Skip to main content
Workshop Software logo

Workshop Software

GDPR evidence

Workshop is the best internal communications email software to create, send, & measure branded internal comms & employee

useworkshop.comLast verified 2 Nov 2026
Request the report Are you Workshop Software?
GDPR mark, CertReports state Vendor-stated as of 21 Sep 2026Vendor-stated

Workshop Software and GDPR

Workshop Software states it holds a data processing agreement. CertReports captured this on 21 Sep 2026 from its trust centre (Vanta); it is a vendor statement, not an independent confirmation.

Evidence

Vendor-statedVendor states GDPR on its trust centre
as of 21 Sep 2026 · confidence 90%
SourceCapturedQuoteLinks
Workshop Software trust centre (Vanta)
Vendor trust centre · HTTP 200
21 Sep 2026GDPR
Live page Snapshotsha256 a793bed11d
Workshop Software trust centre (Vanta)
Vendor trust centre · HTTP 200
18 Sep 2026GDPR
Live page Snapshotsha256 75655cf1a6
This is wrong
ExpiredInactive
as of 2 Nov 2026 · confidence 100%
Kind
Listing
Scope
Workshop collects data of our customers who have opted in to their organizations using our software. We collect name, email, device type, IP location, and email open/read data of employees of the organization. This data is not sold or disclosed to any 3rd party organizations and is removed immediately upon request from the organization.
SourceCapturedQuoteLinks
Data Privacy Framework list
Official registry · HTTP 200
2 Nov 2026Workshop Software, Inc.: Inactive
Live pagesha256 a2a0ff8e4e
This is wrong
What GDPR means, and what it does not

"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.

Read the GDPR guide and browse all vendors with evidence

Questions buyers ask

Is Workshop Software GDPR compliant?

There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 22 Sep 2026AI training policy changedTraining on customer data moved from unknown to no.
  2. 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
  3. 18 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
  4. 18 Sep 2026Subprocessor added: Anthropic (Claude)Anthropic (Claude) appeared on the subprocessor list.
  5. 18 Sep 2026Subprocessor added: Braintrust DataBraintrust Data appeared on the subprocessor list.
  6. 18 Sep 2026Subprocessor added: ClickHouseClickHouse appeared on the subprocessor list.

Alternatives with GDPR evidence

Similar vendors (shared product tags) whose GDPR row is verified or vendor-stated, ranked by similarity.

No same-category vendor has GDPR evidence in the index yet.

Understand GDPR evidence

All articles