Skip to main content
VTEX logo

VTEX

GDPR evidence

Modernize your stack and drive operational results with an AI-Native unified commerce

vtex.comE-commerceLast verified 1 Nov 2026
Request the report Are you VTEX?
GDPR mark, CertReports state Vendor-stated as of 1 Nov 2026Vendor-stated

VTEX and GDPR

VTEX states it holds a data processing agreement. CertReports captured this on 1 Nov 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.

Evidence

Vendor-statedVendor states GDPR on its trust centre
as of 1 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026GDPR
Live page Snapshotsha256 4348e1c53e
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026GDPR
Live page Snapshotsha256 ff8a8e04eb
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026GDPR
Live page Snapshotsha256 d8bbc9c486
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026GDPR
Live page Snapshotsha256 19ce7cf16c
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026GDPR
Live page Snapshotsha256 6cd084455c
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026GDPR
Live page Snapshotsha256 46c9fc55f8
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026GDPR
Live page Snapshotsha256 149e295ed5
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026GDPR
Live page Snapshotsha256 277506028c
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026GDPR
Live page Snapshotsha256 f711561ab3
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026GDPR
Live page Snapshotsha256 20017d1687
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026GDPR
Live page Snapshotsha256 cdcde11ead
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026GDPR
Live page Snapshotsha256 ca1a603795
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026GDPR
Live page Snapshotsha256 7d12f08068
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026GDPR
Live page Snapshotsha256 420bed1712
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026GDPR
Live page Snapshotsha256 c28e78e2c0
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026GDPR
Live page Snapshotsha256 f5efcd8c0f
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026GDPR
Live page Snapshotsha256 bd073e40d7
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026GDPR
Live page Snapshotsha256 d19412fc2e
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026GDPR
Live page Snapshotsha256 5bbd6fbae9
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026GDPR
Live page Snapshotsha256 18f00ff073
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
18 Sep 2026GDPR
Live page Snapshotsha256 c4d2ee29cb
This is wrong
Vendor-statedVendor states ISO/IEC 27701 on its trust centre
as of 1 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 4348e1c53e
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 ff8a8e04eb
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 d8bbc9c486
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 19ce7cf16c
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 6cd084455c
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 46c9fc55f8
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 149e295ed5
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 277506028c
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 f711561ab3
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 20017d1687
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 cdcde11ead
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 ca1a603795
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 7d12f08068
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 420bed1712
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 c28e78e2c0
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 f5efcd8c0f
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 bd073e40d7
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 d19412fc2e
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 5bbd6fbae9
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 18f00ff073
VTEX trust centre (Drata)
Vendor trust centre · HTTP 200
18 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 c4d2ee29cb
This is wrong
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 26 Oct 2026 · confidence 100%
Kind
Listing
Issued or listed
12 Jul 2024
Expires or valid through
6 Jul 2027
Scope
VTEX processes the personal data of Shoppers who access the e-commerce environments (the “VTEX Platform”) controlled by VTEX Clients ("Merchants"), available on the Merchants' websites or applications. VTEX is a processor of personal data and only collects and processes the personal data provided by Shoppers, within the VTEX Platform and according to the purposes defined by the Merchants to carry out all the steps necessary to complete the Shopper's purchases. VTEX processes the following personal data for the related purposes noted below: 1) Registration data provided by Shoppers such as: - Name; - E-mail; - Telephone number; - Applicable ID number, depending on the country of the Shopper. The above is processed for the purposes of Shopper registration in the relevant store, enabling navigation in the logged-in environment, making purchases and issuing invoices via the Merchant, and for the Merchant to contact the Shopper about their orders and, if necessary, for support purposes. 2) Access data to the VTEX Platform, such as: - IP address; - Browsing information collected through cookies; - Session passwords (encrypted); - Generated tokens. The above is processed for the purposes of improving the performance of the Store and the VTEX Platform, based on statistical analysis of browsing data, recording access logs on the Store and the VTEX Platform, as required by law, to guarantee information security and prevent fraud during the use of the Store and the VTEX Platform, and personalizing advertising to be offered by the Store. 3) Purchasing data, such as: - Cart information; - Order information and history; - Gift card history; - Unused trolley; - Delivery address. The above is processed for the purposes of enabling navigation in the logged-in environment as well enabling purchases in the Store in a personalized way, and enabling the Merchant to deliver the products correctly. 4) Contact data, such as: - Conversation history. The above is processed for the purposes of guarenteeing the consultation of conversations, requests for information and the resolution of doubts between Shopper and Merchant and possible use in dispute resolution. 5) Other personal data, if required by Merchant. VTEX discloses personal data to the following third parties: - Subprocessors (Service Providers) - Regulatory and legal authorities - Merchant's other third party service providers (on the Merchant's instructions) that Merchants use to integrate the Store with third-party environments, such as payment methods, CRM tools, logistics operators, etc.
SourceCapturedQuoteLinks
Data Privacy Framework list
Official registry · HTTP 200
26 Oct 2026VTEX: Active: EU-US Certification, SW-US Certification, UK Extension Certification
Live pagesha256 d7e9391935
This is wrong
What GDPR means, and what it does not

"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.

Read the GDPR guide and browse all vendors with evidence

Questions buyers ask

Is VTEX GDPR compliant?

There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 22 Sep 2026DPA changedThe data processing agreement URL changed.
  2. 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.

Alternatives with GDPR evidence

Similar vendors (shared product tags or the E-commerce category) whose GDPR row is verified or vendor-stated, ranked by similarity.

Gladly logo

Gladly

E-commerce

Gladly brings agentic commerce to your site for premium ecommerce

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedDPF mark, CertReports state ExpiredCCPA mark, CertReports state Vendor-stated
4 stated26 Oct 2026

Understand GDPR evidence

All articles