Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Theta Lake
GDPR evidence
Theta Lake’s multi-award-winning product suite provides patented compliance and security for modern collaboration platforms, enabling
Vendor-statedTheta Lake and GDPR
Theta Lake states it holds a data processing agreement. CertReports captured this on 21 Sep 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.
Evidence
Vendor-statedVendor states GDPR on its trust centre
as of 21 Sep 2026 · confidence 80%ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 2 Feb 2019
- Scope
- Types of Personal Information Theta Lake collects personal information in support of its product and services. This information may be collected from multiple sources, when you register and create your account, when you visit our website, if you request information form us through our contact form, when you contact us for help, when interacting as a customer or prospective customer, received from our partners or third party suppliers or when you attend conferences or webinars Theta Lake restricts use of this information to providing the service for which the customer has chosen. The type of information that Theta Lake’s collects depends on the type of interaction, this information may include Contact and Log-in Information (name, employer, job title, email address, phone number, user name and passwords), Computer Information (IP address, browser, device), payment information, product and services selection and other things that identify you. If you decline to provide your personal information or ask us to delete it, we may be unable to continue to provide or support our products or services. Use of your Personal Information Theta Lake may use this information to: • Deliver products or services, including software updates • Provide customer support and manage customer relationship such as billing, service related information, technical notices • Understand your interest and preferences in our products, services or content • Operate and improve our operations, systems, products, and services • Manage our business • Communicate with you by email, postal mail, telephone or mobile devices around promotions, upcoming events, and news about products and services offered by Theta Lake and our selected partners; • Enforce our terms and conditions Information we Process for Legitimate Business Purposes We may process information on the basis there is a legitimate interest, either to you or to us, of doing so. Where we process your information on this basis, we do after having given careful consideration to consequences. One of the instances below must apply for us to process your personal information • Provide our responsibilities as outlined in our contract and to provide services, support and tools to you • Record-keeping for the proper and necessary administration of our business • Responding to unsolicited communication from you to which we believe you would expect a response • Protecting and asserting the legal rights of any party • Protecting your interests where we believe we have a duty to do so • You have given consent to use your personal information, which may be withdrawn by opting out Third Party Data Theta Lake has relationships with third parties and may receive Personal Data from such third parties. Theta Lake protects Personal Data obtained from third parties in accordance with the policies described in this Privacy Policy. Third party sources can include the following: • Channel Partners (including referral partners, distributors, resellers, third party sales agents, marketing companies, advertising agents and managed service providers) who supply us with data in order to help establish an account and provide services • Business partners that we engage with for joint marketing activities • Companies that provide services for our website, such as analytics and marketing
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Theta Lake, Inc.: Inactive | Live pagesha256 42ce5c8ca5 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Theta Lake GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 22 Sep 2026DPA changedThe data processing agreement URL changed.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Collaboration category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read