Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Loyalty Juggernaut
GDPR evidence
Agentic AI, real-time experiences, ecosystem-scale
Vendor-statedLoyalty Juggernaut and GDPR
Loyalty Juggernaut states it holds a data processing agreement. CertReports captured this on 21 Sep 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.
Evidence
Vendor-statedVendor states GDPR on its trust centre
as of 21 Sep 2026 · confidence 80%VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 14 Oct 2025
- Expires or valid through
- 1 Oct 2027
- Scope
- Loyalty Juggernaut Inc. ("LJI") processes personal data in accordance with the Data Privacy Framework(s) for the purpose of delivering and supporting its SaaS offerings, GRAVTY®, which is a loyalty and customer engagement platform used by enterprise clients ("Customers") to manage their loyalty programs. LJI acts as a data processor, processing personal data solely on behalf of and under the instructions of its Customers, who serve as data controllers. The types of personal data processed typically include information related to the Customers' loyalty program members ("Members"), such as names, email addresses, phone numbers, dates of birth, gender, transactional data, etc. The specific data collected and stored is determined by the Customer, depending on their program needs. LJI discloses personal data to a limited set of authorized third-party sub-processors, strictly for service delivery and support. All third-party service providers undergo privacy and security due diligence and are bound by contractual obligations to meet LJI's data protection standards. LJI may also process limited personal data of employees, job applicants, or contractors located in the EU, Switzerland, or other jurisdictions, solely for human resources and internal administrative purposes.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Loyalty Juggernaut, Inc.: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 d9e716bf85 |
Data Privacy Framework list Official registry · HTTP 200 | 5 Oct 2026 | Loyalty Juggernaut, Inc.: Inactive | Live pagesha256 04d2bb49d0 |
Data Privacy Framework list Official registry · HTTP 200 | 29 Sep 2026 | Loyalty Juggernaut, Inc.: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 208d3adfde |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Loyalty Juggernaut GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Research and data providers category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Icertis
Research and data providers
The Icertis platform delivers an enterprise–wide contract intelligence layer that understands business and industry context – connecting
CodeSignal
Research and data providers
Discover the agentic skills intelligence platform that helps teams see, measure, develop, and grow skills clearly with
Introhive
Research and data providers
Introhive is a Relationship Intelligence Platform that empowers firms to automate CRM data entry, enrich and maintain CRM data quality, and
Meltwater News
Research and data providers
Turn media monitoring, social listening and AI signals into actionable intelligence with
ActivTrak
Research and data providers
ActivTrak’s work intelligence helps leaders understand how work gets done across people, tools and
Crucial Data Solutions
Research and data providers
TrialKit is a unified eClinical platform with embedded intelligence that helps sponsors and CROs design, build, manage, and analyze
DomainTools
Research and data providers
DomainTools provides DNS-based threat intelligence covering 97% of internet
VisibleThread
Research and data providers
Full-lifecycle RFP intelligence, traceable AI insights, and security without
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read