No public evidenceRubrik and GDPR
CertReports found no public GDPR evidence for Rubrik as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 5 Dec 2019
- Expires or valid through
- 14 Oct 2026
- Scope
- We are a business to business and collect names, phone numbers, mailing and email addresses ("Contact Data") of customers' employees and potential customers' employees. For users of our website and mobile app we also collect internet protocol (IP) address as well as data regarding website usage and mobile device - browser type and version, internet service provider, time zone setting, referring/exit pages, operating system, date/time stamps, clickstream data, and mobile device identifiers. We collect Contact Data data to provide customer services - order fulfillment, help, troubleshooting, relationship maintenance etc. - and information regarding our products and services to both current and potential customers. We may disclose Contact Data to service providers or sub-processors to fulfill product orders, deliver services, provide IT support and security services. We may also disclose Contact Data with consent i.e. customer testimonials or in the even of merger, acquisition or upon legitimate request of a proper authority such as a court or enforcement agency. For our website and mobile devices, we use the data to optimize our website for content, speed and reliability. If a EU website visitor opts-in, we may place a cookie on their device for later online marketing campaigns. For employee data, we process sensitive and non-sensitive employee data for employment related purposes. We may process the data for the following purposes: communication, arbitration, managing general human resources, employee travel, administration of stock and employee benefits, required regulatory compliance, emergency contact, security access and control, and litigation. We disclose the personal information to the following types of third parties: benefits providers, insurance carriers, professional advisors, payroll processors, IT-related companies, government agencies and regulators.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Rubrik, Inc.: Active: EU-US Certification, UK Extension Certification, SW-US Certification | Live pagesha256 da90d5deca |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Rubrik GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Security category) whose GDPR row is verified or vendor-stated, ranked by similarity.
