Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
ServiceNow
GDPR evidence
ServiceNow delivers digital workflows that create great experiences and unlock productivity for employees and the
No public evidenceServiceNow and GDPR
CertReports found no public GDPR evidence for ServiceNow as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: SW-US Certification, EU-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 7 Oct 2016
- Expires or valid through
- 6 Jan 2027
- Scope
- ServiceNow, Inc., together with its covered U.S. subsidiaries (collectively, "ServiceNow") is a leading provider of enterprise AI and cloud computing solutions that define, structure, manage and automate services across the global enterprise as well as related support services and add-on services (collectively, the "Services"). In connection with the Services, customers submit electronic data, which may include personal data about EU, UK, and Swiss individuals, to ServiceNow. ServiceNow hosts and processes the electronic data, including any personal data contained therein, at the direction of and pursuant to the instructions of its customers. ServiceNow accesses the electronic data, including any personal data contained therein, as necessary to provide and support the Services. In some cases, in accordance with our customer agreements, we may disclose personal data to business partners, affiliates, or other service providers (collectively, “Subprocessors”) to provide services on our behalf or on behalf of our customers. ServiceNow maintains onward transfer agreements with its Subprocessors in compliance with our Data Privacy Framework obligations. In connection with the Services, ServiceNow also processes certain personal data as a data controller, such as customer account and contact information. In addition, as an employer, ServiceNow processes personal data regarding ServiceNow's current and former EU, UK, and Swiss employees and job applicants for recruitment and human resources management purposes. ServiceNow may disclose personal data relating to the Service or to current and former employees or job applicants as detailed in our Data Privacy Framework Policy or our Data Privacy Framework Human Resources Policy.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | ServiceNow, Inc.: Active: SW-US Certification, EU-US Certification, UK Extension Certification | Live pagesha256 8e8775523f |
Data Privacy Framework list Official registry · HTTP 200 | 29 Sep 2026 | ServiceNow, Inc.: Active: SW-US Certification, EU-US Certification, UK Extension Certification | Live pagesha256 dd5ebdc30b |
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | ServiceNow, Inc.: Active: SW-US Certification, EU-US Certification, UK Extension Certification | Live pagesha256 cba82d8979 |
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 27 May 2018
- Scope
- Fairchild Consulting Services, LLC ("Fairchild Resiliency Systems") is a provider of enterprise cloud computing solutions that automates business continuity and IT disaster recovery planning. (the "Subscription Service") and related support services (the "Support Service") as well as expert services, including professional services, consulting, and training (the "Expert Services"). The Subscription Service, Support Service and the Expert Services are collectively referred to as the "Service". In connection with the Service, customers submit electronic data, which may include personal data about their employees, clients or other individuals, to Fairchild Resiliency Systems' servers. Fairchild Resiliency Systems hosts and processes the electronic data, including any personal data contained therein, at the direction of and pursuant to the instructions of its customers. Fairchild Resiliency Systems accesses the electronic data, including any personal data contained therein, as necessary to provide and support the Service, including updating the Service and addressing customer support issues. In some cases, in accordance with our customer agreements, we may disclose personal data to business partners and affiliates to provide services on our behalf or on behalf of our customers. Fairchild Resiliency Systems also obtains certain personal data, such as contact information, about customers' representatives in connection with maintaining Fairchild Resiliency Systems' relationships with and providing the Service to customers.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Fairchild Resiliency Systems: Inactive | Live pagesha256 d3712eeeee |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is ServiceNow GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 19 Sep 2026Trust centre movedTrust centre URL is now https://trust.servicenow.com/.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the IT management category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read