PA
No public evidencePax and GDPR
CertReports found no public GDPR evidence for Pax as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
ExpiredInactive
as of 17 Sep 2026 · confidence 85%- Kind
- listing
- Issued or listed
- 6 Jan 2020
- Scope
- 1. Personal data related to customers, Pax account holders, prospective customers or account holders, third party vendors, affiliates, and contractors, and users of Pax applications and websites. The collection of personal information such as contact information, age, location, product inquiries or purchases, payment information or payment status, and registered account information facilitates the provision of our goods and services and carrying out other product related services. Information collected may be transferred to business partners, Pax affiliates and third-party service providers performing related services and may furthermore be transferred to regulatory authorities; 2. Personal data related to customers, Pax account holders, prospective customers or account holders, and users of Pax applications and websites who make enquiries regarding Pax products or services and who may be asked to provide personal information in order to provide the requested information, products or services. Personal information provided may be used for the processing of requested transactions, improving the quality of our services, sending communications about our products and services, enabling our business partners and service providers to perform certain activities on our behalf and complying with our legal obligations, policies and procedures. 3. Pax may use the personal information it collects to comply with our legal obligations, policies and procedures and for internal administrative purposes
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Pax Labs Inc: Inactive | Live pagesha256 b42eab7d4c |
ExpiredInactive
as of 17 Sep 2026 · confidence 85%- Kind
- listing
- Scope
- PAX collects data during certain transactions and communications with its customers, including when consumers/users register to use PAX products and services, purchase PAX products and services, register PAX hardware and software, apply for commercial credit, and participate in surveys or contests. Customer data may be transferred from EU-based PAX subsidiaries to PAX (which is located in the United States) for the purposes of marketing, supporting transactions, security, customer and technical support, customer communications, improving PAX products and services, auditing and data analysis. PAX does not share, sell, rent or trade personal data (unless it has been anonymized or de-identified) with third parties for their own promotional purposes. We use third party service providers to offer or facilitate services on our behalf, such as a shipping company to fulfill orders, a credit card processing company to bill consumers/users for goods and services, and an email service provider to send out emails on our behalf. When consumers/users order products from PAX, we will share personal data as necessary for such third-party services providers to provide the applicable service to us or on our behalf. These third parties are prohibited from using any personal data for promotional purposes. We reserve the right to access and disclose personal data when we believe in good faith that such disclosure is necessary to: (a) enforce legal rights and comply with the law; (b) comply with an order from a government entity or other competent authority, (c) prevent or address potential or actual injury or interference with our rights, property, operations, users or others who may be harmed or may suffer loss or damage; (d) protect our rights, prevent fraud and/or comply with judicial proceeding, court order, or legal process served on PAX. We may be required to disclose personal data to government or law enforcement officials in response to a lawful request by a public authority or if we have to do so to comply with a legal obligation, including to meet national security or law enforcement requirements. We can also disclose personal data in order to apply or enforce our terms and conditions or to respond to any claims, to protect our rights or the rights of a third party, to protect the safety of any person or to prevent or prevent any illegal activity (including for the purposes of fraud protection and credit risk reduction).
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | PAX Labs Inc: Inactive | Live pagesha256 8230f8aa10 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Pax GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Procurement category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Procurement vendor has GDPR evidence in the index yet.