GDPR-Compliant DevOps & Monitoring Vendors
DevOps & Monitoring vendors that hold GDPR certification
Datadog
17/32Cloud monitoring and analytics platform for infrastructure, applications, and logs.
Listed on Datadog Trust Center
MongoDB Atlas
17/32Fully managed cloud database service with multi-cloud support.
Listed on MongoDB Trust Portal
ServiceNow
17/32Cloud platform for IT service management, workflow automation, and enterprise operations.
Supported via DPA
GitHub
13/32Code hosting platform with version control, CI/CD, and collaboration tools.
Listed on GitHub security page and privacy statement
Mendix
13/32Low-code application development platform, owned by Siemens.
Freshservice
10/32IT service management (ITSM) platform from Freshworks.
Supported via DPA
Google Apigee
10/32API management platform, part of Google Cloud.
Postman
9/32API platform for building, testing, and documenting APIs.
PagerDuty
6/32Incident management and digital operations platform for IT teams.
Documented on PagerDuty GDPR approach page
MuleSoft
6/32Integration and API management platform (Anypoint Platform), part of Salesforce.
BrowserStack
6/32Cloud-based cross-browser and mobile app testing platform.
Bitbucket
5/32Git-based source code repository and CI/CD platform from Atlassian.
Addressed via Data Processing Addendum, not a formal certification
LaunchDarkly
5/32Feature management and experimentation platform for software delivery.
Operates data privacy program in accordance with GDPR/CCPA; not a formal certification
Supabase
4/32Open-source Firebase alternative with PostgreSQL database, auth, and storage.
Listed on Supabase security page with DPA available
Honeycomb
4/32Observability platform for distributed tracing and debugging production systems.
Zapier
4/32No-code workflow automation and app integration platform.
Make
4/32Visual workflow automation and integration platform (formerly Integromat).
Retool
4/32Low-code platform for building internal business applications.
OutSystems
4/32Low-code application development platform.
Datto RMM
4/32Remote monitoring and management platform for MSPs, part of Kaseya.
Kaseya
4/32IT management and security software suite for MSPs.
Kong
4/32API gateway and AI/API connectivity platform.
Tyk
4/32Open-source API gateway and management platform.
GitLab
3/32DevSecOps platform for source code management, CI/CD, and software delivery.
Regulation, not a certification
Sentry
3/32Application monitoring and error-tracking platform for developers.
DPA offered; not a formal certification
Grafana Cloud
3/32Managed observability platform (metrics, logs, traces, dashboards) from Grafana Labs.
DPA available; not a formal certification
Bugsnag
3/32Application stability monitoring and error tracking tool, owned by SmartBear.
Vendor publishes GDPR/CCPA API request guidance
n8n
3/32Workflow automation platform with a self-hostable, source-available core.
SolarWinds
3/32IT infrastructure monitoring and management software.
Self-attested companywide GDPR compliance with a publicly available pre-signed DPA including SCCs
ManageEngine
3/32IT management software suite (ITSM, endpoint, network, security), part of Zoho.
NinjaOne
3/32Unified IT and endpoint management platform for MSPs and IT teams.
Bubble
2/32No-code platform for building web applications.
Betty Blocks
2/32No-code application development platform.
ConnectWise
2/32Business management and RMM/PSA software suite for MSPs.
Glide
1/32No-code platform for building mobile and web apps from spreadsheets/data.
GDPR statement and a self-service DPA are published, but there is no EU data residency. Glide servers are hosted in Iowa, USA
TestRail
1/32Test case management software, part of Idera.
Travis CI
0/32Continuous integration (CI/CD) platform for building and testing code hosted on GitHub and Bitbucket.
Vendor publishes a security statement; no explicit third-party certification confirmed
AppDynamics
0/32Application performance monitoring (APM) and observability platform, owned by Cisco (part of Splunk).
Supported via DPA
LambdaTest
0/32Cloud-based cross-browser testing platform (rebranded as TestMu AI).
GDPR data handling commitments referenced; not confirmed as a standalone certification
These devops & monitoring vendors do not currently hold GDPR certification:
Know a vendor we're missing?