No public evidenceX and GDPR
CertReports found no public GDPR evidence for X as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 4 Apr 2024
- Expires or valid through
- 2 Apr 2027
- Scope
- X Corp. receives and processes personal information relating to natural persons in the EU/EEA and in the United Kingdom who are employees, prospective employees, or individual contacts of corporate customers (including advertisers), suppliers, service providers and other corporate business partners. X Corp. typically receives such information from X International Unlimited Company (XIUC) or its subsidiaries in the EU/EEA and in the United Kingdom. X Corp provides web-hosting and a wide range of technical services for XIUC, its subsidiaries, and other entities, such as advertisers and partners. X Corp. may also process personal information provided by XIUC’s or its subsidiaries’ corporate business partners based in the EU/EEA and in the United Kingdom. The personal information described above is collected, held and processed for different purposes, which may include any of the following: for sales and marketing to consumers and businesses; effecting transactions with consumers and businesses; providing, understanding, improving, and customizing services and products for consumers and businesses; financial processing and management; supplier, vendor, and partner relationship management; customer support and customer relationship management; human resources, operations, and security management; and legal and regulatory compliance. The personal information described above is not disclosed to third parties except in the limited circumstances described in the Privacy Policy, including with consent; to a service provider subject to appropriate privacy, confidentiality, and security measures; to comply with a law or regulation or protect against harm; or to a corporate affiliate or in connection with a business transfer.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | X Corp.: Active: EU-US Certification, UK Extension Certification, SW-US Certification | Live pagesha256 8981a67ac3 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is X GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Media and content category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Media and content vendor has GDPR evidence in the index yet.