Skip to main content
WeTransfer logo

WeTransfer

GDPR evidence

The simple, quick and secure way to send your files around the world without an

wetransfer.comCloud storageLast verified 2 Nov 2026
Request the report Are you WeTransfer?
GDPR mark, CertReports state Vendor-stated as of 2 Nov 2026Vendor-stated

WeTransfer and GDPR

WeTransfer states it holds a data processing agreement. CertReports captured this on 2 Nov 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.

Evidence

Vendor-statedVendor states GDPR on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
1 Nov 2026GDPR
Live page Snapshotsha256 8c5255c42e
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026GDPR
Live page Snapshotsha256 41d6c1f206
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026GDPR
Live page Snapshotsha256 08032d0cf5
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026GDPR
Live page Snapshotsha256 3d06e172cc
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026GDPR
Live page Snapshotsha256 52f31d483b
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026GDPR
Live page Snapshotsha256 cbad2f0421
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026GDPR
Live page Snapshotsha256 861076cdc6
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026GDPR
Live page Snapshotsha256 2dece04122
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026GDPR
Live page Snapshotsha256 efc508c490
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026GDPR
Live page Snapshotsha256 06859c2911
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026GDPR
Live page Snapshotsha256 bc5b9816a7
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026GDPR
Live page Snapshotsha256 cfeb1eeff8
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026GDPR
Live page Snapshotsha256 c4daf94acf
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026GDPR
Live page Snapshotsha256 a5afb46e33
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026GDPR
Live page Snapshotsha256 befbebb951
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026GDPR
Live page Snapshotsha256 2d151610d3
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026GDPR
Live page Snapshotsha256 0bc8dfcb5a
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026GDPR
Live page Snapshotsha256 07780cf612
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026GDPR
Live page Snapshotsha256 b47663aedd
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026GDPR
Live page Snapshotsha256 f0eb65fcd3
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026GDPR
Live page Snapshotsha256 a1f711ac34
WeTransfer trust centre (Drata)
Vendor trust centre · HTTP 200
18 Sep 2026GDPR
Live page Snapshotsha256 54c161e365
This is wrong
ExpiredInactive
as of 26 Oct 2026 · confidence 100%
Kind
Listing
Issued or listed
30 Mar 2020
Scope
WeTransfer processes data of its users. WeTransfer collects, processes or hosts personal information provided by users: - Contact information: your name and your email address or the email address of the recipient(s). - Information about yourself: age, gender, city. - Preferences: for example language settings or interests. - Content and metadata: you may choose to upload or create Content which contains all sorts of personal information about you and others. Such Content also contains a filename, size and filetype. - Personal messages: the ones you send to people along with sharing your files. Personal information we collect by automated means: - Browser information: type of browser, language settings, country and timezone. - Cookie or web beacon information: cookie IDs and settings and other personal information received through cookies, web beacons or pixel tags. - Device information: the type of device, hardware model and operating system. - Identification details: unique identifiers such as an IDFA (for iOS), MAC address or a UserID. - Network information: IP-addresses and mobile network information. - Location data: data on your geo-location. - Service usage: information regarding the way you interact with our Services, websites and mobile apps. Personal information we receive from partners: - Integration information: you can choose to integrate some of our Services with your account, such as Slack, in order to provide you with a rich messaging functionality. - Marketing information: some partners may provide additional (aggregated) information, for instance through their Software Developer Kits (SDKs). - Legal Information: when law enforcement agencies or courts order us to take down Content, we may initially receive personal information about you and your behaviour. Purposes for processing personal data: Service: the most important reason for using personal information is, of course, to offer our users our Services. Support: we provide a wide range of support services to help out users, for instance when they need technical assistance. Account & billing: creating and upholding personal accounts. Safety, integrity & security: WeTransfer follows up on abuse reports, NTD/DMCA reports, fraud investigations and could investigate your compliance with our of our Terms of Services and/or API Terms of Use. Furthermore, we detect & block Child Sexual Abuse Imagery (CSAI). Improvement & development: we evaluate the use of our Services to improve our Services, fix bugs, develop new products and services. We do this either by market research or by performing analyses. Marketing, advertisement & communication: we use personal information for marketing and (interest based) advertising for instance by using SDKs or cookies, as well as communication. Legal: in so far as necessary, we might use personal information to defend WeTransfer in legal proceedings. Legal grounds are contractual obligations with users, legal obligations, consent and/or legitimate interest.
SourceCapturedQuoteLinks
Data Privacy Framework list
Official registry · HTTP 200
26 Oct 2026WeTransfer Corp: Inactive
Live pagesha256 113c1be6ff
This is wrong
What GDPR means, and what it does not

"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.

Read the GDPR guide and browse all vendors with evidence

Questions buyers ask

Is WeTransfer GDPR compliant?

There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 22 Sep 2026DPA changedThe data processing agreement URL changed.
  2. 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.

Alternatives with GDPR evidence

Similar vendors (shared product tags or the Cloud storage category) whose GDPR row is verified or vendor-stated, ranked by similarity.

Dropbox logo

Dropbox

Cloud storage

Backup and share files in the cloud.

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state Verified
2 verified · 13 stated2 Nov 2026

Understand GDPR evidence

All articles