No public evidencewombatsecurity and GDPR
CertReports found no public GDPR evidence for wombatsecurity as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 25 May 2017
- Scope
- Wombat Security Technologies a division of Proofpoint provides information security awareness and training software to help organizations teach their employees secure behavior. Our Security Education Platform includes integrated knowledge assessments, a library of simulated attacks, interactive training modules, and security awareness materials, which have been proven to reduce successful phishing attacks and malware infections by up to 90%. Wombat Security minimizes the use, collection, and retention of PII to what is strictly necessary to accomplish our business purpose and mission. Wombat Security complies with the EU-US Privacy Shield Framework as set forth by the U.S. Department of Commerce with respect to the collection, use, and retention of Privacy Shield Personal Data originating from European Economic Area countries. At a minimum we collect first name, last name and company email address. Customer email addresses are collected to administer training assignments and to conduct assessments within the customer’s employee base. The email addresses are uploaded by the customer acting as administrator of the training and assessments. Wombat Security stores the user information (First Name, Last Name, and Email Address) uploaded by the customer. In addition, Wombat stores the statistic & reporting information pertaining to customer phishing simulations, and training campaigns. This includes items such as, number of users who clicked, number of emails opened, count of reported emails, browser information (version and Operating System version) for clicks & opens. Wombat is a SaaS application that is built and hosted entirely within Amazon Web Services. We make extensive use of the AWS technologies in place to maintain a high standard of quality and availability. Our architecture is designed so that nearly all of our systems are high-availability across different AWS availability zones. We have real-time monitoring and auto-scaling mechanisms in place to ensure system availability.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Wombat Security Technologies a division of Proofpoint, Inc.: Inactive | Live pagesha256 962c5b2add |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is wombatsecurity GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags) whose GDPR row is verified or vendor-stated, ranked by similarity.
No same-category vendor has GDPR evidence in the index yet.