What is CCPA? Which SaaS Vendors Are Certified? | Compliance Posture

What is CCPA?

The California Consumer Privacy Act, as amended by the CPRA, grants consumer privacy rights to California residents.

CCPA / CPRA (California) is tracked across the 422 vendors in our directory. Buyers frequently require it from vendors during procurement, and compliance is typically demonstrated through independent audits, official registries, or formal certifications. Timeframes vary. Most organizations plan months, not weeks, to prepare, be audited, and certify. For exact requirements, refer to the official CCPA program ↗.

Vendors with CCPA

97

Analytics

Amplitude 12/32

Google Analytics 6/32

Artificial Intelligence

Communication

Customer Support

Freshdesk 10/32

Data Engineering

Databricks 16/32

Design & Creative

DevOps & Monitoring

BrowserStack 6/32

Freshservice 10/32

E-Commerce

BigCommerce 14/32

ERP & Operations

Microsoft Dynamics 365 15/32

Finance & Payments

QuickBooks Online 7/32

Governance, Risk & Compliance

Secureframe 6/32

HR & People Ops

Betterworks 8/32

Cornerstone OnDemand 12/32

Culture Amp 7/32

Greenhouse 10/32

Infrastructure & Cloud

Cloudflare 20/32

Redis Cloud 12/32

Marketing

Productivity & Docs

Confluence 16/32

Lucidchart 10/32

Microsoft OneNote 15/32

Project Management

Monday.com 17/32

Sales & CRM

Freshsales 10/32

Salesforce 27/32

Security

SentinelOne 8/32

Websites & CMS

Drupal (Acquia) 13/32

HubSpot CMS 6/32

Partial or conditional

15

These vendors meet it under specific conditions. Hover a card for the condition, or see their profiles.

Supabase CCPA language in privacy policy but full compliance not documented 4/32

Snowflake Privacy questionnaire response mentions CCPA handling but explicit CCPA certification not documented 19/32

Mixpanel CCPA obligations addressed in privacy documentation but explicit certification not documented 7/32

Tableau Salesforce privacy program addresses CCPA. Tableau-specific certification not broken out 7/32

Box Box privacy readiness program for state privacy laws 12/32

Shopify Merchant-facing help center guidance; shared responsibility 5/32

Salesloft Supported via MSA with DPA 4/32

Clari Supported via MSA with DPA 4/32

ZoomInfo Same as GDPR - operational/contractual support, not a certification 2/32

Semrush Monitors other regional privacy laws (CCPA, LGPD) per its security page 2/32

Drift CCPA/CPRA supported 3/32

LaunchDarkly Same as GDPR 5/32

Mimecast Same as GDPR 5/32

LogRocket Documented data-handling guidance for CCPA; not confirmed as a standalone certification 1/32

Kinsta Referenced in footer/privacy materials; not detailed as a standalone certification in this source 4/32

Not certified

4

Finance & Payments

HR & People Ops

Project Management

306 unverified

For these vendors, CCPA status is not publicly documented. That does not mean they lack the certification.

15Five 8x8 A-LIGN Acronis ActiveCampaign Acumatica Adobe Acrobat Adobe Analytics Adobe Commerce Adobe Creative Cloud Adobe XD ADP Adyen Affirm Afterpay Ahrefs Airbyte Airwallex Akamai Alchemer Amazon Web Services Anthropic AppDynamics Applitools Auth0 Avalara BambooHR Basecamp Bench Accounting Betty Blocks Bitbucket Bitdefender Blackboard BlueJeans Braintree Braze Brevo Bubble Buffer Campaign Monitor Carbonite Ceridian Dayforce Certinia Chargebee Check Point Checkmarx Checkout.com Chorus.ai CircleCI Cisco Duo Cisco Webex Clay Clio ConnectWise Constant Contact Contentful ContractPodAi Copper Coursera for Business Craft Crazy Egg CrowdStrike Cybereason Cypress.io Darktrace Datto RMM Dialpad DigitalOcean Discord Divvy Docebo DocuSign Dropbox Sign Druva Ecwid Elasticsearch Epicor ESET Evernote Expensify Fastly Firebase Flexport Fly.io Formstack Fortinet FourKites FreshBooks Front FullStory GitGuardian GitHub GitLab Gladly Glide GoCardless Google Apigee Google Cloud Platform Google Workspace Gorgias GoTo Meeting Grafana Cloud Grammarly Grasshopper Groove Groq Height Help Scout Heroku HiBob Honeycomb Hootsuite Hugging Face Hyperproof iCIMS IFS Infor Informatica Instapage Instructure Canvas Iterable Ivanti Jenkins JFrog Jira Service Management JumpCloud Justworks Kaseya Kayako Keap Keeper Keeper Security Kentico Klarna KnowBe4 Kong Kustomer Laika LambdaTest LangSmith LastPass Later Lattice LawPay LinkedIn Learning Linode LiveChat LogicGate Looker Loom Lusha Mailchimp MailerLite Make Malwarebytes ManageEngine Marketo Marqeta McAfee Melio Mendix MetricStream Microsoft 365 Microsoft Azure Microsoft Teams Mistral AI MongoDB Atlas Moz MuleSoft MyCase n8n Namely New Relic Nimble CRM NinjaOne Odoo Omnisend OneLogin OneTrust Onfleet Optimizely Oracle Eloqua Oracle ERP Cloud Oracle NetSuite Orca Security OutSystems PagerDuty Palo Alto Networks PandaDoc Paychex Paylocity PayPal Pendo Perplexity AI Personio Pilot.com Ping Identity Plaid PlanetScale Podio PostHog Power BI PracticePanther PrestaShop project44 ProofHub Proofpoint Qlik Qualtrics Qualys Railway Rapid7 Re:amaze Recurly Remote.com Render Resend Resolver Revolut Business RingCentral Rollbar RSA Archer Rubrik Sage Intacct Salesforce Pardot Sanity.io SAP SAP S/4HANA Sauce Labs Scale AI Scytale Seamless.ai Semgrep Sentry ServiceNow SharpSpring ShipBob ShipStation Shopware Shortcut Sitecore Sketch Skillsoft SmartRecruiters Smartsheet Softr SolarWinds SonarQube Sophos Splunk Sprinto Sprout Social Square Squarespace Strapi SurveyMonkey Symantec Tailscale Talend TalentLMS TaxJar Teamwork.com Tenable TestRail Thoropass ThoughtSpot Tidio Tipalti Together AI Travis CI Trend Micro TriNet TrustArc Tyk Typeform Udemy Business UKG Unbounce Vanta Varonis Veeam Veracode Vimeo VMware Carbon Black Volusion Vonage VWO Wasabi Wave Accounting Weaviate Weights & Biases Whereby Wire Wise WooCommerce WordPress VIP Workable Workday WP Engine Wrike Xero Zoho CRM Zoho Desk Zoom Zscaler Zuora

Browse by category

CCPA-compliant analytics

CCPA-compliant artificial intelligence

CCPA-compliant communication

CCPA-compliant data engineering

CCPA-compliant design & creative

CCPA-compliant devops & monitoring

CCPA-compliant e-commerce

CCPA-compliant erp & operations

CCPA-compliant finance & payments

CCPA-compliant governance, risk & compliance

CCPA-compliant hr & people ops

CCPA-compliant infrastructure & cloud

CCPA-compliant marketing

CCPA-compliant productivity & docs

CCPA-compliant project management

CCPA-compliant sales & crm

CCPA-compliant security

CCPA-compliant customer support

CCPA-compliant websites & cms

Don't see a vendor you need? Submit it

Compliance Posture

Check any SaaS vendor's security and compliance posture across 32 frameworks, all in one place.

Categories

Frameworks

Site

Data sourced from public trust centers. Not legal or compliance advice.

Logos and trademarks are property of their respective owners. Use does not imply endorsement, affiliation, or sponsorship.

© Compliance Posture 2026