No public evidenceParchment and GDPR
CertReports found no public GDPR evidence for Parchment as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 28 Nov 2017
- Expires or valid through
- 22 Sep 2026
- Scope
- Instructure, Inc. provides access to educational software-as-a-service platform. Instructure processes personal data relating to students, schools, users, and other visitors to its website. This data could include end-user data, support data, log diagnostic, analytic data, customer content data and feedback data (e.g. name, email, job title, IP address, metadata). For a complete list of personal data elements processed by Instructure, please see the Information Collection section of our Product Privacy Policy (linked here). Instructure processes this information to: provide its service, support, training, billing, user communications, improving the service, and other internal uses. Instructure contracts with certain companies to provide limited services as part of its offering, such as hosting, analytics, and customer relationship management. Any such providers are permitted to use personal data provided by Instructure solely for the purposes instructed by Instructure.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Instructure, Inc.: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 7f6ee3bfd2 |
- Kind
- listing
- Issued or listed
- 25 Jul 2018
- Scope
- Parchment is dedicated to helping learners turn their credentials into opportunities through the authorized delivery and process of academic and processional credentials. We collect information you choose to provide us through the Site or via email. For example, we obtain information when you create an account, complete a registration form or feedback form, contact us requesting information, purchase our Services, respond to a survey, contact a customer support representative, or opt-in to provide information to one or more of our affiliates through the Site. This information may include personally-identifiable information (for example, names, email addresses, postal addresses, phone numbers), institution-identifiable information (for example, a school name and address), and non-personally identifiable information (for example, graduation year and demographic information, when not associated with your personally-identifiable information). We may also collect other information not sourced from Credentials, including test scores (e.g. SAT, GRE, etc.), which may be collected if you choose to use certain admissions tools available through the Site. If requested by your school in order to correctly identify your Credentials, we may request additional personally identifiable information from you, which may include the last four digits of your social security number. When you use the Services offered on the Site, we may collect non-personally identifiable information regarding your use of the Services, including any communications made or transactions entered into by you. Any Identifiable Information that we collect is used to (i) facilitate the provision of Services that you may order and any related transactions, (ii) personalize your account, (iii) maintain and customize the Services, (iv) develop new Company services for users like you, and (v) allow communication between Parchment (its affiliates and service providers) and you.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Parchment LLC: Inactive | Live pagesha256 011b906c6c |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Parchment GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Education category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Education vendor has GDPR evidence in the index yet.