Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Humanyze
GDPR evidence
Amazon Web Services offers reliable, scalable, and inexpensive cloud computing
No public evidenceHumanyze and GDPR
CertReports found no public GDPR evidence for Humanyze as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 8 May 2024
- Expires or valid through
- 2 Oct 2027
- Scope
- Emergent Connect provides an online Software as a Service (“SaaS”) platform for clients to operate aspects of their business including the access, storage, processing and retrieval of medical images and related data. Emergent Connect’s clients or their affiliates using our service are considered data controllers and decide what data to collect, submit, and process within the service. Emergent Connect is considered a data processor. Emergent Connect has no direct relationship with the individuals whose personal data is being processed by our clients or their affiliates. Emergent Connect processes this data as instructed by our clients and does not disclose, control, or own client data. We may access client data for the purpose of providing the service, preventing or addressing service or technical problems, at a client’s request in connection with a client service support request, or as may be required by law.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Emergent Connect: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 5fd78a0450 |
Data Privacy Framework list Official registry · HTTP 200 | 12 Oct 2026 | Emergent Connect: Inactive | Live pagesha256 941c3c46c7 |
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 19 Feb 2025
- Expires or valid through
- 5 Feb 2027
- Scope
- Cairn Surgical collects and processes personally identifiable information including names and titles, email addresses, phone numbers, physical addresses and names and contact information of associates for account creation and management. CairnSurgical may use personal data to communicate with account holders concerning specific cases, to advise of changes to Portal function, to provide support, to notify of the development of products, or to request feedback on product offerings. Cairn Surgical collects names, phone numbers, and address of the organizations account holders are members of for proper association of accounts and for product delivery. Cairn Surgical collects and processes personally identifiable information including names, email addresses and physical addresses of business partners contracted to perform manufacturing, labeling and product delivery functions. Cairn Surgical collects patients’ personally identifiable information, health, and diagnostic information including medical imaging and clinical reports provided by account holders for the creation of patient-specific surgical guidance devices. Cairn Surgical contracts with data storage and PACS providers. All Personal Data is encrypted during transfer and at rest. Personal data may be transferred to contracted business partners for manufacturing, labeling and delivery services. Cairn Surgical limits the collection, processing, storage and transfer of personal data to that which is required for the purposes stated above.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Cairn Surgical: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 123e4f772d |
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Scope
- Our organization provides an analytics tool for cloud services such as Google Gsuite and Google Drive, Slack and other services where files, data or other artifacts may be shared with users within the organization or outside of it. Our tools allow organizations do analyze how internal employees are collaborating with each other and partners and what information they may be sharing within and outside of the organization. Our organization collects data consistent with other organizations offering subscription based cloud services and includes user information, payment details and analytics data. Payment information is handled by third parties specifically for processing payments in a PCI compliant manner. Currenlty this includes Braintree Payments and Chargify. Analytics data is shared with and process through Google Analytics. This data may be shared on an as needed basis with third parties to allow them to provide services for us in support of our operations. Our product also collects information from various cloud services used by our Clients. This data collection is managed by the client through the installation of 'Connectors' for each cloud service we collect data from on their behalf. Clients may disable these connectors and/or delete the data at any time through a user interface provided by us. Our privacy policy makes special provisions for this as 'Client Data' which is not shared with any third party and access to this data is tightly controlled within our organization. All servers containing Client Data are hosted by Amazon in the AWS cloud based in the United States.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Hornwerk Analytics: Inactive | Live pagesha256 4167b7847d |
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 16 Feb 2018
- Scope
- activpayroll provide global payroll outsourcing to our customers, calculating the gross payroll values, net payroll values and related tax obligations for customers' employees in different location throughout the world. The Privacy Shield applies as our main data centre is located in the UK and our global activpayroll entities may process EU/EEA citizen payrolls. Our international entities currently consist of: activpayroll Ltd activpayroll Inc activpayroll Pte activpayroll Pty activpayroll GmbH activpayroll South Africa (PTY) activpayroll DMCC (UAE) activpayroll France
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | activpayroll Inc: Inactive | Live pagesha256 1a3838edf0 |
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 6 Sep 2017
- Scope
- WHAT PERSONAL INFORMATION DO WE COLLECT? We collect your personal information that you provide us directly in order to provide you with the products and services you have requested. In most cases, it consists of • Full Legal Name • Email address • Postal address • Phone number We may collect other information to assist you with order fulfillment. Information We Collect Through Automatic Data Collection Technologies We collect other information, such as your IP address, search terms, and site pages you visit while on our site, whenever you visit our site, use our services, or view our online advertisements. The technologies we use for this automatic data collection may include cookies and log data. You can learn more about how we use cookie data by reviewing our Cookie Policy which can be found in the “Cookie Policy” section of this document. Whenever you use a website, mobile application, or other internet service, certain information is created and retained by the website or application. This happens with our Site as well. We collect technical information when you use our Site, or information that has been made anonymous, such as: • Log data: Our servers automatically record information when you use our Site, such as your IP address, the type of browser you are using and its settings, the third party website you visited immediately prior to accessing our Site, the operating system you are using, the domain name of your Internet service provider, the search terms you use on our Site, the specific Site pages you visit, type of product selected, the brand, order, and product identifications, and the duration of your visits. • Cookie data: A “cookie” is data that a website server stores on your computer. Cookies enable websites to recognize your computer and to “remember” your entries as you move from page to page, or even when you revisit the site from time to time using the same computer. How We Use Your Information. If you are a customer, an agent, an employee, or a job applicant, the personal information we hold, and use is necessary for the performance of the services contract or independent contractor or other agreement to which you are a party. If you are a prospective customer, the personal information we collect, and use is necessary for our legitimate interest in providing you with information about the services we offer, and about which you have expressed an interest or that we believe will be of benefit to you. Where appropriate, we will obtain your consent at the time we communicate with you. In some cases, our purpose for collecting the information is because you have expressly consented to our collection and use of your personal information. We collect your personal information for a variety of reasons. You may provide the information to us directly, or through a tool or product provided by DISTRIBUTION MANAGEMENT or another organization in the case of our business clients. We collect your personal information, such as name, address, email address and phone number in order to provide the services you have requested. Other examples of personal information that we collect include: • From business customers, customer relationship information, such as business contact information. How We Use Your Information. If you are a customer, an agent, an employee, or a job applicant, the personal information we hold, and use is necessary for the performance of the services contract or independent contractor or other agreement to which you are a party. If you are a prospective customer, the personal information we collect, and use is necessary for our legitimate interest in providing you with information about the services we offer, and about which you have expressed an interest or that we believe will be of benefit to you. Where appropriate, we will obtain your consent at the time we communicate with you.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Distribution Management: Inactive | Live pagesha256 5e495d1e1a |
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 1 Dec 2016
- Scope
- Our organization processes personal data reliant on the Privacy Shield in order to provide organizations with detailed workforce analytics. We process human resources data only. There are no third parties to which our organization discloses data.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Sutro Health Inc.: Inactive | Live pagesha256 1b04239fbc |
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 25 Jan 2018
- Scope
- Notify users about changes to our service; provide user support; enforce our terms, conditions and policies; communicate with users; improve and administer our services and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes; keep our services safe and secure; and develop our services and conduct product development.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Humanyze: Inactive | Live pagesha256 ee1159c5d6 |
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 29 Nov 2017
- Scope
- Personal data other than human resources data: Customer data including names, contact details, identifiers, information about the contact lens prescriptions of customers, details of customer transactions made through our website, communications provided to us such as queries, customer support or feedback information. Purpose of data collection: We collect and process information for various purposes including for the purposes of enabling us to identify our users, Administer our customers' accounts, process transactions, analyze the data for our own business purposes, verify and carry out financial transactions in relation to online payments, or carry out research on our users' demographics and tracking of sales data.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Vision Path, Inc.: Inactive | Live pagesha256 6bdb48ff4c |
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Scope
- Bridge for Billions uses different data for different purposes. The users’ (both entrepreneurs and mentors) email address, name, and location serves us to do marketing and communicate with our end-users (entrepreneurs and mentors) about our services. Entrepreneurs enter information about their project and this information is shown to mentors in our network. Then, the rest of the information (project specific data once they are incubating) is private to that entrepreneur, his/her chosen mentor, and only those who the entrepreneur grants access to via invitation to his/her workspace (i.e: a teammate).
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Bridge for Billions, PBC: Inactive | Live pagesha256 097710dd5a |
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 18 Oct 2016
- Scope
- We allow visitors to visit www.synconset.com without submitting any personal information. However, if they use certain features on the site, such as registering for our service they are required to provide personal information. Such information could include, for example, their name, email address, telephone number, production postal address, company, job title, and/or industry. Our online contact form also contains a comments field through which visitors may submit additional personal information. We may combine personal information collected through the Site with other information that we or third parties collect in other contexts, such as our communications with customers via email or phone, or your customer service records. SyncOnSet uses the information that we collect for a variety of purposes. If we have personal information about a customer, we may use it, for example: to respond to questions or requests concerning the site or other services offered by SyncOnSet or our partners; to fulfill the terms of any agreement with our clients; to fulfill requests for our services or otherwise complete a transaction that a client initiates; to send information about our services and other topics that are likely to be of interest to our customers, including newsletters, updates, or other communications; to deliver confirmations, account information, notifications, and similar operational communications; to improve user experience and the quality of our products and services; to comply with legal and/or regulatory requirements; and to manage our business. SyncOnSet also uses other third-party service providers to help us manage and improve the Site and other SyncOnSet services. For example, we use third parties to help us target and implement our email communications and direct mailings. We also use third-party platforms to help us manage our relationships with the people and companies that use our services. In addition, The site integrates certain third-party plug-ins (such as Intercom for customer support). Even if customers do not click on these plug-ins, they may collect information, such as a customer's IP address and the pages that are viewed. They also may set and/or access a cookie.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | SyncOnSet Technologies: Inactive | Live pagesha256 66fec02abb |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Humanyze GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports9 evidence rows across 1 framework entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Cloud and hosting category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read