No public evidenceWhatfix and GDPR
CertReports found no public GDPR evidence for Whatfix as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 21 Sep 2023
- Expires or valid through
- 18 Aug 2027
- Scope
- When Whatfix acts as a Processor: Customers (Data controller) subscribing to Whatfix SAAS services. Whatfix is a Digital Adoption Platform which is offered to its Customers globally as a Software as a Service. Some of Whatfix' customers are based out of the EU, Switzerland and UK as well. Customers can choose to allow Whatfix to capture Personal Information of its employees or their customers to enable their use of Customer's application on which Whatfix is deployed. While Whatfix does capture minimal Personal information of Customer’s Users viz. For the content creators - Name of the Content Creator Email address- For registering the user, password resets, and any communication between Whatfix Platform and Content creator. IP Address will be part of every web request from the user system to our Platform. For the end-users: No identifier is required by default. Recommend - Email address, or any other unique identifier mutually agreed which could be Personally Identifiable Information as well, allowing Whatfix to provide better insights on the adoption of the platform. IP address will be part of every web request from the user system to our Platform. The personal data may be shared with the Sub-processors that are leveraged by Whatfix for hosting and providing the Whatfix Digital Adoption Platform. The list of the Whatfix’s Sub - processors is accessible here - https://whatfix.com/support/whatfix-sub-processors/ Whatfix’s privacy policy : https://whatfix.com/privacy-policy/ describes what personal information is processed by Whatfix, for what purpose Whatfix collects such information and with which third-parties Whatfix may share such personal information. Whatfix as a Data controller - The data is collected as part of their job applications or employment with Whatfix- Personal Details necessary to store/ access / process their applications; for employees: Store/ access / process Information required as part of their employment with Whatfix Users providing information to Whatfix via Website and other media.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Whatfix Inc: Active: UK Extension Certification, SW-US Certification, EU-US Certification | Live pagesha256 79b66ec15e |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Whatfix GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Productivity category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Productivity vendor has GDPR evidence in the index yet.