Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Ontraport
GDPR evidence
Ontraport is a "business automation software for entrepreneurs, solopreneurs and small businesses" that incorporates tools like CRM
No public evidenceOntraport and GDPR
CertReports found no public GDPR evidence for Ontraport as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 14 Feb 2018
- Expires or valid through
- 1 Dec 2026
- Scope
- Our service is a CRM platform. Data is only collected and stored at the direction of our clients (the Data Controllers) and they may collect and store any information they are legally allowed to store in our system. We do not control what data our customers store. We process customer information. We can see when they log in to their accounts along with the paths (URLs) they visit and buttons they click while logged in to the application. This information is shared with the following subprocessors. 1. Pendo - This aggregates customer paths through the application so we can analyze trends and where there may be friction interacting with features. 2. Fullstory - This helps us view actions taken in the application by users to pinpoint when an error or mistake occurred to support bug resolution 3. Opensearch - We provide activity logs to our customers. This allows them to see which records in their account opened and clicked emails, viewed URLs etc. We also provide logs showing what marketing automation ran for their records. This includes things like tracking when an email was sent, how the email was scheduled, and changes to record information etc. This is all sent to opensearch for storage and provided to the customer when interacting with their account.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Ontraport Inc: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 e4ceda31d5 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Ontraport GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the No-code and automation category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Celigo
No-code and automation
Build, run, and govern automation on one
InRule Technology
No-code and automation
InRule brings together business rules, process automation, and AI to design, test, and deploy governed decisions that meet regulations
Katalon
No-code and automation
Katalon True Platform unifies test management, automation, execution and production
Sendoso
No-code and automation
Automate personalized gifting campaigns to drive
n8n
No-code and automation
n8n is a workflow automation platform and the Berlin company, n8n GmbH, that develops it
Jitterbit
No-code and automation
Ignite business productivity with data orchestration, iPaaS, workflow automation, and low-code app development solutions—all on one unified
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read