Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Merge API
GDPR evidence
Merge is the infrastructure layer for production
Vendor-statedMerge API and GDPR
Merge API states it holds a data processing agreement. CertReports captured this on 21 Sep 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.
Evidence
Vendor-statedVendor states GDPR on its trust centre
as of 21 Sep 2026 · confidence 80%VerifiedActive: EU-US Certification, UK Extension Certification, SW-US Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 27 Dec 2023
- Expires or valid through
- 10 Dec 2026
- Scope
- Nature of the processing Merge offers a Unified API which provides integration services between joint systems that a controller chooses and made available by processor or subprocessor as the case may be. Purpose(s) of the data transfer and further processing: Merge provides its proprietary, Software-as-a-Service solution for integrating HR, payroll, recruiting, and accounting platforms to Customers (Party that purchases a Subscription to the Service) and End Customers (The Customer’s customer that enables integration between the Service and Partner’s platform in order for Merge to Process the End Customer’s Personal Data for the benefit of the Customer). The purpose of the processing is for the processor/subprocessor to provide these specific services to a controller (or on their behalf). Categories of data subjects whose personal data is transferred: Customer and its end users (e.g., account holders, job applicants, end-customers, prospective customers, employees, contractors, suppliers and end-users of the data exporter and the data exporter’s customers, vendors and partners). Categories of personal data transferred: Categories of personal data chosen by a controller and issued to processor or subprocessor as the case may be, via the Service (e.g., ATS, HRIS and Accounting related personal data): such as name, address, email, phone number, authentication information, work history, transactional and account information, pay rate and tax information, health plan information, gender, marital status, veteran status.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Merge API, Inc: Active: EU-US Certification, UK Extension Certification, SW-US Certification | Live pagesha256 a547337113 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Merge API GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 22 Sep 2026DPA changedThe data processing agreement URL changed.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Developer tools category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Paragon
Developer tools
The embedded integration platform for SaaS apps.
Mem0
Developer tools
The Memory layer for AI Agents
LiveKit
Developer tools
An open source framework and developer platform for building, testing, deploying, scaling, and observing agents in
Nango
Developer tools
A single API for all your integrations
Postman
Developer tools
Postman is an API platform for building and using
Retool
Developer tools
Build internal tools fast.
RecruitiFi
Developer tools
One platform for the extended workforce: permanent, contingent, and
zeroheight
Developer tools
The design system layer for coding agents
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read