GDPR-Compliant Security Vendors

Security vendors are evaluated against GDPR when they handle the workflows this framework governs. Currently, 22 vendors in our Security category hold GDPR certification and 9 hold it partially or conditionally. Each listing below links to the vendor's full compliance profile.

Security vendors that hold GDPR certification

Okta logo

Okta

21/32

Identity and access management platform providing secure authentication, authorization, and single sign-on for enterprises.

CrowdStrike logo

CrowdStrike

17/32

Cloud-native endpoint protection platform providing threat intelligence, incident response, and cybersecurity solutions.

Zscaler logo

Zscaler

14/32

Cloud-native zero trust security platform (ZIA/ZPA) for secure internet and application access.

Palo Alto Networks logo

Palo Alto Networks

10/32

Cybersecurity platform spanning network security, cloud security, and SOC automation.

Regulation, not a certification

Orca Security logo

Orca Security

10/32

Agentless cloud security platform (CNAPP) for cloud workload and configuration risk.

1Password logo

1Password

9/32

Password manager and secure digital wallet that stores passwords, documents, and sensitive information with end-to-end encryption.

Fortinet logo

Fortinet

9/32

Network security and cybersecurity platform (firewalls, SASE, endpoint security).

Cybereason logo

Cybereason

9/32

Endpoint detection and response (EDR/XDR) cybersecurity platform.

Keeper logo

Keeper

9/32

Password management and privileged access security platform.

SentinelOne logo

SentinelOne

8/32

AI-powered endpoint, cloud, and identity security (XDR) platform.

Auth0 logo

Auth0

8/32

Identity and access management (authentication-as-a-service) platform, owned by Okta.

Vendor states GDPR ready

Varonis logo

Varonis

8/32

Data security platform for data classification, access governance, and threat detection.

Vendor aligns with GDPR as a compliance framework; not itemized as a formal certification

Bitdefender logo

Bitdefender

8/32

Cybersecurity platform for consumer and enterprise endpoint protection.

Snyk logo

Snyk

7/32

Developer security platform for finding and fixing vulnerabilities in code, containers, and cloud infrastructure.

Rapid7 logo

Rapid7

7/32

Vulnerability management, detection, and response (SIEM/XDR) security platform.

DPO appointed; controls implemented, not itemized as a formal certification

Bitwarden logo

Bitwarden

7/32

Open-source password manager and secrets management platform.

Mimecast logo

Mimecast

5/32

Email and collaboration security platform for threat protection and data resilience.

Addressed via DPA; referenced alongside CCPA/POPIA/PIPEDA as regulatory obligations rather than a formal certification

Lacework logo

Lacework

5/32

Cloud security and CNAPP platform for workload protection and compliance monitoring, now part of Fortinet.

Darktrace logo

Darktrace

5/32

AI-powered cybersecurity platform for threat detection and autonomous response.

Vendor states compliant; ICO registered

ESET logo

ESET

5/32

Cybersecurity platform for endpoint protection, antivirus, and threat detection.

Dashlane logo

Dashlane

4/32

Password manager and credential security platform for individuals and businesses.

Ivanti logo

Ivanti

4/32

IT and unified endpoint management, security, and service management software.

Ping Identity logo

Ping Identity

3/32

Enterprise identity and access management (IAM) platform.

Referenced as a regulation to comply with, not itemized as a certification

Checkmarx logo

Checkmarx

3/32

Application security testing (SAST/SCA) platform.

GitGuardian logo

GitGuardian

3/32

Secrets detection and non-human identity security platform.

WorkOS logo

WorkOS

3/32

Enterprise-readiness platform for SSO, directory sync, and authentication.

Check Point logo

Check Point

2/32

Cybersecurity platform for network, cloud, and endpoint security.

Referenced in compliance solutions navigation

JumpCloud logo

JumpCloud

2/32

Cloud directory platform for identity, device, and access management.

Data Privacy Officer and dedicated GDPR page referenced, not a formal certification

Cisco Duo logo

Cisco Duo

1/32

Multi-factor authentication (MFA) and zero-trust access security platform from Cisco.

Vendor states alignment with European data protection laws, not a formal certification on this page

OneLogin logo

OneLogin

1/32

Identity and access management platform, owned by One Identity.

Primary compliance focus of vendor's compliance page

Tailscale logo

Tailscale

1/32

Zero-config mesh VPN networking platform built on WireGuard.

GDPR Data Privacy Addendum offered; not framed as a standalone certification

These security vendors do not currently hold GDPR certification:

Know a vendor we're missing?

Data sourced from public trust centers. Not legal or compliance advice.

Logos and trademarks are property of their respective owners. Use does not imply endorsement, affiliation, or sponsorship.

© Compliance Posture 2026