Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
ZoomInfo
GDPR evidence
ZoomInfo is the trusted go-to-market platform for businesses to find, acquire, and grow
No public evidenceZoomInfo and GDPR
CertReports found no public GDPR evidence for ZoomInfo as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
Vendor-statedVendor states ISO 27701 on its trust centre
as of 30 Sep 2026 · confidence 90%| Source | Captured | Quote | Links |
|---|---|---|---|
ZoomInfo trust centre (Vanta) Vendor trust centre · HTTP 200 | 29 Sep 2026 | ISO 27701 | |
ZoomInfo trust centre (Vanta) Vendor trust centre · HTTP 200 | 21 Sep 2026 | ISO 27701 | |
ZoomInfo trust centre (Vanta) Vendor trust centre · HTTP 200 | 19 Sep 2026 | ISO 27701 |
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 5 Jan 2018
- Expires or valid through
- 6 Apr 2027
- Scope
- ZoomInfo collects non-sensitive business contact and similar information related to individuals when they are working in their professional or employment capacity. ZoomInfo uses this information to create professional profiles of individuals, which includes information such as name, company, office address, telephone number, email address, job title and department, job function and responsibilities, education history, employment history, links to articles by, about, or quoting an individual, links to an individual’s social networking profiles, and inferences drawn from information we hold about individuals. We also collect and process web browsing data such as browser and device information, information about pages viewed, and other similar information. We provide this information to our customers and partners, who are businesses trying to reach business professionals for their own business-to-business sales, marketing, and recruiting activities. ZoomInfo also collects information from its EU-based employees for purposes of carrying out the employment relationship. The information collected from EU employees includes contact and identification information, demographic data, data related to the employee’s position and performance, compensation data, data related to benefits enrollment and use of employee benefits, and other similar information. This data is shared with vendors that require such information to provide products or services to ZoomInfo to establish and manage the employment relationship.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | ZoomInfo: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 0f71b3c45f |
Data Privacy Framework list Official registry · HTTP 200 | 12 Oct 2026 | ZoomInfo: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 d113bd6407 |
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Scope
- ZoomInfo collects business information about individuals and companies (primarily name, business email address, company name, job title and department, business phone number, business postal address, and corporate website URL) for the purpose of creating a directory and profiles of business people and companies which then are made available to visitors to its website as well as its customers and strategic partners. The data also may be disclosed to service providers to enable them to support the operation of the service, as may be required by law, and to a buyer of the company. Also, if an individual registers for a ZoomInfo event with a third-party speaker, that information will generally be shared with the speaker. If ZoomInfo posts customer testimonials on its website, it always obtains prior consent. ZoomInfo data is obtained by gathering publicly-available information from the Internet, licensing information from other companies, and from individuals who contribute it about themselves and others known to them. Individuals can modify information regarding themselves and have their entire profile deleted from the directory at any time. Otherwise, the data is retained for as long as the individual’s account is active and to comply with the company’s legal obligations, resolve disputes and enforce agreements. For further details, please see: https://www.zoominfo.com/business/about-zoominfo/privacy-policy.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Zoom Information, Inc.: Inactive | Live pagesha256 535347d134 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is ZoomInfo GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 19 Sep 2026Subprocessor added: 1Mind AI, Inc.1Mind AI, Inc. appeared on the subprocessor list.
- 19 Sep 2026Subprocessor added: Adjiva Pte. Ltd. (aka DeltaX)Adjiva Pte. Ltd. (aka DeltaX) appeared on the subprocessor list.
- 19 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
- 19 Sep 2026Subprocessor added: Amplitude, Inc.Amplitude, Inc. appeared on the subprocessor list.
- 19 Sep 2026Subprocessor added: Anthropic, PBCAnthropic, PBC appeared on the subprocessor list.
- 19 Sep 2026Subprocessor added: BoxBox appeared on the subprocessor list.
- 19 Sep 2026Subprocessor added: Catamorphic Co., dba LaunchDarklyCatamorphic Co., dba LaunchDarkly appeared on the subprocessor list.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Sales tools category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Apollo.io
Sales tools
Apollo is the foundation of your entire go-to-market strategy.
FirstIgnite
AI tools
AI-Powered Business Development for Scientific Organizations
Clay
Sales tools
Infrastructure to get any data, run agentic workflows, and launch GTM
UserGems
Sales tools
The AI Command Center for outbound and ABM
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read