Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
OrangeHRM
GDPR evidence
OrangeHRM Inc. is an HR software company based in Secaucus, New Jersey which develops a human resource management system
No public evidenceOrangeHRM and GDPR
CertReports found no public GDPR evidence for OrangeHRM as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 21 Jan 2020
- Expires or valid through
- 13 Mar 2027
- Scope
- What Information Do We Collect Customer may submit Personal Data to the Services, the extent of which is determined and controlled by Customer in its sole discretion, and which may include, but is not limited to the categories of Personal Data listed below based on the OrangeHRM modules purchased; - Employee Management: Personal contact details, including name, title, addresses, telephone numbers, and personal email addresses. Date of birth, Gender, Marital status and dependants, emergency contact information, National Insurance/Social Security number, Bank account details, payroll records and tax status information, Salary, annual leave, pension and benefits information, Location of employment or workplace, driving license, Recruitment information (including copies of right to work documentation, references and other information included in a CV or cover letter or as part of the application process), Employment records (including job titles, work history, working hours, training records and professional memberships), Photographs, Qualifications(Work Experience - Former employement details, Educational, Qualifications, Skills, Languages, Professional & Social license details), Passport & Visa details, Memberships (Membership details & subscriptions), Assets ( Assest details tracking with assignment). - Performance:Employee performance information, such as performance reviews and ratings. Employee trackers with their feedback. - Goals:Employee goals, objectives, and their progress & feedback tracking. - Leave:Employee leave information, including the type of leave and any relevant medical reports, should be attached as necessary. - Time and Attendance: Employee attendance information (Punch In/Out, Attendance reports, working hours) - Career development: Individual career development plan details with desired goals & their progress tracking. - Training:Course info, enrollments, attendance, results, certificates. - Request Desk:Requester info, request details, attachments, workflow status. - On/offboarding:Personal details that are required for the employee management, reference details, employment info, relevant document uploads such as educational & professional qualifications, proof-of-address, photo ID, onboarding checklists & tasks, acknowledgments, exit checklists & tasks. Recruitment:Candidates' resumes and their personal information, such as name, address, telephone number, mobile number, and email address, as well as interviewer notes on the candidate and results of tests that may have been performed. - Disciplinary:Employee disciplinary information, such as warning letters. - Surveys:employee responses to corporate surveys. - Rosters:work patterns, including punctuality data Any other information applicable to candidates, workers, contractors, and employees Why and how does OrangeHRM use customer information? In accordance with the relevant agreement between the Customer and OrangeHRM, OrangeHRM may access customer data within OrangeHRM for the purposes of providing the service, preventing or addressing service or technical problems, responding to support issues, responding to the customer’s instructions, or as may be required by law. OrangeHRM may process anonymized data to troubleshoot customer-specific issues and for quality control purposes. OrangeHRM may process anonymized data to track how the Service’s various components are used. This information is used to drive feature development and service enhancements as well as to provide recommendations on how our products and services can add value for you. OrangeHRM does not sell your information to any party under any circumstances, and OrangeHRM is not responsible for any PII data sold by the data controller. OrangeHRM will access customer data from server backends or the customer software instance whenever required.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | OrangeHRM: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 7fdbdfcf86 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is OrangeHRM GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Developer tools category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read