Skip to main content
Ironclad logo

Ironclad

GDPR evidence

AI-powered contract management

ironclad.comLegal techLast verified 1 Nov 2026
Request the report Are you Ironclad?
GDPR mark, CertReports state Vendor-stated as of 1 Nov 2026Vendor-stated

Ironclad and GDPR

Ironclad states it holds a data processing agreement. CertReports captured this on 1 Nov 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.

Evidence

Vendor-statedVendor states GDPR on its trust centre
as of 1 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
1 Nov 2026GDPR
Live page Snapshotsha256 e8291426ac
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026GDPR
Live page Snapshotsha256 e0da0bf55c
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026GDPR
Live page Snapshotsha256 80d1ec963b
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026GDPR
Live page Snapshotsha256 a37de56c19
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026GDPR
Live page Snapshotsha256 1fdd803eaa
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026GDPR
Live page Snapshotsha256 24e3963d7b
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026GDPR
Live page Snapshotsha256 53aac93739
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026GDPR
Live page Snapshotsha256 f536dc573f
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026GDPR
Live page Snapshotsha256 f2ee1b48b5
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026GDPR
Live page Snapshotsha256 043f50462f
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026GDPR
Live page Snapshotsha256 27e75ee867
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026GDPR
Live page Snapshotsha256 6cd07e7af9
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026GDPR
Live page Snapshotsha256 16a66ab5a8
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026GDPR
Live page Snapshotsha256 273bd51ba8
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026GDPR
Live page Snapshotsha256 c3acf56832
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026GDPR
Live page Snapshotsha256 7ab39f2785
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026GDPR
Live page Snapshotsha256 088efce0e0
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026GDPR
Live page Snapshotsha256 90c90a72f4
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026GDPR
Live page Snapshotsha256 d6630aef7d
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026GDPR
Live page Snapshotsha256 2ac125a31d
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026GDPR
Live page Snapshotsha256 6f5aaf339d
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
18 Sep 2026GDPR
Live page Snapshotsha256 32cfe56f19
This is wrong
Vendor-statedVendor states ISO/IEC 27701 on its trust centre
as of 1 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
1 Nov 2026ISO/IEC 27701
Live page Snapshotsha256 e8291426ac
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 e0da0bf55c
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 80d1ec963b
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 a37de56c19
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 1fdd803eaa
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 24e3963d7b
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 53aac93739
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 f536dc573f
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 f2ee1b48b5
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 043f50462f
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 27e75ee867
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 6cd07e7af9
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 16a66ab5a8
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 273bd51ba8
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 c3acf56832
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 7ab39f2785
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 088efce0e0
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 90c90a72f4
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 d6630aef7d
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 2ac125a31d
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 6f5aaf339d
Ironclad trust centre (Drata)
Vendor trust centre · HTTP 200
18 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 32cfe56f19
This is wrong
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 26 Oct 2026 · confidence 100%
Kind
Listing
Issued or listed
25 Oct 2024
Expires or valid through
29 Sep 2027
Scope
Ironclad as a Data Controller Ironclad requires each customer to provide us with personal data to access and use Ironclad products and services. Personal data is captured when a visitor accesses online services, or speaks on the phone with or emails an Ironclad employee, and willingly discloses that information. Personally data includes: (1) contact data (such as name, address, city, state, zip code, phone number, and email address); (2) financial data (such as credit card number, expiration date, and verification code or bank account information); and (3) demographic data (such as zip code and sex). We use information we collect from the online services to: provide customers with the online services; communicate with customers; process customer orders; manage and remember customer preferences and customize the online services; analyze and improve the online services or any other products and online services we provide; improve our advertising and marketing; verify customer identity; facilitate customer transactions with our third-party marketing partners; inform customers of offers and discounts; comply with our legal obligations or as permitted by law; protect the safety and/or integrity of our users, employees, third parties, members of the public, and/or the online services; and prevent fraud and enforce our legal terms. We disclose customer information to the following types of third parties: (1) service providers that help facilitate transactions; and (2) marketers (where we have your explicit consent). Ironclad as a Data Processor Ironclad processes personal data on behalf of Ironclad customers in order to render Ironclad's services to customers pursuant to Ironclad's ESA (legal.ironcladapp.com/#esa). Ironclad services include the provision and use of Ironclad’s contract management SaaS application. Categories of data subjects include (1) prospects, customers, business partners and vendors of customers; (2) employees or contact persons of customers’ prospects, customers, business partners and vendors; and (3) employees, agents, advisors, freelancers of customers. Types of personal data include (1) first and last name; (2) title; (3) position; (4) employer; (5) contact information (company, email, phone, physical business address); (6) identification Data (notably email addresses and phone numbers); and (7) electronic identification data (notably IP addresses and mobile device IDs). Ironclad discloses personal data provided by customers to third parties (specifically, Ironclad's subprocessors, https://ironcladapp.com/subprocessors/) to assist Ironclad in providing the services. For more information, please see Ironclad's DPA (legal.ironcladapp.com/#dpa).
SourceCapturedQuoteLinks
Data Privacy Framework list
Official registry · HTTP 200
26 Oct 2026Ironclad: Active: EU-US Certification, SW-US Certification, UK Extension Certification
Live pagesha256 2fb2edcd9a
Data Privacy Framework list
Official registry · HTTP 200
5 Oct 2026Ironclad: Inactive
Live pagesha256 8fc3b379fe
Data Privacy Framework list
Official registry · HTTP 200
29 Sep 2026Ironclad: Active: EU-US Certification, SW-US Certification, UK Extension Certification
Live pagesha256 f517bf253e
This is wrong
What GDPR means, and what it does not

"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.

Read the GDPR guide and browse all vendors with evidence

Questions buyers ask

Is Ironclad GDPR compliant?

There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 22 Sep 2026DPA changedThe data processing agreement URL changed.

Alternatives with GDPR evidence

Similar vendors (shared product tags or the Legal tech category) whose GDPR row is verified or vendor-stated, ranked by similarity.

Luminance logo

Luminance

Legal tech

End-to-End AI for Every Contract

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 3 stated26 Oct 2026

Understand GDPR evidence

All articles