How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
Qualtrics
GDPR evidence
Qualtrics is a Software-as-a-Service (SaaS) who provides a platform for creating and distributing online surveys, performing employee
No public evidenceQualtrics and GDPR
CertReports found no public GDPR evidence for Qualtrics as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 13 Dec 2016
- Expires or valid through
- 24 Apr 2027
- Scope
- Generally, Qualtrics utilizes personal data to deliver and enhance its services, communicate with individuals about our services, and improve, monitor, and personalize the services delivered to individuals. The processing activities will vary depending on the services provided and how an individual engages with our services, but in general, Qualtrics may process personal data to engage in research and development activities; marketing and advertising activities; compliance and protection activities; and to train artificial intelligence tools. Disclosure of personal data to third-party entities may occur in various circumstances, such as upon the data subject's request, to ensure the delivery of our services, or as required by law. Recipients may include service providers, professional advisors, business transferees, advertising partners, and/or various authorities including law enforcement, government authorities, and private parties. This summary reflects the detailed practices outlined in Qualtrics' Privacy Statement.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | Qualtrics, LLC: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 aeaf9e7f52 |
ExpiredInactive
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 28 Feb 2017
- Scope
- PURPOSE OF DATA COLLECTION Clarabridge gathers Personal Data about customers, prospective customers, and employees. We obtain information that you provide to us, or that we receive when you interact with us directly, for instance purchasing, using, or requesting information about our products and services; engaging with our staff or registering to attend one of our events or webinars or requesting a product demonstration, including from our affiliates in the EU and Switzerland. In our role as a service provider to our customers, we collect and process personal information in accordance with our customers’ instructions. We also gather and process personal data concerning our current, former, and prospective employees (including temporary workers, non-employees, contractors and job applicants) when they apply for a job at Clarabridge, when they complete employment forms or other information requests, when we complete third party background checks and as they work for Clarabridge. HR AND NON-HR DATA DESCRIPTION: Clarabridge gathers Personal Data about customers, prospective customers, and employees. We obtain information that you provide to us, or that we receive when you interact with us directly, for instance purchasing, using, or requesting information about our products and services; engaging with our staff or registering to attend one of our events or webinars or requesting a product demonstration, including from our affiliates in the EU and Switzerland. In our role as a service provider to our customers, we collect and process personal information in accordance with our customers’ instructions. We also gather and process personal data concerning our current, former, and prospective employees (including temporary workers, non-employees, contractors and job applicants) when they apply for a job at Clarabridge, when they complete employment forms or other information requests, when we complete third party background checks and as they work for Clarabridge.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | Clarabridge, Inc.: Inactive | Live pagesha256 bbf3fa1c88 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Qualtrics GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 19 Sep 2026Trust centre movedTrust centre URL is now https://trust.qualtrics.com/.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Form builders and surveys category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Understand GDPR evidence
All articlesExplainers
The EU-US Data Privacy Framework, explained for vendor reviews
Solomon Amos · 7 Sep 2026 · 10 min read