Redactable
GDPR evidence
AI-powered document redaction software that automatically finds and removes sensitive
No public evidenceRedactable and GDPR
CertReports found no public GDPR evidence for Redactable as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 4 Aug 2025
- Scope
- Redactable provides a cloud-based platform that enables customers to redact sensitive content from digital documents. The personal data we process is used solely to deliver, maintain, support, and improve our redaction services, including: • Authenticating user accounts and providing secure access • Managing billing and customer support • Facilitating document upload, redaction, and storage workflows • Monitoring service usage and system performance • Meeting contractual obligations and complying with applicable legal requirements We do not use customer data for advertising, profiling, or other secondary purposes. Categories of Personal Data Processed 1. Customer/User Data: o Name, email address, phone number, billing information, and account credentials o Preferences, usage activity, and communication logs related to service access 2. Uploaded Document Content: o Content within documents submitted by users for redaction, which may incidentally include personal data such as names, contact information, identification numbers, or other sensitive data o This data is treated as confidential and is processed solely to fulfill the document redaction services requested by the user 3. Website & App Visitor Data: o IP address, browser/device metadata, and cookie identifiers for analytics, performance, and security purposes 4. HR Data (if applicable): o Personal data of EU/UK/Swiss-based employees or job applicants processed in the context of HR operations (e.g., recruitment, payroll, and internal systems) Third Parties & Disclosures Redactable discloses personal data to third parties only under the following conditions: • Authorized Subprocessors: Cloud infrastructure providers, analytics platforms, support software vendors, and payment processors under written contracts with appropriate DPF and GDPR-equivalent safeguards • Legal Requirements: Where necessary to comply with lawful requests by public authorities, including to meet national security or law enforcement obligations • Mergers or Acquisitions: In the context of corporate transactions, subject to standard confidentiality obligations Safeguards and Accountability • All personal data is processed in accordance with our DPF commitments, our Privacy Policy, and applicable regulatory requirements. • We have implemented technical and organizational safeguards aligned with our SOC 2 Type II and HIPAA compliance obligations. • We retain personal data only as long as necessary for the stated purposes or as required by law or contract.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Redactable: Inactive | Live pagesha256 067068cda9 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Redactable GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags) whose GDPR row is verified or vendor-stated, ranked by similarity.
No same-category vendor has GDPR evidence in the index yet.