Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Vendor-statedYembo and GDPR
Yembo states it holds a data processing agreement. CertReports captured this on 21 Sep 2026 from its trust centre (Vanta); it is a vendor statement, not an independent confirmation.
Evidence
Vendor-statedVendor states GDPR on its trust centre
as of 21 Sep 2026 · confidence 90%ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 31 Dec 2019
- Scope
- Summary provided, for full version see https://yembo.ai/legal/consumer/privacy-policy We will only collect and process Personal Information about you where we have a lawful basis. Lawful bases include consent (where you have given consent), contract (where processing is necessary for the performance of a contract with you (e.g., to deliver the Services you have requested)) and our legitimate interests. We collect information that you give us when you create an account, contact us, or otherwise access or use our Services, any information you voluntarily submit to us, and information regarding how you use the Services. Specifically, the foregoing includes: Your internet protocol address (i.e., IP address), browser user-agent string, and non-email authentication. Your name, email address, postal address, telephone number, and the identity of the agent or other individual who referred you to the Services Information you submit when inquiring about, or booking, moving services, including your originating and terminating address and certain details about your home (e.g., number of bedrooms, items in your home) that you capture when you take videos or still images Your responses to surveys that we may ask you to complete for research purposes or to help direct Yembo activities Browser and device information and information collected through technologies such as cookies, pixel tags, and other technologies. If you use our Services from a mobile device, that device will send us data about your location based on your phone settings. We will ask you to opt-in before we use GPS or other tools to identify your precise location. We use the information we collect to: Deliver and improve the Services and your overall user experience. To protect, investigate, and deter against fraudulent, unauthorized, or illegal activity. To compare and verify information for accuracy and update our records. Email, text, message, or otherwise contact you with information and updates about us and the Services, including, without limitation, on behalf of third party moving companies To respond to your comments and questions and provide customer service. To send you information including quotes, confirmations, technical notices, updates, security alerts, and support and administrative messages. Analyze how you use the Services with tools to help us understand usage and traffic patterns and know if there are problems with the Services. Create targeted advertising to promote the Services and engage our users. We do not rent, sell, or share your Personal Information with other people or non-affiliated third parties except with your consent or as necessary to complete any transaction or provide any Service you have requested or authorized. To help us do our work, we may provide limited access to some of your Personal Information to the following third parties: Business Partners: We collaborate with third party moving companies to deliver our Services. In these cases, we may share your name, contact information and other details you provided when making an account with our partners. Service Providers: We work with a wide range of third-party providers, notably our database administrators, cloud computing services, advertising services, data analysts, application service providers, bulk SMS services, and other non-governmental organizations.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Yembo: Inactive | Live pagesha256 902b0625e0 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Yembo GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Insurance category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read