EU-US DPF-Compliant Security Vendors (2026)

EU-US DPF-Compliant Security Vendors

Security vendors are evaluated against EU-US DPF when they handle the workflows this framework governs. Currently, 12 vendors in our Security category hold EU-US DPF certification. Each listing below links to the vendor's full compliance profile.

Security vendors that hold EU-US DPF certification

Okta

21/32

Identity and access management platform providing secure authentication, authorization, and single sign-on for enterprises.

CrowdStrike

17/32

Cloud-native endpoint protection platform providing threat intelligence, incident response, and cybersecurity solutions.

Netskope

11/32

Security service edge (SSE) and cloud security platform (CASB, SWG, ZTNA).

Proofpoint

10/32

Email security, threat protection, and data loss prevention platform.

Cybereason

9/32

Endpoint detection and response (EDR/XDR) cybersecurity platform.

Keeper

9/32

Password management and privileged access security platform.

Rapid7

7/32

Vulnerability management, detection, and response (SIEM/XDR) security platform.

Bitwarden

7/32

Open-source password manager and secrets management platform.

Tenable

6/32

Exposure management and vulnerability management platform.

Via Privacy Shield successor framework

Lacework

5/32

Cloud security and CNAPP platform for workload protection and compliance monitoring, now part of Fortinet.

Clerk

4/32

Authentication and user management platform for developers.

Veracode

3/32

Application security testing platform (SAST, DAST, SCA).

These security vendors do not currently hold EU-US DPF certification:

Know a vendor we're missing?

Submit it