TR
Trace
GDPR evidence
Context-aware orchestration between humans and AI.
No public evidenceTrace and GDPR
CertReports found no public GDPR evidence for Trace as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
ExpiredInactive
as of 17 Sep 2026 · confidence 85%- Kind
- listing
- Issued or listed
- 29 Nov 2016
- Scope
- TRACE provides a number of different due diligence and training services and products, and maintains a number of online applications, each of which collects different kinds of personal information. Depending upon the service, product and application, the following personal information may be collected: - Login credentials, IP addresses, website cookies, internal unique identifiers, and other session details when our online applications are used; - Basic contact information such as name, business address, email address, and telephone number; - Employment-related information such as work history, ownership in companies, current employer, division, department, title, and job duties; - Contact information for external references such as name, employer, position, and relationship; - In certain limited circumstances, documents and information to verify identity such as a passport, national identity card, driver’s license, or tax number; - In certain limited circumstances, documents to verify address, such as invoices or billing statements from governmental, municipal entities or utility companies; - Identifying information, including nationality and year, or sometimes date, of birth, of owners and others who exercise control over the management or direction of a corporate entity; - Information regarding whether a customer, intermediary, or authorized representatives or owners of either appear on lists of politically exposed persons and government-issued lists of sanctioned entities and persons, including, for example, restricted parties, denied persons, Specially Designated Nationals, debarred parties, excluded parties, blocked persons, embargoed countries and persons and other entities of concern; - Compliance-related information regarding the history with respect to, for example, bankruptcy filings, criminal matters, negative media reports, anti-bribery violations, and compliance with various laws and international standards; - Conflicts and compliance information such as a person’s relationship with government or military officials or status as current or former government officials; - Online training and test information such as date assigned, date started, training score, completion date, training language, and type of course taken; and - Voluntarily-provided corporate information such as corporate logo, a corporate message, corporate code of conduct, or other company training material. This is a broad description of the types of personal information that our organization processes. To understand how your own personal information is processed in each particular instance you may need to refer to any personal communications you may have received from us, check any privacy notices we may have provided to you or made available on our site or contact us to ask about your personal circumstances.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | TRACE Inc.: Inactive | Live pagesha256 26afcb39b5 |
ExpiredInactive
as of 17 Sep 2026 · confidence 85%- Kind
- listing
- Issued or listed
- 19 Dec 2017
- Scope
- TRACE is a non-profit membership association with a global anti-bribery mission. We provide various compliance and risk management solutions to our member companies and their third party suppliers (e.g. online compliance training, Resource Center library, third party due diligence risk assessment tool, gifts and hospitality registry, events and training, etc.) and maintain a number of online applications, each of which collects different kinds of personal information. Depending upon the service, product and application, the following personal information may be collected: • Login credentials, IP addresses, website cookies, internal unique identifiers, and other session details when our online applications are used; • Basic contact information such as name, business address, email address, and telephone number; • Employment-related information such as current employer, division, department, title; • Contact information for external references such as name, employer, position, and relationship; • In certain limited circumstances, documents and information to verify identity such as a passport, national identity card, driver’s license, or tax number; • In certain limited circumstances, documents to verify address, such as invoices or billing statements from governmental, municipal entities or utility companies; • Online training and test information such as date assigned, date started, training score, completion date, training language, and type of course taken; and • Voluntarily-provided corporate information such as corporate logo, a corporate message, corporate code of conduct, or other company training material. This is a broad description of the types of personal information that our organization processes. To understand how your own personal information is processed in each particular instance you may need to refer to any personal communications you may have received from us, check any privacy notices we may have provided to you or made available on our site or contact us to ask about your personal circumstances.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | TRACE International Inc.: Inactive | Live pagesha256 973c6395af |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Trace GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Productivity category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Productivity vendor has GDPR evidence in the index yet.