Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Leaseweb
GDPR evidence
Leaseweb is an Infrastructure-as-a-Service (IaaS) provider that offers Dedicated Servers, CDN, and Cloud Hosting solutions in a worldwide
No public evidenceLeaseweb and GDPR
CertReports found no public GDPR evidence for Leaseweb as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: UK Extension Certification, EU-US Certification, SW-US Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 16 May 2018
- Expires or valid through
- 21 Jan 2027
- Scope
- Your privacy is important to Leaseweb USA, Inc. (hereinafter “Leaseweb USA”). This Privacy Statement to inform you of Leaseweb USA’s practices (as IaaS cloud provider) with respect to the possible collection and use of your personal information while doing business with you (“Personal Data”). This Leaseweb USA Privacy Statement applies to business customers who purchase or use business products or services provided by Leaseweb USA. If you reside in California the collection, use and sharing of your personal information is governed by the Leaseweb USA, Inc. California Privacy Statement. Leaseweb USA is subject to the Regulation 2016/679/EU of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”). Leaseweb USA has implemented the following requirements under the GDPR, including but not limited to: • A record of our Personal Data processing activities. • Adequate organizational and technical protection measures. • Request forms and internal instructions for Privacy by Design & Default, Data Portability, Data Subject Rights like the Right to be Forgotten. • A Data Processor Agreement in our role as data controller and data processor. • A Personal Data Breach procedure. • An internal privacy policy. • In case of data export from the EU to the USA, Leaseweb USA supplies and lives up to the Standard Contractual Clauses to the extent deemed permitted and sustainable. • A commitment to comply with EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) and the UK Extension to the EU-US DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. PDF). HOW LEASEWEB USA MAY COLLECT INFORMATION ABOUT YOU • Leaseweb USA may collect your Personal Data when: • You order a service from Leaseweb USA. • You enter a promotion run by Leaseweb USA. • You participate in a Leaseweb USA survey. • You subscribe to a Leaseweb USA newsletter. • You ask Leaseweb USA for more information about a Leaseweb service, or contact Leaseweb USA with a question, comment or complaint. • You submit an abuse notification to Leaseweb USA. • You use the Leaseweb USA network, Leaseweb USA infrastructure and/or other Leaseweb USA services. WHAT KIND OF INFORMATION LEASEWEB USA MAY COLLECT ABOUT YOU • Leaseweb USA may collect the following information about you: • Your name, address, phone number, email address business and ID registrations that may include photo and personal identification numbers and such contact details of legally authorized representatives. • Your Leaseweb USA account information – such as the Leaseweb USA services you ordered, domain name registration information, the IP addresses assigned to you, your customer ID, Service Fees owed and received, the use of Leaseweb USA services or any other information related to your account. • Your contact with Leaseweb USA – such as a notes or recordings of any call you make to Leaseweb USA, a chat records when you engage in a chat session with Leaseweb USA, an emails or letters you send to Leaseweb USA or other records of any contact you have with Leaseweb USA. • Information about your payment method, such as credit card number, bank account number or other banking information. • Information provided by you to Leaseweb USA when you notify Leaseweb USA of a (suspected) breach of Leaseweb USA’s acceptable use policies. • Video footage of you when you are in a Leaseweb USA datacenter or the public space outside and inside our offices. • Photo of you when you access a data center by using a personalized ID badge. • Your biometric data including fingerprint when you access a data center. • Documents and information that certify your identity.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Leaseweb USA, Inc.: Active: UK Extension Certification, EU-US Certification, SW-US Certification | Live pagesha256 6f9d1f1652 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Leaseweb GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Cloud and hosting category) whose GDPR row is verified or vendor-stated, ranked by similarity.
DataBank
Cloud and hosting
DataBank’s Managed Cloud transforms our Standard Cloud (IaaS) service into a comprehensively managed Platform-as-a-Service (PaaS)
Railway
Cloud and hosting
Railway is a full-stack cloud for deploying web apps, servers, databases, and more with automatic scaling, monitoring, and
Ably
Cloud and hosting
Coud-based realtime messaging and AI infrastructure platform
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read