GDPR-Compliant E-Commerce Vendors
E-Commerce vendors are evaluated against GDPR when they handle the workflows this framework governs. Currently, 3 vendors in our E-Commerce category hold GDPR certification and 3 hold it partially or conditionally. Each listing below links to the vendor's full compliance profile.
E-Commerce vendors that hold GDPR certification
BigCommerce
14/32SaaS e-commerce platform for building and running online stores.
Adobe Commerce
9/32Enterprise e-commerce platform (formerly Magento Commerce), part of Adobe Experience Cloud.
Shopify
5/32E-commerce platform for building and managing online stores.
Shopify is the data processor; merchant is the controller
Shopware
1/32E-commerce platform available as self-hosted or cloud (Shopware Cloud) offering.
WooCommerce
0/32Open-source e-commerce plugin for WordPress, owned by Automattic.
Provides GDPR tooling; compliance depends on store owner's configuration
PrestaShop
0/32Open-source e-commerce platform, typically self-hosted.
Open-source, self-hosted software; provides GDPR tooling but compliance depends on merchant's own hosting/config
These e-commerce vendors do not currently hold GDPR certification:
Know a vendor we're missing?