SS
No public evidenceSona Systems and GDPR
CertReports found no public GDPR evidence for Sona Systems as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: EU-US Certification, UK Extension Certification
as of 17 Sep 2026 · confidence 100%- Kind
- listing
- Issued or listed
- 19 Dec 2023
- Expires or valid through
- 14 Nov 2026
- Scope
- Sona Systems LLC (Sona) has in its possession two different types of information: 1) information that it collects from customers when they purchase services and 2) personally-identifiable information processed by Sona in the course of providing services to customers, which is provided to it by customers (Subject information). With respect to the former, Sona processes information for the purpose of providing services to its customers, as well as: to collect payment; to market Sona's services to customers; to contact the customer about issues related to the service and issues of general interest to Sona's customers; in response to an inquiry about the status of the services; and to provide troubleshooting about those services. Sona may also share information with third parties to collect payment and to comply with a law or regulation requiring disclosure. With respect to the latter, Subject information is provided to Sona by customers and will be used to perform the services as agreed between Sona and its customer; to maintain the infrastructure that supports those services; and in response to a customer inquiry for troubleshooting purposes. Sona does not collect Subject information independently. Subject information consists of full name and email address of each user, the user's preference for the system interface, and other information chosen by the customer in Sona's interface, which may include (without limitation), university identification number, telephone number, course enrollment information, study sign-up information, research data collected in online surveys, data collected as part of prescreening for eligibility in research studies. Subject information may be provided to third parties who provide backup services (for backup purposes, on servers to which only Sona has the password); as authorized by a customer; or to comply with a law or regulation that requires disclosure.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Sona Systems LLC: Active: EU-US Certification, UK Extension Certification | Live pagesha256 4e35e5b883 |
ExpiredInactive
as of 17 Sep 2026 · confidence 100%- Kind
- listing
- Issued or listed
- 9 Aug 2017
- Scope
- Sona Systems, Ltd. (Sona) has in its possession two different types of information: 1) information that it collects from customers when they purchase services and 2) personally-identifiable information processed by Sona in the course of providing services to customers, which is provided to it by customers (Subject information). With respect to the former, Sona processes information for the purpose of providing services to its customers, as well as: to collect payment; to market Sona's services to customers; to contact the customer about issues related to the service and issues of general interest to Sona's customers; in response to an inquiry about the status of the services; and to provide troubleshooting about those services. Sona may also share information with third parties to collect payment and to comply with a law or regulation requiring disclosure. With respect to the latter, Subject information is provided to Sona by customers and will be used to perform the services as agreed between Sona and its customer; to maintain the infrastructure that supports those services; and in response to a customer inquiry for troubleshooting purposes. Sona does not collect Subject information independently. Subject information consists of full name and email address of each user, the user's preference for the system interface, and other information chosen by the customer in Sona's interface, which may include (without limitation), university identification number, telephone number, course enrollment information, study sign-up information, research data collected in online surveys, data collected as part of prescreening for eligibility in research studies. Subject information may be provided to third parties who provide backup services (for backup purposes, on servers to which only Sona has the password); as authorized by a customer; or to comply with a law or regulation that requires disclosure.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Sona Systems, Ltd.: Inactive | Live pagesha256 049e7d2ffc |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Sona Systems GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags) whose GDPR row is verified or vendor-stated, ranked by similarity.
No same-category vendor has GDPR evidence in the index yet.