Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
GitHub
GDPR evidence
GitHub is a proprietary developer platform that allows developers to create, store, manage, and share their code
No public evidenceGitHub and GDPR
CertReports found no public GDPR evidence for GitHub as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: UK Extension Certification, SW-US Certification, EU-US Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 26 Jan 2017
- Expires or valid through
- 3 Aug 2027
- Scope
- GitHub processes personal data for specific processing purposes and activities. GitHub collects, stores, and uses personal data that includes, but not limited to, biographic information (name, email, phone), device information (IP address, device ID), and telemetry data (interactions with platform.) Data processing data categories include: - GitHub Free and Subscription Users Data - GitHub Enterprise Users Data - GitHub Enterprise Customers Data - GitHub Sales and Marketing Contacts Data - Website visitors GitHub processing purposes and activities include: - To provide GitHub services (e.g., the functional capabilities and personalized experience) - Developing new products, features, or services - Repairing functional issues (e.g., preventing, detecting, and repairing problems on GitHub) - Ongoing improvement (e.g., installing the latest updates and making improvements to user productivity, reliability, efficacy, and security) - Combating fraud, abuse, cyber-crime, or cyber-attacks that may affect the service - Improving the core functionality of productivity, accessibility, privacy, or energy-efficiency - Internal reporting and business modeling (e.g., forecasting, revenue, capacity planning, product strategy) - User profiling, advertising, sales and marketing efforts, or similar commercial purposes - Providing support to users (e.g., customer support, troubleshooting) - To provide GitHub Enterprise Customer services - Billing and account management For the purposes of business operations or providing the service (e.g., cloud infrastructure), GitHub may share personal data with third parties (e.g., AWS (Amazon), Azure (Microsoft)). Third parties that will receive GitHub personal data sign a Data Protection Agreement (DPA) with GitHub and are obligated to only use the data at the direction of GitHub when the recipient is acting as a processor/subprocessor and to secure the data as described in the DPA.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | GitHub: Active: UK Extension Certification, SW-US Certification, EU-US Certification | Live pagesha256 84c2836e0a |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is GitHub GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 19 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Developer tools category) whose GDPR row is verified or vendor-stated, ranked by similarity.
GitLab
Developer tools
A complete DevOps platform delivered as a single application.
CircleCI
Developer tools
CircleCI provides a CI/CD cloud environment for software engineers to test their code and deploy
Netlify
Developer tools
Create with AI or code, deploy instantly on production
Sauce Labs
Developer tools
What is Sauce Labs? Sauce Labs makes software work for everyone, when they want it
Sagemath
Developer tools
CoCalc is a persistent shared computer for technical work, where people and AI agents collaborate in the same Linux project with files
Anima App
Developer tools
Anima - Design Agent | AgentGrid.io - Shared drive for humans & agents
Lovable
Developer tools
Lovable is a Swedish vibe coding platform and company
SmartBear Software
Developer tools
Maintain control as development
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read