Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Vendor-statedSimon Data and GDPR
Simon Data states it holds a data processing agreement. CertReports captured this on 21 Sep 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.
Evidence
Vendor-statedVendor states GDPR on its trust centre
as of 21 Sep 2026 · confidence 80%VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 10 Jul 2019
- Expires or valid through
- 22 Jun 2027
- Scope
- Personal data other than human resources data – such as first and last name, contact information, mailing address, IP address, mobile device identifier, geolocation, preference data, transactional history, and website or app usage history – is processed for various purposes, including: facilitating use of the Simon Data platform; facilitating communications; advertising and marketing; administering surveys and promotions; research and analytics; risk assessment, security, fraud prevention; operating, developing, and improving Simon products and services; customer service and support; and legal compliance. Data is disclosed to third parties – including users, service providers, affiliates, public authorities, payment processors, fraud prevention service providers, analytics service providers, staff augmentation and contract personnel, hosting service providers, co-location service providers, and telecommunications service providers – as detailed in Simon Data’s Privacy Policy.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Simon Data: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 ece1c54d51 |
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Scope
- We securely collect data on our client's customers via database integrations, and use that data for marketing segmentation. We then securely pass relevant segments to 3rd party ESPs and protected ad networks, where applicable.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Simon Data: Inactive | Live pagesha256 4f243d916b |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Simon Data GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 22 Sep 2026DPA changedThe data processing agreement URL changed.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Marketing category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Hightouch
Marketing
The leading Composable CDP and AI Decisioning platform
Bluecore
Marketing
Turn your untapped retail data into one-to-one campaigns that make an immediate impact on revenue with
Sendoso
No-code and automation
Automate personalized gifting campaigns to drive
Lob
Marketing
Lob is the only automation platform that transforms direct mail into…
Attentive Mobile
Marketing
Learn more about Attentive—the SMS and email platform that brings your customer interactions to life with advanced
Veriad
Marketing
AI operating system for advertising
Yotpo
Marketing
We're on a mission to provide brands with everything they need to create winning customer experiences, from discovery to
Beefree
Marketing
Power better email creation with Beefree, the technology behind RGE Studio for marketing teams and Beefree SDK for developers building
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read