Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
QuestionMark
GDPR evidence
Questionmark ® provides technologies and services that enable organizations to measure knowledge, skills, and attitudes securely and
No public evidenceQuestionMark and GDPR
CertReports found no public GDPR evidence for QuestionMark as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: UK Extension Certification, EU-US Certification, SW-US Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 1 Nov 2016
- Expires or valid through
- 14 Jul 2027
- Scope
- Questionmark offers an assessment management system software as a service offering whereby organizations can purchase our service and then create, deliver and report on assessments (tests, quizzes, surveys and exams) within our service. We collect personal data on customers and prospective customers as part of our marketing efforts. And in our services to customers, we act as a data processor where we process assessment data including assessment results and scores and identity and other information shared through the assessment process. Our policies for sharing data are set out in our privacy policy.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Questionmark Corporation: Active: UK Extension Certification, EU-US Certification, SW-US Certification | Live pagesha256 cc9d04555d |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is QuestionMark GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports3 evidence rows across 3 frameworks entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Education category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Docebo
Education
Docebo’s AI-powered LMS helps world-class organizations train employees, partners, and customers on a unified
Magic School
Education
Transform teaching and learning with an AI platform built for school
Digication
Education
AI-powered platform giving institutions the assessment data, accreditation evidence, and student retention signals needed to make learning
StudyStash
Education
StudyStash: ethical, AI-powered adaptive learning built on neuroscience to improve outcomes for students, universities and
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read