Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Immersive Labs
GDPR evidence
Immersive One is the platform for continuous cyber
No public evidenceImmersive Labs and GDPR
CertReports found no public GDPR evidence for Immersive Labs as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 14 Nov 2023
- Scope
- Immersive Labs collects and processes the personal data of its customers, suppliers, and partners for the purposes of entering into, and managing, a business relationship. The categories of personal data include full name, email address, job title, and phone number. It processes the personal data of its customers' employees for the purposes of enabling them to access the Immersive Labs SaaS Cyber Security Upskilling Platform. The categories of personal data include full name, email address, IP address, SAML ID (for SSO), username, and unique identifier. It also processes the personal data of consumers to enable them to access the Immersive Labs SaaS Cyber Security Upskilling Platform. The categories of personal data include full name, email address, IP address, username, and unique identifier. Personal data is shared within the Immersive Labs Group (from the EEA and UK to the USA) to facilitate customer, partner, supplier, and platform end-user relationship management and support. Immersive Labs discloses personal data to third party cloud service providers that support the provision of the Platform (e.g. hosting providers, customer relationship management systems, security tools, support and maintenance tools, and analytics tools). Immersive Labs collects and processes the personal data of its employees for the purposes of managing the employment relationship. The categories of personal data include full name, home address, phone number, email address, IP address, national insurance / social security / national ID number, pronouns, date of birth, race, ethnicity, family status, health information, veteran status, sexual orientation, sex, gender identification, bank account information, next of kin information, dependents, leave entitlement (including reasons), job title, passport, driving license or equivalent identity documents, work history, education history and qualifications, criminal conviction history, credit history, opinions, meeting video recordings and photographs. Immersive Labs is a global Group that transfers data from the EEA and UK to the USA where part of its HR function sits. The data is shared with third-party cloud service providers that provide HR functionality (e.g. Human Resources systems and Background Checking Providers).
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Immersive Labs Corporation: Inactive | Live pagesha256 4f94e93402 |
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | Immersive Labs Corporation: Inactive | Live pagesha256 276487f1da |
Data Privacy Framework list Official registry · HTTP 200 | 19 Oct 2026 | Immersive Labs Corporation: Active: EU-US Certification, UK Extension Certification | Live pagesha256 2d6a39273a |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Immersive Labs GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Security category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Riot
Security
Cybersecurity awareness for fast growing companies
CrowdStrike
Security
CrowdStrike Falcon is the only solution to unify next-gen AV, endpoint protection and response, managed hunting, IT hygiene and threat
Expel
Security
Expel provides leading managed detection and response services to thwart cyber adversaries from disrupting your business and improve your
Cyble
Security
Cyble - World’s First Intelligence-Driven, AI-Native Security…
SEON Technologies
Security
SEON's fraud prevention platform unifies real-time detection and AML in one
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read