No public evidencePactSafe and GDPR
CertReports found no public GDPR evidence for PactSafe as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 17 Sep 2026 · confidence 100%- Kind
- listing
- Issued or listed
- 9 Apr 2019
- Expires or valid through
- 5 Feb 2027
- Scope
- Intellistack processes personal data of prospective customers, resellers, and individuals whose information is collected through forms created or used by customers, as well as customer personnel contact details provided in connection with contracting and account administration. Intellistack processes this data to provide, operate, support, secure, and improve its services; to manage customer relationships (including billing, customer support, and communications); and to comply with legal obligations. Processing may include automated workflows configured by customers that route, transmit, or store personal data within the services and to integrated systems. Intellistack may transfer personal data to service providers and other third parties as necessary to provide the services, maintain and secure the services, process payments, provide support, and comply with applicable law, in each case consistent with applicable contractual and legal requirements.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Intellistack: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 d661b4fc92 |
VerifiedActive: EU-US Certification, UK Extension Certification, SW-US Certification
as of 17 Sep 2026 · confidence 100%- Kind
- listing
- Issued or listed
- 13 Oct 2016
- Expires or valid through
- 21 Aug 2027
- Scope
- To investigate for erroneous supplier overpayments and to evaluate vendors with respect to risk. Types of personal data: Vendor and/or employee name, address, telephone number, tax payer ID number, bank account information APEX Analytix, LLC (“APEX”) may share personal information with third parties for the purposes denoted in parentheses: 1) as a physical data center facility, 2) as a disaster recovery back-up, 3) for general application support services, 4) for the provision of the U.S. bank account validation services, and 5) for intermediary services providing the Early Warning Services (“EWS”) to APEX.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Apex Analytix, LLC: Active: EU-US Certification, UK Extension Certification, SW-US Certification | Live pagesha256 ba30ff0727 |
VerifiedActive: UK Extension Certification, EU-US Certification, SW-US Certification
as of 17 Sep 2026 · confidence 100%- Kind
- listing
- Issued or listed
- 30 Nov 2016
- Expires or valid through
- 2 Sep 2027
- Scope
- Pantheon is a website management platform. Pantheon uses the information that we collect to set up the Services for users and to improve the Site. We may also use the information to contact users and visitors to further discuss their interest in the Site and the Services, or to send users and visitors information regarding Pantheon or its partners, such as new features, promotions, and events. We may also e-mail users information regarding updates to the Services or the Site. Types of personal data processed are customer and visitor names, email addresses, and, with respect to customers, login credentials. Pantheon collects information an individual submits when applying for a job on Pantheon's career page. This information may include an individual's name, email address, phone, cover letter, resume/CV, LinkedIn profile and/or website. Pantheon collects this information for its everyday business purposes, including, specifically, assessing an individual's application for employment. Pantheon may share this information with third party service providers and Pantheon group companies who are required to use the information solely for the purpose for which it is disclosed, to protect the confidentiality of such information and to handle the information in the same manner as stated in Pantheon's Privacy Policy.]c
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Pantheon Systems, Inc.: Active: UK Extension Certification, EU-US Certification, SW-US Certification | Live pagesha256 094d34a6dd |
ExpiredInactive
as of 17 Sep 2026 · confidence 100%- Kind
- listing
- Issued or listed
- 14 Jul 2017
- Scope
- PactSafe only collects personal data relevant to electronic terms or contract acceptance passed to us as a processor for our customers. Such information generally includes, but is not limited to names, addresses, company names, work titles, and e-mail addresses. As for third parties, PactSafe works with four types of organizations. Service Providers: We will share your Personal Data, such as name and e-mail, with service providers who are working with us in connection with the operation of the Services. These service providers have access to your Personal Data only to perform services on our behalf and are obligated not to disclose it or use it for any other purposes. Business Transfers: As we develop our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution or similar event, Personal Data may be part of the transferred assets. Agents, Consultants and Related Third Parties: PactSafe, like many businesses, sometimes hires other companies to perform certain business-related functions. Examples of such functions include mailing information, maintaining databases and processing payments. When we employ another company to perform a function of this nature, we only provide them with the information that they need to perform their specific function. Legal Requirements: PactSafe may disclose your Personal Data if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend the rights or property of PactSafe, (iii) act in urgent circumstances to protect the personal safety of users of the Services or the public, or (iv) protect against legal liability.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | PactSafe: Inactive | Live pagesha256 2c9982fca5 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is PactSafe GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Legal tech category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Legal tech vendor has GDPR evidence in the index yet.