Skip to main content
Yotpo logo

Yotpo

GDPR evidence

We're on a mission to provide brands with everything they need to create winning customer experiences, from discovery to

yotpo.comMarketingLast verified 2 Nov 2026
Request the report Are you Yotpo?
GDPR mark, CertReports state Vendor-stated as of 2 Nov 2026Vendor-stated

Yotpo and GDPR

Yotpo states it holds a data processing agreement. CertReports captured this on 2 Nov 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.

Evidence

Vendor-statedVendor states GDPR on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
2 Nov 2026GDPR
Live page Snapshotsha256 9abdac3cb4
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026GDPR
Live page Snapshotsha256 62927a69ea
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026GDPR
Live page Snapshotsha256 d5aa64f2bb
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026GDPR
Live page Snapshotsha256 2dce857f3f
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026GDPR
Live page Snapshotsha256 0733396a10
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026GDPR
Live page Snapshotsha256 6d8bcff3f8
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026GDPR
Live page Snapshotsha256 0de3ee7ecc
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026GDPR
Live page Snapshotsha256 58f4d68d3b
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026GDPR
Live page Snapshotsha256 69ad26af28
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026GDPR
Live page Snapshotsha256 e6f0afa9c4
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026GDPR
Live page Snapshotsha256 cb8bc77ffc
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026GDPR
Live page Snapshotsha256 dc233b78be
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026GDPR
Live page Snapshotsha256 3b9c2ccd1c
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026GDPR
Live page Snapshotsha256 16a58b2cec
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026GDPR
Live page Snapshotsha256 941d2586b1
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026GDPR
Live page Snapshotsha256 fbd572b86f
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026GDPR
Live page Snapshotsha256 16af1d3696
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026GDPR
Live page Snapshotsha256 c10742a079
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026GDPR
Live page Snapshotsha256 fa1de3a797
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026GDPR
Live page Snapshotsha256 4028ed37b5
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026GDPR
Live page Snapshotsha256 a00d65d9f8
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
18 Sep 2026GDPR
Live page Snapshotsha256 1ff88b00b6
This is wrong
Vendor-statedVendor states ISO/IEC 27701 on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
2 Nov 2026ISO/IEC 27701
Live page Snapshotsha256 9abdac3cb4
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 62927a69ea
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 d5aa64f2bb
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 2dce857f3f
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 0733396a10
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 6d8bcff3f8
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 0de3ee7ecc
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 58f4d68d3b
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 69ad26af28
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 e6f0afa9c4
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 cb8bc77ffc
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 dc233b78be
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 3b9c2ccd1c
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 16a58b2cec
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 941d2586b1
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 fbd572b86f
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 16af1d3696
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 c10742a079
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 fa1de3a797
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 4028ed37b5
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 a00d65d9f8
Yotpo trust centre (Drata)
Vendor trust centre · HTTP 200
18 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 1ff88b00b6
This is wrong
VerifiedActive: EU-US Certification, UK Extension Certification, SW-US Certification
as of 2 Nov 2026 · confidence 100%
Kind
Listing
Issued or listed
16 Nov 2017
Expires or valid through
29 Dec 2026
Scope
Website policy: Yotpo's platform allows its customers, e-commerce merchants, to better engage with their shoppers and increase their marketing retention. This policy describes the types of personal data we process in our B2B activity, what data we collect (section 1) how we use it (section 2), the types of third parties we share it with (section 5), and other relevant information. Employee policy: Yotpo's platform allows its customers, e-commerce merchants, to better engage with their shoppers and increase their marketing retention. This policy describes the types of personal data we process about our existing employees, what data we collect (section 1) how we use it (section 2), the types of third parties we share it with (section 5), and other relevant information. Candidate policy: Yotpo's platform allows its customers, e-commerce merchants, to better engage with their shoppers and increase their marketing retention. This policy describes the types of personal data we process about our job candidates, what data we collect (section 1) how we use it (section 2), the types of third parties we share it with (section 5), and other relevant information.
SourceCapturedQuoteLinks
Data Privacy Framework list
Official registry · HTTP 200
2 Nov 2026Yotpo Inc.: Active: EU-US Certification, UK Extension Certification, SW-US Certification
Live pagesha256 2b2083e536
This is wrong
What GDPR means, and what it does not

"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.

Read the GDPR guide and browse all vendors with evidence

Questions buyers ask

Is Yotpo GDPR compliant?

There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 22 Sep 2026DPA changedThe data processing agreement URL changed.
  2. 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.

Alternatives with GDPR evidence

Similar vendors (shared product tags or the Marketing category) whose GDPR row is verified or vendor-stated, ranked by similarity.

Bitly logo

Bitly

Marketing

Bitly makes it easy to create, share, and track short links and QR

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state VerifiedCCPA mark, CertReports state Vendor-stated
1 verified · 3 stated2 Nov 2026
Appcues logo

Appcues

Marketing

Appcues is an AI-powered customer engagement platform that triggers in-app, email, and push experiences right when users are paying

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state VerifiedCCPA mark, CertReports state Vendor-stated
1 verified · 4 stated2 Nov 2026
Attentive Mobile logo

Attentive Mobile

Marketing

Learn more about Attentive—the SMS and email platform that brings your customer interactions to life with advanced

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state VerifiedCCPA mark, CertReports state Vendor-stated
1 verified · 3 stated2 Nov 2026

Understand GDPR evidence

All articles