No public evidenceSailPoint Technologies and GDPR
CertReports found no public GDPR evidence for SailPoint Technologies as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: SW-US Certification, EU-US Certification, UK Extension Certification
as of 17 Sep 2026 · confidence 100%- Kind
- listing
- Issued or listed
- 10 Aug 2017
- Expires or valid through
- 17 Nov 2026
- Scope
- SailPoint Technologies, Inc. (“SailPoint”) develops identity governance software and cloud identity management services that help organizations manage user access to data and applications in data centers, on mobile devices, and in the cloud. SailPoint’s product portfolio offers an integrated set of identity governance, provisioning, and access management capabilities delivered on-premises or in the cloud. As part of its operations, SailPoint processes personal data of customer users, customer representatives, SailPoint personnel, job applicants, and website visitors. To deliver its identity governance and management services, SailPoint may receive and process personal data controlled by customers, including information about their employees, contractors, partners, and end users. Customers determine which data elements are provided based on their own needs, but categories generally include identification and contact details (e.g., name, address, title), basic employment information (e.g., job role, manager), and IT data such as user IDs, entitlements, and IP addresses. SailPoint also collects necessary business contact details of customer or prospective customer representatives, along with information relating to product preferences, product administration, and transaction-related activity. SailPoint provides a training platform containing educational resources and skills development modules for customer users. In this context, SailPoint processes training-related data such as user names, email addresses, course enrollment and progress, completion status, certifications obtained, and ID verification details. Regarding SailPoint personnel, SailPoint collects and processes personal data about its employees, contractors, and temporary workers (“Personnel”) to manage employment and engagement activities, including onboarding, administering benefits, paying personnel, managing workflows, and supporting business operations. Categories generally include identification and contact information, employment details, payroll or financial information, benefits data, and IT-related data needed for system security and compliance with internal policies. For job applicants, SailPoint processes identification and contact details, professional and educational background, and other voluntarily submitted materials such as references or portfolio documents to manage recruitment and hiring activities, including processing applications, conducting background and reference checks, providing immigration support, and entering into contracts. SailPoint also collects limited personal data from website visitors, including IP addresses, device information, and cookie-derived data, to analyze website performance, support user experience, and assist with marketing and advertising efforts. SailPoint discloses personal data to third parties that support its operations across various functions. For customer users, SailPoint works with third parties essential to delivering its software and services, including hosting and infrastructure providers, product feature and functionality vendors, customer support and communication platforms, application monitoring tools, and security solution providers such as identity verification, two-factor authentication, and malicious activity detection services. These third parties also support customer engagement and training through email, conferencing, messaging, and learning management platforms. SailPoint’s list of subprocessors is available at: https://www.sailpoint.com/legal/sub-processors. For Personnel, SailPoint engages third parties for HR administration, including payroll processing, benefits administration, and HR management platforms. For job applicants, SailPoint works with third-party hiring agencies, HR and recruitment platforms, and background-screening providers to manage applicant data, conduct background checks, verify employment history, and coordinate recruitment and interview scheduling.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | SailPoint Technologies, Inc.: Active: SW-US Certification, EU-US Certification, UK Extension Certification | Live pagesha256 cf1f78b65c |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is SailPoint Technologies GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Identity and access category) whose GDPR row is verified or vendor-stated, ranked by similarity.
