No public evidencePubNub and GDPR
CertReports found no public GDPR evidence for PubNub as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 15 Nov 2016
- Expires or valid through
- 24 Apr 2027
- Scope
- DPF Purpose Description (Processor-Focused) PubNub Inc. processes personal data on behalf of its customers in its role as a data processor/service provider. PubNub provides a real-time communications platform that enables customers to build and operate applications featuring messaging, presence, device signaling, and other interactive functionality. What data is processed: The types of personal data processed by PubNub are determined and controlled by its customers and may include, for example, end-user identifiers (such as user IDs, device IDs, or IP addresses), message content, metadata, and other information transmitted through customer applications. PubNub does not independently determine the categories of personal data collected or processed through its platform. Purpose of processing (why): PubNub processes personal data solely for the purpose of providing, maintaining, securing, and improving its services, including transmitting data in real time, enabling application functionality requested by customers, troubleshooting, and ensuring system reliability and security. How data is processed: Processing activities include the collection, transmission, storage (typically short-term and as configured by customers), and delivery of data through PubNub’s global infrastructure. Processing is performed in accordance with customer instructions and applicable contractual terms, including data processing agreements. Third-party disclosures: PubNub may disclose personal data to a limited number of third-party service providers (subprocessors) that support its infrastructure and service delivery, such as cloud hosting providers, content delivery networks, and security and monitoring vendors. PubNub requires such subprocessors to process personal data only for specified purposes and in accordance with applicable data protection obligations. PubNub does not sell personal data and does not disclose personal data to third parties for their own independent use.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | PubNub, Inc.: Active: SW-US Certification, EU-US Certification, UK Extension Certification | Live pagesha256 311a4160ff |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is PubNub GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Communications and CPaaS category) whose GDPR row is verified or vendor-stated, ranked by similarity.
