No public evidenceSTAPE and GDPR
CertReports found no public GDPR evidence for STAPE as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Scope
- Stape, Inc. processes personal data on behalf of its customers solely as necessary to provide its server-side tagging and analytics infrastructure services. The purposes of processing include: Hosting of analytics data — storing website analytics data on behalf of the customer/controller; Session logging — logging website visitor sessions for the customer's operational and analytical needs; Analytics processing — performing analytics on website visitor data as instructed by the customer. Types of personal data processed: Log data (retained for 10 days for GTM hosting); Any personal data relating to an identified or identifiable natural person that the customer/controller chooses to process using Stape's services (retained for the duration of the Master Agreement); Categories of data subjects: The customer's website visitors. Third-party disclosures: Personal data may be disclosed to sub-processors engaged by Stape to support delivery of its services (e.g., cloud infrastructure providers), subject to written contracts imposing equivalent data protection obligations. Stape does not disclose personal data to third parties outside of this scope without documented instruction from the data exporter. (for more details please see https://stape.io/dpa; https://stape.io/eu-dpa) Stape, Inc. collects and processes personal data — such as email addresses, account information, usage logs, and payment confirmations — primarily to provide its server-side tagging and analytics infrastructure services, maintain user accounts, and deliver customer support. Data is also processed for website analytics and marketing purposes, relying on either user consent or legitimate interest as the legal basis. Personal data may be shared with third-party sub-processors (e.g., cloud providers, payment processors, analytics tools) under appropriate safeguards, including Standard Contractual Clauses, but is never sold or rented to third parties. (for more details please see https://stape.io/privacy-notice and https://stape.io/gdpr)
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | STAPE: Inactive | Live pagesha256 066421b558 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is STAPE GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Analytics category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Analytics vendor has GDPR evidence in the index yet.