No public evidenceOro and GDPR
CertReports found no public GDPR evidence for Oro as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 4 Dec 2019
- Expires or valid through
- 28 Jul 2027
- Scope
- Oro Inc. performs the following activities which can involve collecting and processing of private data: - Oro Inc. develops business application platform focusing on CRM and eCommerce (OroCRM, - OroCommerce, and OroPlatform leveraging open source technologies). Oro is a global company and as such has customers in the EU. Oro Inc. provides cloud solutions (OroCloud) allowing customers to host the applications developed by Oro Inc. (OroCRM, OroCommerce, and OroPlatfrom) in the cloud. The detailed purpose of collecting data is described in our Privacy Policy at https://oroinc.com/privacy-policy/The comprehensive and most recent list of the sub-processors of the personal data collected by Oro Inc. sites is provided at https://oroinc.com/subprocessors/ Oro Inc. Data Privacy Framework commitment covers the following types of private data: - Contact data of users registered at oroinc.com, community.oroinc.com and other Oro Inc. corporate sites. - Personal data of OroCRM and OroCommerce customers. - Personal data of users of OroCloud’s customers who decided to deploy their Oro-licensed applications (OroCRM and OroCommerce) in OroCloud. Oro Inc. uses contact information for the news subscription and user authentication at Oro corporate and community sites, and Customer Portal. In the course of providing the SaaS service of OroCRM and OroCommerce solutions for the customers, Oro Inc. may process private information as a part of the data required for customer technical support requests fulfillment, and to provide contracted level of service. Oro Inc. uses Google Cloud Platform (Google LLC) and Oracle Cloud Infrastructure (Oracle Corporation) for hosting, Sendgrid Inc. for email sending, Atlassian Jira Service Desk as the Customer Portal for enterprise customers, QuickBooks (Intuit Inc.) for accounting and Cloudflare for CDN .
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Oro Inc.: Active: UK Extension Certification, EU-US Certification, SW-US Certification | Live pagesha256 0d9b2e41e0 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Oro GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Cloud and hosting category) whose GDPR row is verified or vendor-stated, ranked by similarity.
