Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Statsig
GDPR evidence
Statsig is your modern product development platform, with an integrated toolkit for experimentation, feature management, product analytics
Vendor-statedStatsig and GDPR
Statsig states it holds a data processing agreement. CertReports captured this on 21 Sep 2026 from custom; it is a vendor statement, not an independent confirmation.
Evidence
Vendor-statedVendor states GDPR on its trust centre
as of 21 Sep 2026 · confidence 80%ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Scope
- Statsig offers a B2B SaaS platform for experimentation and product development. With respect to the Statsig platform, Statsig is a data processor and Statsig’s customers are data controllers. Statsig’s customers, not Statsig, control the type of data that is collected, submitted to, and processed through the Statsig platform. Statsig processes personal data as the data controller when it collects business contact information about customers and prospects as well as business contact and device information about its platform users. Statsig processes the personal information it collects to provide and maintain its services; to improve and create new services; to communicate with and market its services to customers, vendors, and prospects; to maintain the security of its services; to comply with its legal and regulatory obligations; and for other purposes upon an individual’s consent. Statsig discloses the personal information it collects to third parties as outlined in its Privacy Policy, including to provide its services and to comply with legal obligations and requirements.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Statsig, Inc.: Inactive | Live pagesha256 839b580092 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Statsig GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 22 Sep 2026First indexed by CertReports7 evidence rows across 7 frameworks entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Developer tools category) whose GDPR row is verified or vendor-stated, ranked by similarity.
GrowthBook
Developer tools
Open source feature flagging and A/B testing
Split
Developer tools
Split.io feature flags connects critical impact data and alerts you whether your software changes are making things better or
Avo
Developer tools
Fixing data quality in product analytics.
Laravel
Developer tools
Laravel is a framework for building modern web apps and AI
Nango
Developer tools
A single API for all your integrations
Paragon
Developer tools
The embedded integration platform for SaaS apps.
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read