Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
TCP Software
GDPR evidence
TCP Software's employee scheduling, time, and attendance solutions help organizations control labor costs, stay compliant, and run their
No public evidenceTCP Software and GDPR
CertReports found no public GDPR evidence for TCP Software as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 9 Sep 2018
- Expires or valid through
- 27 Mar 2027
- Scope
- General Purposes for Processing and Disclosures of Any and All Categories of Personal Data In general, Timeclock Plus (TCP) may use and disclose any Personal Data it maintains about you as follows, pursuant to TCP’s legitimate business interests and need to comply with law: To manage and mitigate risk, including for insurance functions, to ensure the proper functioning of the Services, to maintain the privacy and security of our data (such as through threat detection, disaster recovery and business continuity activities), and to conduct audits or investigations, in which case we may disclose your Personal Data to Service Providers, insurance providers, tax or financial authorities or consultants, and legal advisors; As needed to assess and ensure compliance with applicable laws, legal requirements and company policies, to protect our assets (including to license and protect intellectual property) or to investigate or defend against any claims of illegality or wrongdoing (including to obtain legal advice), or in response to a court order or judicial or other government subpoena or warrant, in which case we may disclose your Personal Data to law enforcement, regulators, governmental authorities or other bodies, courts, tax authorities, insurance providers, legal advisors, and mediators; In the event TCP undertakes or is involved in or contemplating (e.g., in connection with due diligence) any merger, acquisition, reorganization, sale of assets, bankruptcy, or insolvency event, in which case we may disclose your Personal Data to buyers or purchasers (or potential buyers or purchasers) and their representatives. Other Purposes for Processing and Disclosures of Specific Categories of Personal Data Personal Data We Receive Directly From You: Client Account Data Communications Data Human Resources Data Reputation & Creditworthiness Data Transaction and Payment Data Visitor Data Personal Data We Host on Behalf of Clients: Profile Data Service Data EU Resident Special Category Data Biometric Data:Our Clients are contractually obligated to process biometric data only for employment-related purposes. TCP’s purpose for processing this data is to comply with our contractual obligations and provide the Services to our Clients. Photographic images: Our Clients are contractually obligated to process photographic images data only for employment-related purposes. TCP’s purpose for processing this data is to comply with our contractual obligations and provide the Services to our Clients. Physical or mental health data: Our Clients determine the purpose for which this information is collected. They may wish to process this data to accommodate disabilities and dietary needs and to address emergency health needs. TCP’s purpose for processing this data is to comply with our contractual obligations and provide the Services to our Clients. Racial or ethnic data: Clients determine the purpose for which this information is collected. They may wish to process this data to facilitate affirmative action and other inclusion programs. TCP’s purpose for processing this data is to comply with our contractual obligations and provide the Services to our Clients. Religion or beliefs: Our Clients determine the purpose for which this information is collected. They may wish to process this data to meet an individual’s specific needs or requests, including dietary requests and to respect religious holidays and other observances. TCP’s purpose for processing this data is to comply with our contractual obligations and provide the Services to our Clients. Personal Data We Receive From Other Sources: Lead Data Human Resources Data Reputation & Creditworthiness Data
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | TCP Software: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 5e64bb301e |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is TCP Software GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Analytics category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read