No public evidenceWorkleap USA and GDPR
CertReports found no public GDPR evidence for Workleap USA as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 24 Jun 2019
- Expires or valid through
- 17 Aug 2027
- Scope
- Workleap USA Inc. processes personal data received from the EU, UK, and Switzerland in reliance on the Data Privacy Framework primarily as a processor on behalf of its corporate customers, in connection with providing its employee experience software products and platform (talent management, employee engagement, performance, onboarding, and learning tools). Purposes include: providing, maintaining, securing, and improving the services; account creation, administration, and billing; customer support; transactional and service-related communications; analytics and product development; marketing (subject to opt-out); and compliance with legal and contractual obligations. The types of personal data processed include: (i) customer and end-user account data (name, contact details, job title, profile information, preferences); (ii) employment-related data provided by customers, such as information from HR information systems, including performance and compensation data; (iii) user-generated content (e.g., employee feedback, training materials, onboarding content); (iv) billing contact and payment information; and (v) technical and usage data (IP address, device and browser information, service usage). Workleap USA discloses such personal data to: (a) affiliated Workleap entities in Canada and the United States; (b) third-party service providers acting as agents on its behalf (e.g., hosting, payment processing, analytics, and customer support providers), subject to contractual confidentiality and security obligations; (c) legal, governmental, or regulatory authorities where required by law; and (d) potential acquirers or successors in the context of a business transaction. Workleap does not sell, rent, or trade personal data.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Workleap USA Inc.: Active: UK Extension Certification, SW-US Certification, EU-US Certification | Live pagesha256 1337163ff9 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Workleap USA GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags) whose GDPR row is verified or vendor-stated, ranked by similarity.
No same-category vendor has GDPR evidence in the index yet.