Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Pancake Laboratories
GDPR evidence
Create high-converting landing pages, pop-ups, forms, and contests in minutes — no coding
No public evidencePancake Laboratories and GDPR
CertReports found no public GDPR evidence for Pancake Laboratories as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 9 Dec 2016
- Expires or valid through
- 6 Jul 2027
- Scope
- The personal data transferred concern the following categories of data: Personal Data, to the extent of which is determined and controlled by the Data exporter in its sole discretion, may be submitted, stored, sent, or received by end users via the Pancake Service submitted to the Pancake Services, and which may include, but is not limited to the following categories of Personal Data: 1. First and last name 2. Professional information (Title, Position, Employer) 3. Contact information (email, phone, physical address) 4. Personal life data 5. Application integration data 6. System Usage data 7. Other electronic data Nature of the processing The personal data transferred will be subject to the following basic processing activities: The data importer will host and process Personal Data in the course of providing its cloud-based Services to data exporter pursuant to the Agreement. Purpose(s) of the data transfer and further processing To provide Services to data exporter pursuant to the Agreement, including technical, customer support, operations and administrative services. The period for which the personal data will be retained, or, if that is not possible, the criteria used to determine that period Until Termination of Service, which results in a deletion of data exporter’s account, or on data exporter’s written request that Pancake destroy any Personal Data that is within its control. For transfers to (sub-) processors, also specify subject matter, nature and duration of the processing Until Termination of Service, which results in a deletion of data exporter’s account, or on data exporter’s written request that Pancake destroy any Personal Data that is within its control. -- These sub processors handle data our customers collect from their data subjects Amazon Web Services, Inc. — Washington, USACloud computing service that hosts the ShortStack platform. Twilio SendGrid — San Francisco, USACloud-based email delivery platform. (Only applies to customers who use ShortStack’s email marketing system.) Maetzler Rechtsanwalts GmbH & Co KG and Prighter Ltd dba Prighter Group — Vienna, Austria and London, United KingdomPrivacy representative in the EU and the UK for data protection matters. (Only has information about customers’ data subjects if the data subject submits information to exercise their privacy rights.) Airbrake Technologies, Inc. — Austin, Texas, USAError and performance monitoring software used for quality assurance. Better Stack — NY, USA logging software used for performance monitoring and quality assurance. These sub processors handle data we (ShortStack) collect about our customers Amazon Web Services, Inc. — Washington, USACloud computing service that hosts the ShortStack platform. Zendesk, Inc — California, USASupport desk services for ShortStack customers to submit questions and request help via email or chat. Mixpanel, Inc. — California, USAProduct analytics software for learning about ShortStack customers and what actions they take within the ShortStack platform. Mailmodo Technologies Inc. — Delaware, USA Cloud-based email delivery platform for transactional and marketing emails to ShortStack customers. SendGrid, Inc. — Colorado, USACloud-based email delivery platform for transactional emails to ShortStack customers. Maxio LLC — Texas, USAPayment processor for ShortStack customer subscriptions. Qualys, Inc. — California, USASoftware for scanning ShortStack’s servers for security vulnerabilities. Userflow, Inc — San Francisco, California, USAPlatform for providing product tours and customer success information to ShortStack users. Moodle Pty Ltd — West Perth, Western Australia, AUOnline learning management system used by ShortStack for ShortStack University offering. PartnerStack, Inc. — Toronto, Ontario, CanadaPartner program software to track sign-ups sent to ShortStack from our partners. Maetzler Rechtsanwalts GmbH & Co KG and Prighter Ltd dba Prighter Group — Vienna, Austria and London, United KingdomPrivacy representative in the EU and the UK for data protection matters. (Only has information about ShortStack customers if the customer submits information to exercise their privacy rights.) Airbrake Technologies, Inc. — Austin, Texas, USAError and performance monitoring software used for quality assurance. Better Stack — NY, USA logging software used for performance monitoring and quality assurance
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Pancake Laboratories Inc: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 e19efb0031 |
Data Privacy Framework list Official registry · HTTP 200 | 5 Oct 2026 | Pancake Laboratories Inc: Inactive | Live pagesha256 19ca84eb6a |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Pancake Laboratories GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Marketing category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Vidyard
Marketing
Vidyard is an online video platform for business which allows you to increase leads, accelerate your pipeline and delight your
Bitly
Marketing
Bitly makes it easy to create, share, and track short links and QR
Yotpo
Marketing
We're on a mission to provide brands with everything they need to create winning customer experiences, from discovery to
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read