No public evidenceOnapsis and GDPR
CertReports found no public GDPR evidence for Onapsis as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 20 Mar 2019
- Scope
- Personal data of customers and partners will be used for contract management, sales administration, Onapsis customer portal access, product updates, and responding to product support requests. This allows Onapsis to fulfill our contractual obligations to customers and partners and to support those business relationships. Onapsis may also use personal data for marketing purposes where it has consent or legitimate interest in doing so. Onapsis may, from time to time, contact customers, partners and prospects to keep them informed about our products and services, special offers, events or our partners’ products and services. Onapsis may collect information about the use of the Onapsis website such as the types of information accessed and how many users we receive daily. Onapsis may use this data for statistical analysis, marketing, or similar promotional purposes, all as described in its Privacy Policy. Onapsis generally process employees personal data because it is necessary to implement an employment agreement between them and Onapsis, and where our legal duties as an employer require it.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Onapsis, Inc.: Inactive | Live pagesha256 063ae0aea4 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Onapsis GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Security category) whose GDPR row is verified or vendor-stated, ranked by similarity.
