Skip to main content
Retool logo

Retool

GDPR evidence

Build internal tools fast.

retool.comDeveloper toolsLast verified 2 Nov 2026
Request the report Are you Retool?
GDPR mark, CertReports state Vendor-stated as of 2 Nov 2026Vendor-stated

Retool and GDPR

Retool states it holds a data processing agreement. CertReports captured this on 2 Nov 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.

Evidence

Vendor-statedVendor states GDPR on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
1 Nov 2026GDPR
Live page Snapshotsha256 18c31e5dab
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026GDPR
Live page Snapshotsha256 1fcd2f40ad
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026GDPR
Live page Snapshotsha256 fa5b1b60a4
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026GDPR
Live page Snapshotsha256 2d2fe30585
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026GDPR
Live page Snapshotsha256 e1083a2439
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026GDPR
Live page Snapshotsha256 74755291a5
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026GDPR
Live page Snapshotsha256 a83374af49
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026GDPR
Live page Snapshotsha256 259ff98805
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026GDPR
Live page Snapshotsha256 dbc4157098
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026GDPR
Live page Snapshotsha256 b23289f60d
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026GDPR
Live page Snapshotsha256 af1d58260b
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026GDPR
Live page Snapshotsha256 f8a2e4dcb0
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026GDPR
Live page Snapshotsha256 2bdd6a733d
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026GDPR
Live page Snapshotsha256 8c54981438
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026GDPR
Live page Snapshotsha256 bba4b14b00
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026GDPR
Live page Snapshotsha256 52b7108c9c
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026GDPR
Live page Snapshotsha256 3128b2e4c6
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026GDPR
Live page Snapshotsha256 148ada30be
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026GDPR
Live page Snapshotsha256 40623f1265
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026GDPR
Live page Snapshotsha256 c6667b8567
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026GDPR
Live page Snapshotsha256 12d8556fcd
Retool trust centre (Drata)
Vendor trust centre · HTTP 200
18 Sep 2026GDPR
Live page Snapshotsha256 5de8175c7d
This is wrong
What GDPR means, and what it does not

"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.

Read the GDPR guide and browse all vendors with evidence

Questions buyers ask

Is Retool GDPR compliant?

There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 22 Sep 2026DPA changedThe data processing agreement URL changed.
  2. 18 Sep 2026First indexed by CertReports4 evidence rows across 4 frameworks entered the index.

Alternatives with GDPR evidence

Similar vendors (shared product tags or the Developer tools category) whose GDPR row is verified or vendor-stated, ranked by similarity.

Glide logo

Glide

AI tools

Glide turns spreadsheets into beautiful, intelligent apps.

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedCCPA mark, CertReports state Vendor-stated
3 stated30 Sep 2026
CircleCI logo

CircleCI

Developer tools

CircleCI provides a CI/CD cloud environment for software engineers to test their code and deploy

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedFedRAMP mark, CertReports state VerifiedPCI DSS mark, CertReports state Vendor-statedCSA STAR mark, CertReports state VerifiedDPF mark, CertReports state Verified
3 verified · 4 stated2 Nov 2026
Postman logo

Postman

Developer tools

Postman is an API platform for building and using

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state Verified
2 verified · 10 stated2 Nov 2026
Merge API logo

Merge API

Developer tools

Merge is the infrastructure layer for production

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedDPF mark, CertReports state VerifiedCCPA mark, CertReports state Vendor-stated
1 verified · 5 stated2 Nov 2026
Alpaca logo

Alpaca

Developer tools

API-first stock and crypto brokerage platform

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 3 stated2 Nov 2026
LiveKit logo

LiveKit

Developer tools

An open source framework and developer platform for building, testing, deploying, scaling, and observing agents in

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state VerifiedCCPA mark, CertReports state Vendor-stated
1 verified · 4 stated2 Nov 2026
Netlify logo

Netlify

Developer tools

Create with AI or code, deploy instantly on production

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 27018 mark, CertReports state Vendor-stated
1 verified · 7 stated2 Nov 2026
Prisma Data logo

Prisma Data

Developer tools

Prisma gives TypeScript and Node.js teams Prisma ORM, Prisma Postgres, and Prisma Compute: a type-safe ORM, managed Postgres, and Compute

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 4 stated2 Nov 2026

Understand GDPR evidence

All articles