Userlytics
Security and trust center evidence
Remote user testing with
Summary
Userlytics has 1 registry-verified row and 4 vendor-stated rows in the CertReports index, last verified 26 Oct 2026. The strongest row is GDPR: Vendor states GDPR on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 26 Oct 2026, CertReports holds 1 registry-verified row and 4 vendor-stated rows for Userlytics, drawn from its trust centre (Drata) and the Data Privacy Framework list. Userlytics is listed in the Data Privacy Framework list for EU-US Data Privacy Framework (Active: EU-US Certification, SW-US Certification, UK Extension Certification), dated 30 Jan 2019. Userlytics states on its trust centre that it holds a data processing agreement, a PCI DSS attestation of compliance, an ISO/IEC 27001 certificate and an CCPA / CPRA privacy notice, captured 21 Sep 2026; these are vendor statements, not independent confirmations. No public evidence was found for SOC 2, HIPAA and FedRAMP as of 26 Oct 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- EU-US Data Privacy Framework: Active: EU-US Certification, SW-US Certification, UK Extension Certification, verified as of 26 Oct 2026
- GDPR: Vendor states GDPR on its trust centre, vendor-stated as of 21 Sep 2026
- PCI DSS: Vendor states PCI DSS on its trust centre, vendor-stated as of 21 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Among form builders and surveys vendors
1verified rows
Category median 1, across 31 indexed form builders and surveys vendors. Userlytics has more verified rows than 48 percent of them.
customer feedbackusability testinguser testingux research
Compare with similar vendors
Pick your own comparisonCompliance grid
GDPRVendor-statedVendor states GDPR on its trust centre
as of 21 Sep 20262 sources
PCI DSSVendor-statedVendor states PCI DSS on its trust centre
as of 21 Sep 20262 sources
ISO/IEC 27001Vendor-statedVendor states ISO/IEC 27001 on its trust centre
as of 21 Sep 20262 sources
EU-US Data Privacy FrameworkVerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 26 Oct 20261 source
CCPA / CPRAVendor-statedVendor states CCPA on its trust centre
as of 21 Sep 20262 sources
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this. Check the vendor trust centre.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
- 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
- 18 Sep 2026PCI DSS evidence addedA PCI DSS row entered the index with state Vendor-stated.
Similar vendors with evidence
Related by product tags and the Form builders and surveys category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Surveypal
Form builders and surveys
All-in-one customer feedback management and CXM
Promoter.io
Form builders and surveys
Collect NPS, CSAT & CES surveys across every touchpoint, then let AI turn customer feedback into
CustomInsight
Form builders and surveys
Online employee engagement survey software, 360 feedback surveys and staff satisfaction platform provide companies with internal diagnostic
UserGuiding
Form builders and surveys
Create and optimize in-app experiences that turn new users into
Evidence against regulations
All regulations for UserlyticsHow much of each regulation’s vendor requirements Userlytics’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read