How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
Sauce Labs
GDPR evidence
What is Sauce Labs? Sauce Labs makes software work for everyone, when they want it
Vendor-statedSauce Labs and GDPR
Sauce Labs states it holds a data processing agreement. CertReports captured this on 30 Sep 2026 from its trust centre (Vanta); it is a vendor statement, not an independent confirmation.
Evidence
Vendor-statedVendor states GDPR on its trust centre
as of 30 Sep 2026 · confidence 90%Vendor-statedVendor states ISO/IEC 27701: 2019 on its trust centre
as of 30 Sep 2026 · confidence 90%VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 4 Sep 2020
- Expires or valid through
- 17 Jun 2027
- Scope
- Sauce Labs offers our website, products and Services to business customers. Our Services are not intended or suited for children. We use the following categories of personal information for the following purposes: Contact Data to communicate with you in relation to your account. Account Data to: (i) create an account for you or the organization for which you work; (ii) manage the account; (iii) fulfill your orders for products and services; and (iv) provide you with customer service and technical assistance. Correspondence Data to respond to any specific comments or questions you may have. Technical Data and Usage Data to: (i) provide, maintain, monitor, secure, debug, customize and optimize our Services; (ii) provide you with customer service and technical assistance; and (iii) develop and improve our products and services. Publicly Available Information to supplement the other personal information we hold about you in support of our sales and marketing activities. We also use your personal information for the following purposes, as permitted by applicable law: Performance of Contracts: To perform our obligations and exercise our rights under our Terms of Service or any other agreement relating to our Services that you conclude with us. Compliance with Laws: To perform activities necessary to ensure compliance with applicable national, state, provincial and other applicable laws, and to respond to requests from government authorities. Protection of Legal Interests: To protect the legal interests, health or safety of a user, us, or other third parties, such as in the event of a complaint or dispute, or to perform credit recovery procedures or credit assignments to authorized third parties. Marketing Activities: As permitted by applicable law, including with your consent where required, we may use your contact information to provide you with marketing communications, promotional offers and updates on new products and services. Special Events: If you register for and attend Sauce Labs events, such as SauceCon, Sauce Labs will process your personal information for the purposes of administering, securing, optimizing, and running the event, as well as improving on future events. Merger or Sale: In the event that we, or some or all assets related to our Services are acquired by or merged with a third-party entity or in connection with a merger, acquisition, sale, or other change of control, we may transfer some or all of the personal information that we have collected about you to another organization as part of that transaction. If we intend to transfer your personal information in connection with such a transaction, we may proceed with notice to you, grant you an opportunity to object, or seek your consent, as permitted or required by applicable law. Information about our customers is an important part of our business, and we are not in the business of selling it to others. We share your personal information only as described below and in accordance with applicable law. Service Providers: We employ our affiliated and other unaffiliated companies and individuals to perform functions on our behalf, such as to send email, remove repetitive information from customer lists, analyze data, provide marketing assistance, provide search results and links (including paid listings and links), process credit card payments, and provide customer service. They have access to personal information needed to perform their functions, but may not use it for other purposes. Affiliates: We share your personal information with our affiliates to help fulfill sales, respond appropriately to requests and to improve our and their services and business practices. A list of our operating affiliates and their addresses is available here. Event Sponsors: Sauce Labs works with various sponsors to hold special events such as SauceCon. If you consent and direct us to do so, we will share your personal information with these sponsors for purposes as needed.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Sauce Labs: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 066764f6a2 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Sauce Labs GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026Subprocessor added: Amazon Web Services, Inc.Amazon Web Services, Inc. appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Atlassian/JiraAtlassian/Jira appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: BeamerBeamer appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Confluent/KafkaConfluent/Kafka appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Fivetran/EtleapFivetran/Etleap appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Google Cloud PlatformGoogle Cloud Platform appeared on the subprocessor list.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Developer tools category) whose GDPR row is verified or vendor-stated, ranked by similarity.
testRigor
Developer tools
Executable specifications in English for test automation
CircleCI
Developer tools
CircleCI provides a CI/CD cloud environment for software engineers to test their code and deploy
Meticulous
Developer tools
Automated e2e screenshot testing without writing or maintaining tests
SmartBear Software
Developer tools
Maintain control as development
GitLab
Developer tools
A complete DevOps platform delivered as a single application.
Netlify
Developer tools
Create with AI or code, deploy instantly on production
LiveKit
Developer tools
An open source framework and developer platform for building, testing, deploying, scaling, and observing agents in
Understand GDPR evidence
All articlesExplainers
The EU-US Data Privacy Framework, explained for vendor reviews
Solomon Amos · 7 Sep 2026 · 10 min read