
TaxJar and GDPR
CertReports found no public GDPR evidence for TaxJar as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Scope
- We process the following types of personal data: 1. Customer data 2. Client data 3. Visitor data We process the personal data for the following purposes: 1. For Customer data, we process any received personal data for the purposes of rendering the requested services (namely, to file sales tax returns on their behalf and assist in that process), improving the services and for the performance of contracts as engaged by customers. 2. For client data, we process the personal data for the purpose of performance of the contract in which we are engaged with them. Each specific client engagement will have a customized arrangement and contract. 3. For visitor data, we process the personal data for the purposes of fulfilling support requests, inquiries about our products and services and for advertising and marketing efforts (with consent, appropriate disclosure of collection methods and options, preserving data subject access request rights, etc). We share information with the following subprocessors, as needed to fulfill the requested services. Please note that this lists all potential third parties, but not every type of processing will necessitate a particular subprocessor. Only those that are needed to fulfill a needed action are engaged. Salesforce.com, Inc.: CRM software Promoter.io, Inc.: Customer surveying tool HelloSign: esignature platform Dropbox, Inc.: File storage solution Amazon.com, Inc.: Cloud infrastructure and business intelligence/ data visualization Help Scout, Inc.: Help desk communications channel Campaign Monitor Pty Ltd: Subscription management services Drift.com, Inc.: Webchat solution Avenue 81, Inc. (Drip): Marketing automation Basecamp, LLC: Project management solution Atlassian PTY Ltd. (JIRA, BitBucket): Ticketing system and source control for development Tableau: Data analytics platform Marketo: Marketing platform SumoLogic: Application logging and debugging Impartner: Partner Relationship Management Platform
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | TaxJar: Inactive | Live pagesha256 81f2e35cb0 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is TaxJar GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the E-commerce category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No E-commerce vendor has GDPR evidence in the index yet.