 3 Oct 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 1 Oct 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 29 Sep 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 27 Sep 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 25 Sep 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 21 Sep 2026 | GDPR | |
Forcepoint trust centre (Drata) Vendor trust centre · HTTP 200 | 18 Sep 2026 | GDPR |
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 6 Dec 2016
- Scope
- HR Data--Forcepoint collects data regarding past, potential, present and future staff, including job candidates, volunteers, agents, independent contractors, interns, temporary and casual workers) ("Employees") and their relatives, parents, beneficiaries and guardians as needed to manage the Company's legitimate interests in appropriately executing it business activities/responsibilities. While executing our legitimate interests we are careful to take account of and appropriately address the interests, rights and freedoms of effected individuals. The type of data collected includes, but is not limited to personal information such as national identifiers, academic and professional qualifications, salary and banking data, employment details, IT related data, healthcare information, and information regarding Employees' relatives. Examples of our legitimate interests include Processing related to: - Employment Records: Employment records, payroll, compensation and equity-related awards, recruitment, administrative and managerial tasks, time-tracking, healthcare and other benefit administration, employee traveling, expense tracking and reimbursement, appointments or removals, disciplinary matters, ensuring compliance with Forcepoint policies, working time management, determining and reviewing salaries, employee career development (including employee evaluations), talent management. - Legal/Compliance: Compliance with applicable legal and other requirements, management reporting and analysis. - Communications and Training: Enabling internal contacts and communication, providing training and learning services, providing IT support to Employees, management and maintenance of the functioning and security of the IT systems and network. - Cybersecurity: Management and maintenance of the security of Forcepoint information systems as well as Forcepoint and Employee confidential information, including Forcepoint Employee Data and Forcepoint intellectual Property. Non-HR Data--Forcepoint collects non-HR data as outlined in our Privacy Policy from individuals that (i) register on the Forcepoint website http://www.forcepoint.com/ (and any of its sub-domains) (the 'Website') or (ii) do business with Forcepoint (Forcepoint Business Data). We also may receive personally identifiable data of individuals that use certain Forcepoint products ('End User Personal Data') deployed by Forcepoint's customers to monitor their networks as necessary to protect against cyber threats. The types of End User Personal Information we may receive from the use of such monitored networks includes Subscriber ID information, such as email addresses; Communication information, such as email addresses and email subjects; and Traffic data, such as browsing logs and website session data. Third Party Service Providers--Forcepoint uses a limited number of third-party service providers to assist us with administering employment related and customer servicing tasks. Examples of our use of third parties with respect to employment related tasks includes such things as employment application administration, payroll management, provision of health insurance and processing of health insurance claims. Examples of our use of third parties in customer account servicing tasks includes provision of product support, assistance with the transmission of data, and provision of data storage services in the form of data center co-location. Forcepoint's policy with respect to all third parties retained to assist with tasks that may involve access to personally identifiable information is to maintain contracts with the third parties that limit access and use of personally identifiable information consistent with the scope and purpose of the contract. Our policy is also to ensure disclosure of personal data in the execution of such contracts is in compliance with Forcepoint's Privacy Shield obligations.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Forcepoint LLC: Inactive | Live pagesha256 0734d6801f |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Forcepoint GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Security category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Cyera
Security
The Cyera Data Security system allows organizations to discover data categories and ensure that they are protected according to
Netskope
Security
Netskope™, the leading cloud access security broker (CASB), helps enterprises find, understand and secure sanctioned and unsanctioned cloud
Expel
Security
Expel provides leading managed detection and response services to thwart cyber adversaries from disrupting your business and improve your
Mimecast
Security
Mimecast provides email management as a single service in the cloud that helps customers slash on-premise email storage requirements
Cyble
Security
Cyble - World’s First Intelligence-Driven, AI-Native Security…
CrowdStrike
Security
CrowdStrike Falcon is the only solution to unify next-gen AV, endpoint protection and response, managed hunting, IT hygiene and threat
RSA Security
Security
Outseer delivers all-cause fraud prevention using predictive AI, real-time behavioral biometrics, and global consortium data—detecting and
Salt Security
Security
Protects organizations from getting breached through their APIs.
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read