Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Vendor-statedNeon and GDPR
Neon states it holds a data processing agreement. CertReports captured this on 21 Sep 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.
Evidence
Vendor-statedVendor states GDPR on its trust centre
as of 21 Sep 2026 · confidence 80%Vendor-statedVendor states ISO/IEC 27701 on its trust centre
as of 21 Sep 2026 · confidence 80%ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 17 Oct 2023
- Scope
- We use Personal Data to enter into business relationships with prospective customers and to perform the contractual obligations under the Agreements that we have with existing Customers. Personal Data about our customers includes: Identifiers: names, email addresses, mailing addresses, and phone numbers. We may obtain these either directly from the data subject or via a third party. Commercial Information: Account records are collected directly from the data subject when they set up or maintain their account with our platform. Internet or Network Information: We record data like browsing and search history directly from the user's device when they interact with our platform. Geolocation Data: This is extracted from the user's device, predominantly through IP address. Financial Information: Payment details or financial account numbers are processed to facilitate transactions on our platform. Inferences: instances when Data Subjects interact with us online, by phone, or mail in the context of receiving help through our help desks or other support channels; participation in customer surveys or contests; or in providing the Services. We may share personal data with: Partners: To help us perform statistical analysis, provide sales support, or provide customer support. Co-marketing: we also partner with trusted third parties to provide co-marketing content that we think may be relevant to our customers. Service Providers: To provide the services. This can include payment processors, cloud service providers, marketing agencies, and customer support platforms, among others. If we (or our assets) are acquired by another company, whether by merger, acquisition, bankruptcy or otherwise, that company would receive all information gathered by Neon via providing the Services.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Neon Inc.: Inactive | Live pagesha256 b1eb40a540 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Neon GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 22 Sep 2026DPA changedThe data processing agreement URL changed.
- 19 Sep 2026First indexed by CertReports7 evidence rows across 7 frameworks entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Data platforms category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Prisma Data
Developer tools
Prisma gives TypeScript and Node.js teams Prisma ORM, Prisma Postgres, and Prisma Compute: a type-safe ORM, managed Postgres, and Compute
Upstash
Data platforms
Serverless Redis, Vector and Search databases with low latency and pay-as-you-go
PlanetScale
Data platforms
PlanetScale offers the worldâs fastest and most scalable cloud hosting for Vitess, Neki, and
Coalesce
Data platforms
Coalesce is the data operating layer where humans and AI agents build, govern, and observe data together, in one governed
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read