Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Prezi
GDPR evidence
Prezi is a presentation platform for educators, trainers, and
No public evidencePrezi and GDPR
CertReports found no public GDPR evidence for Prezi as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: UK Extension Certification, SW-US Certification, EU-US Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 9 Aug 2023
- Expires or valid through
- 29 Jun 2027
- Scope
- Prezi processes personal data received from the European Union, the United Kingdom, and Switzerland in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. Types of Personal Data Processed Prezi processes customer, client, visitor, and human resources (HR) data. • Customer, Client, and Visitor Data: Includes user account and profile information (such as names, institutional or professional email addresses, and authentication credentials), user-generated content and media assets (including text, images, audio, and video streams embedded in presentations), usage and behavioral metrics, and technical device and infrastructure logs (such as IP addresses and browser metadata). • Human Resources (HR) Data: Includes employee and applicant personal information, including contact details, national identifiers, payroll and financial account details, benefits choices, performance evaluations, employment histories, and qualification credentials. Purposes of Processing • Customer and Visitor Data: Personal data is processed to provision, maintain, and secure Prezi’s cloud-based Software-as-a-Service (SaaS) visual communication platform. This includes executing user authentication, ensuring data persistence, facilitating user collaboration, managing subscription tiers, optimizing network routing, and reviewing system performance logs to troubleshoot application stability. • Human Resources (HR) Data: HR data is processed for corporate administration, recruitment, onboarding, workforce management, processing payroll, administering corporate benefits, conducting performance reviews, maintaining workplace health and safety, and fulfilling legal, regulatory, and tax compliance obligations. Third Parties to Whom Data is Disclosed To support these operations, Prezi discloses covered personal data to specific categories of third-party partners and subprocessors under strict contractual protections: • Cloud Infrastructure and Hosting Providers: Data is disclosed to primary cloud infrastructure vendors, including Amazon Web Services (AWS) and Microsoft Azure, to manage secure data storage, corporate databases, and core application computing. • Content Delivery Networks (CDNs): Encrypted customer data packets and media assets are routed through network optimization partners, specifically Cloudflare, to lower bandwidth latency and cache content globally. • Identity, Access, and Directory Management Systems: Core identifiers are shared with authentication platforms (e.g., Google Workspace, Microsoft Entra ID, and Okta) to facilitate secure federated Single Sign-On (SSO) for both customers and internal personnel. • Technical Monitoring and Logging Vendors: Platform performance metadata and technical error logs are transferred to monitoring systems, including Wiz, Inspector, and Sentry, to track platform uptime and diagnose software bugs. • Human Resources and Payroll Service Operations: Personnel data is shared with specialized HR information systems (HRIS), global payroll processors, tax authorities, benefits administrators, background screening vendors, and corporate insurance carriers to execute standard workforce employment services.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Prezi Inc.: Active: UK Extension Certification, SW-US Certification, EU-US Certification | Live pagesha256 2cd72d467b |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Prezi GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Productivity category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read