Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Manychat
GDPR evidence
Manychat is chatbot marketing platform that automate interactive conversations in Instagram, WhatsApp, Facebook Messenger, email and
No public evidenceManychat and GDPR
CertReports found no public GDPR evidence for Manychat as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 3 Sep 2024
- Expires or valid through
- 25 Aug 2027
- Scope
- Customer/client data (controller) Purposes: entering into and performing the customer agreement; account management; billing, accounting, tax, and audit; compliance with applicable laws, including sanctions laws; customer support; and sales and marketing communications. Data: user ID, name, email address, account status, linked pages and accounts, products in use, location, gender; business contact details (full name, job title, company, email address); credit card details (last four digits of the card number), account details and payment information; content of support requests, emails and messages; IP address, geographic location, browser and device data, and usage and log data. Visitor data (controller) Purposes: responding to inquiries, demo requests, and form submissions; newsletter subscriptions; event registration and follow-up; advertising measurement and analytics. Data: name, contact details, company, job title, communication preferences, form content, IP address, cookie and device identifiers, pages viewed, and event photography. Customer Content (processor, on customer instructions) Purposes: providing the Service and support to the customer; error and incident tracking; ensuring the security, accessibility, and usability of the Service. Data: end users - name, email address, social media profile information, linked pages and accounts, IP address, geographic location, usage and cookie data, and payment information. Subscribers - name, photo, date of birth, gender, geographic location, social media profile information, chat history and message content, chatbot usage data, IP address, and browser data. HR data (controller) - job applicants. Purposes: assessing skills, qualifications, and suitability for a role; interviewing; background and reference checks; verifying work eligibility; and maintaining a talent pool with consent. Data: name, contact information, CV and cover letter, employment history, qualifications and professional background, references, interview feedback and test results, identification details, nationality and work eligibility documents, and optionally gender, ethnicity, and disability status. Third parties. Manychat discloses personal data to service providers and sub-processors, to third-party platforms and integrations connected by the customer, to recruitment platforms and background check providers (HR-data only), to Manychat affiliates, to professional advisors, to public authorities where required by law, and to an acquirer in a merger, sale, or similar event. An itemized list of sub-processors, service providers, and affiliates, with entity names and locations, is maintained at https://manychat.com/legal/service-providers.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Manychat: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 faaa5b173e |
Data Privacy Framework list Official registry · HTTP 200 | 12 Oct 2026 | Manychat: Inactive | Live pagesha256 54b856342c |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Manychat GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports2 evidence rows across 2 frameworks entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Marketing category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Attentive Mobile
Marketing
Learn more about Attentive—the SMS and email platform that brings your customer interactions to life with advanced
Appcues
Marketing
Appcues is an AI-powered customer engagement platform that triggers in-app, email, and push experiences right when users are paying
Lob
Marketing
Lob is the only automation platform that transforms direct mail into…
Simon Data
Marketing
Simon AI is the Agentic Marketing platform trusted by enterprise
Extole
Marketing
Boost revenue with our enterprise
Beefree
Marketing
Power better email creation with Beefree, the technology behind RGE Studio for marketing teams and Beefree SDK for developers building
Return Path
Marketing
Validity's AI-powered email platform is trained on the world's largest email data network, helping teams send smarter, reduce risk, and
Hightouch
Marketing
The leading Composable CDP and AI Decisioning platform
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read