GDPR-Compliant DevOps & Monitoring Vendors

DevOps & Monitoring vendors are evaluated against GDPR when they handle the workflows this framework governs. Currently, 28 vendors in our DevOps & Monitoring category hold GDPR certification and 11 hold it partially or conditionally. Each listing below links to the vendor's full compliance profile.

DevOps & Monitoring vendors that hold GDPR certification

Datadog logo

Datadog

17/32

Cloud monitoring and analytics platform for infrastructure, applications, and logs.

Listed on Datadog Trust Center

MongoDB Atlas logo

MongoDB Atlas

17/32

Fully managed cloud database service with multi-cloud support.

Listed on MongoDB Trust Portal

ServiceNow logo

ServiceNow

17/32

Cloud platform for IT service management, workflow automation, and enterprise operations.

Supported via DPA

GitHub logo

GitHub

13/32

Code hosting platform with version control, CI/CD, and collaboration tools.

Listed on GitHub security page and privacy statement

Mendix logo

Mendix

13/32

Low-code application development platform, owned by Siemens.

Freshservice logo

Freshservice

10/32

IT service management (ITSM) platform from Freshworks.

Supported via DPA

Google Apigee logo

Google Apigee

10/32

API management platform, part of Google Cloud.

Postman logo

Postman

9/32

API platform for building, testing, and documenting APIs.

PagerDuty logo

PagerDuty

6/32

Incident management and digital operations platform for IT teams.

Documented on PagerDuty GDPR approach page

MuleSoft logo

MuleSoft

6/32

Integration and API management platform (Anypoint Platform), part of Salesforce.

BrowserStack logo

BrowserStack

6/32

Cloud-based cross-browser and mobile app testing platform.

Bitbucket logo

Bitbucket

5/32

Git-based source code repository and CI/CD platform from Atlassian.

Addressed via Data Processing Addendum, not a formal certification

LaunchDarkly logo

LaunchDarkly

5/32

Feature management and experimentation platform for software delivery.

Operates data privacy program in accordance with GDPR/CCPA; not a formal certification

Supabase logo

Supabase

4/32

Open-source Firebase alternative with PostgreSQL database, auth, and storage.

Listed on Supabase security page with DPA available

Honeycomb logo

Honeycomb

4/32

Observability platform for distributed tracing and debugging production systems.

Zapier logo

Zapier

4/32

No-code workflow automation and app integration platform.

Make logo

Make

4/32

Visual workflow automation and integration platform (formerly Integromat).

Retool logo

Retool

4/32

Low-code platform for building internal business applications.

OutSystems logo

OutSystems

4/32

Low-code application development platform.

Datto RMM logo

Datto RMM

4/32

Remote monitoring and management platform for MSPs, part of Kaseya.

Kaseya logo

Kaseya

4/32

IT management and security software suite for MSPs.

Kong logo

Kong

4/32

API gateway and AI/API connectivity platform.

Tyk logo

Tyk

4/32

Open-source API gateway and management platform.

GitLab logo

GitLab

3/32

DevSecOps platform for source code management, CI/CD, and software delivery.

Regulation, not a certification

Sentry logo

Sentry

3/32

Application monitoring and error-tracking platform for developers.

DPA offered; not a formal certification

Grafana Cloud logo

Grafana Cloud

3/32

Managed observability platform (metrics, logs, traces, dashboards) from Grafana Labs.

DPA available; not a formal certification

Bugsnag logo

Bugsnag

3/32

Application stability monitoring and error tracking tool, owned by SmartBear.

Vendor publishes GDPR/CCPA API request guidance

n8n logo

n8n

3/32

Workflow automation platform with a self-hostable, source-available core.

SolarWinds logo

SolarWinds

3/32

IT infrastructure monitoring and management software.

Self-attested companywide GDPR compliance with a publicly available pre-signed DPA including SCCs

ManageEngine logo

ManageEngine

3/32

IT management software suite (ITSM, endpoint, network, security), part of Zoho.

NinjaOne logo

NinjaOne

3/32

Unified IT and endpoint management platform for MSPs and IT teams.

Bubble logo

Bubble

2/32

No-code platform for building web applications.

Betty Blocks logo

Betty Blocks

2/32

No-code application development platform.

ConnectWise logo

ConnectWise

2/32

Business management and RMM/PSA software suite for MSPs.

Glide logo

Glide

1/32

No-code platform for building mobile and web apps from spreadsheets/data.

GDPR statement and a self-service DPA are published, but there is no EU data residency. Glide servers are hosted in Iowa, USA

TestRail logo

TestRail

1/32

Test case management software, part of Idera.

Travis CI logo

Travis CI

0/32

Continuous integration (CI/CD) platform for building and testing code hosted on GitHub and Bitbucket.

Vendor publishes a security statement; no explicit third-party certification confirmed

AppDynamics logo

AppDynamics

0/32

Application performance monitoring (APM) and observability platform, owned by Cisco (part of Splunk).

Supported via DPA

LambdaTest logo

LambdaTest

0/32

Cloud-based cross-browser testing platform (rebranded as TestMu AI).

GDPR data handling commitments referenced; not confirmed as a standalone certification

These devops & monitoring vendors do not currently hold GDPR certification:

Know a vendor we're missing?

Data sourced from public trust centers. Not legal or compliance advice.

Logos and trademarks are property of their respective owners. Use does not imply endorsement, affiliation, or sponsorship.

© Compliance Posture 2026