No public evidenceSift and GDPR
CertReports found no public GDPR evidence for Sift as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 17 May 2018
- Scope
- Sift processes personal data from its customers to detect address fraud and other malicious behavior on their digital properties. In doing so, we collect personal data and metadata about how Internet users interact with our customers websites and mobile applications. The personal data sent to Sift is largely determined by our customers; however, Sift determines the data collected through our JavaScript snippet and mobile software development kit. The personal data we receive may include contact or billing information about the site or app visitor, unique device identifiers, metadata about the visitor’s device, location of the visitor, and the visitor’s activity on the site. Sift also processes customer and prospective customer information to provide and bill for the services, and for sales and marketing purposes. Sift also collects personal data from visitors of our public website www.sift.com in order to administer, improve and analyse our website, and to provide advertising on third party sites. We share personal data with vendors, consultants and service providers who work on our behalf, with a select, limited number of third party vendors for data enrichment purposes, with our affiliates, with third parties where we are legally required to do so, to protect the vital interests or legal rights of Sift or other individuals, or in connection with corporate transactions. Please see our Service and Site Privacy Notices for further information.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Sift: Inactive | Live pagesha256 67b49a2491 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Sift GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Security category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Diligent
Compliance and GRC
checkout
Payments
CrowdStrike
Security
Cyera
Security
Fortinet
Security
KnowBe4
Security