GDPR-Compliant Marketing Vendors

Marketing vendors are evaluated against GDPR when they handle the workflows this framework governs. Currently, 7 vendors in our Marketing category hold GDPR certification and 18 hold it partially or conditionally. Each listing below links to the vendor's full compliance profile.

Marketing vendors that hold GDPR certification

Marketo logo

Marketo

8/32

Marketing automation platform, now Adobe Marketo Engage within Adobe Experience Cloud.

Supported via DPA

Optimizely logo

Optimizely

7/32

Digital experience and experimentation (A/B testing) platform.

Regulation, not explicitly listed as a certification on the compliance page

Klaviyo logo

Klaviyo

6/32

Email and SMS marketing automation platform built for e-commerce.

Sprout Social logo

Sprout Social

4/32

Social media management, engagement, and analytics platform.

Supported via DPA

ActiveCampaign logo

ActiveCampaign

3/32

Customer experience automation platform combining email marketing, marketing automation, and CRM.

Braze logo

Braze

3/32

Customer engagement platform for cross-channel messaging (push, email, SMS, in-app).

Supported via DPA

Hootsuite logo

Hootsuite

3/32

Social media management and scheduling platform.

Regulation, referenced but not listed as a certification

Mailchimp logo

Mailchimp

2/32

Email marketing and marketing automation platform, owned by Intuit.

Iterable logo

Iterable

2/32

Cross-channel customer engagement and marketing automation platform.

Semrush logo

Semrush

2/32

SEO, content marketing, and competitive-intelligence platform.

VWO logo

VWO

2/32

A/B testing, conversion rate optimization, and experimentation platform.

Supported via DPA

Constant Contact logo

Constant Contact

1/32

Email marketing and small-business marketing platform.

Vendor publishes GDPR guidance for customers; no explicit third-party certification found

Brevo logo

Brevo

1/32

Email marketing, SMS, and CRM platform (formerly Sendinblue), based in France.

Brevo is an EU (French) company; positions GDPR compliance as core to its product

Salesforce Pardot logo

Salesforce Pardot

1/32

B2B marketing automation platform, now branded Marketing Cloud Account Engagement.

Supported via DPA

Instapage logo

Instapage

1/32

Landing page and post-click optimization platform for marketing teams.

Supported via DPA

MailerLite logo

MailerLite

1/32

Email marketing and automation platform for small businesses and creators.

EU-based vendor; positions GDPR compliance as core to its product

Campaign Monitor logo

Campaign Monitor

0/32

Email marketing platform, part of the Marigold family of brands.

Vendor publishes GDPR guidance for customers; no explicit certification found

SharpSpring logo

SharpSpring

0/32

Marketing automation and CRM platform aimed at agencies and SMBs, owned by Constant Contact.

Vendor publishes GDPR guidance for customers; no explicit certification found

Oracle Eloqua logo

Oracle Eloqua

0/32

B2B marketing automation platform running on Oracle Cloud Infrastructure.

Supported via DPA

Ahrefs logo

Ahrefs

0/32

SEO toolset for backlink analysis, keyword research, and site audits.

Vendor publishes a privacy policy referencing GDPR; no explicit third-party certification found

Moz logo

Moz

0/32

SEO software for keyword research, rank tracking, and site audits.

Vendor publishes a privacy policy referencing GDPR; no explicit third-party certification found

Buffer logo

Buffer

0/32

Social media scheduling and analytics platform for small teams and creators.

Vendor publishes a privacy policy referencing GDPR; no explicit third-party certification found

Later logo

Later

0/32

Social media scheduling and visual content planning platform.

Vendor publishes a privacy policy referencing GDPR; no explicit third-party certification found

Omnisend logo

Omnisend

0/32

Email and SMS marketing automation platform built for e-commerce.

Vendor publishes a privacy policy referencing GDPR; no explicit third-party certification found

Unbounce logo

Unbounce

0/32

Landing page builder and conversion optimization platform for marketers.

Vendor publishes GDPR guidance for customers; not a held certification

Know a vendor we're missing?

Data sourced from public trust centers. Not legal or compliance advice.

Logos and trademarks are property of their respective owners. Use does not imply endorsement, affiliation, or sponsorship.

© Compliance Posture 2026