What is GDPR?
European Union General Data Protection Regulation governing the processing of personal data of EU residents.
GDPR (EU) is tracked across the 422 vendors in our directory. Buyers frequently require it from vendors during procurement, and compliance is typically demonstrated through independent audits, official registries, or formal certifications. Timeframes vary. Most organizations plan months, not weeks, to prepare, be audited, and certify. For exact requirements, refer to the official GDPR program ↗.
Vendors with GDPR
218Analytics
Artificial Intelligence
Communication
Customer Support
Data Engineering
Design & Creative
DevOps & Monitoring
Betty Blocks
2/32
BrowserStack
6/32
Bubble
2/32
Bugsnag
3/32
ConnectWise
2/32
Datadog
17/32
Datto RMM
4/32
GitHub
13/32
Google Apigee
10/32
Honeycomb
4/32
Kaseya
4/32
Kong
4/32
Make
4/32
ManageEngine
3/32
Mendix
13/32
MongoDB Atlas
17/32
MuleSoft
6/32
n8n
3/32
NinjaOne
3/32
OutSystems
4/32
PagerDuty
6/32
Postman
9/32
Retool
4/32
SolarWinds
3/32
Supabase
4/32
TestRail
1/32
Tyk
4/32
Zapier
4/32
E-Commerce
Education & Learning
ERP & Operations
Finance & Payments
Governance, Risk & Compliance
HR & People Ops
Infrastructure & Cloud
Marketing
Productivity & Docs
Project Management
Sales & CRM
Security
1Password
9/32
Auth0
8/32
Bitdefender
8/32
Bitwarden
7/32
Checkmarx
3/32
CrowdStrike
17/32
Cybereason
9/32
Darktrace
5/32
Dashlane
4/32
ESET
5/32
Fortinet
9/32
GitGuardian
3/32
Ivanti
4/32
Keeper
9/32
Lacework
5/32
Okta
21/32
OneLogin
1/32
Orca Security
10/32
SentinelOne
8/32
Snyk
7/32
WorkOS
3/32
Zscaler
14/32
Partial or conditional
98These vendors meet it under specific conditions. Hover a card for the condition, or see their profiles.
Amazon Web Services
Supported via DPA
21/32
Google Cloud Platform
Supported via DPA
23/32
Microsoft Azure
Supported via DPA
23/32
Cloudflare
Supported via DPA
20/32
DigitalOcean
Supported via DPA
10/32
Microsoft 365
Supported via DPA
21/32
Microsoft Teams
Supported via DPA
21/32
Adobe Creative Cloud
TrustArc GDPR Privacy Practices Management Compliance Validation; customer-configurable
11/32
Adobe Acrobat
TrustArc GDPR validation; customer-configurable
12/32
Shopify
Shopify is the data processor; merchant is the controller
5/32
Oracle NetSuite
Supported via DPA
7/32
ServiceNow
Supported via DPA
17/32
GitLab
Regulation, not a certification
3/32
Palo Alto Networks
Regulation, not a certification
10/32
Vimeo
Supported via DPA
8/32
Freshsales
Supported via DPA
10/32
Keap
Vendor publishes GDPR-related guidance for customers; no explicit certification found
0/32
Salesloft
Supported via DPA incorporating SCCs
4/32
Chorus.ai
Supported via ZoomInfo's parent compliance program
0/32
Clari
Supported via DPA incorporating SCCs
4/32
ZoomInfo
Supported via DPA
2/32
Seamless.ai
Vendor publishes a privacy policy referencing GDPR; independent security ratings note a weaker public disclosure posture than peers
0/32
Marketo
Supported via DPA
8/32
Constant Contact
Vendor publishes GDPR guidance for customers; no explicit third-party certification found
1/32
Braze
Supported via DPA
3/32
Campaign Monitor
Vendor publishes GDPR guidance for customers; no explicit certification found
0/32
SharpSpring
Vendor publishes GDPR guidance for customers; no explicit certification found
0/32
Salesforce Pardot
Supported via DPA
1/32
Oracle Eloqua
Supported via DPA
0/32
Ahrefs
Vendor publishes a privacy policy referencing GDPR; no explicit third-party certification found
0/32
Moz
Vendor publishes a privacy policy referencing GDPR; no explicit third-party certification found
0/32
Hootsuite
Regulation, referenced but not listed as a certification
3/32
Buffer
Vendor publishes a privacy policy referencing GDPR; no explicit third-party certification found
0/32
Sprout Social
Supported via DPA
4/32
Later
Vendor publishes a privacy policy referencing GDPR; no explicit third-party certification found
0/32
Instapage
Supported via DPA
1/32
Optimizely
Regulation, not explicitly listed as a certification on the compliance page
7/32
VWO
Supported via DPA
2/32
Crazy Egg
Vendor publishes a privacy policy referencing GDPR; no explicit third-party certification found
0/32
Omnisend
Vendor publishes a privacy policy referencing GDPR; no explicit third-party certification found
0/32
Freshdesk
Supported via DPA
10/32
Freshservice
Supported via DPA
10/32
Help Scout
Referenced via privacy policy; not listed as a distinct certification on the security page
2/32
Kayako
Vendor publishes GDPR guidance for customers
0/32
LiveChat
Vendor publishes GDPR-related guidance for customers; no explicit third-party certification confirmed
0/32
Drift
Supported via DPA
3/32
Gorgias
Supported via DPA
1/32
Groove
Vendor publishes GDPR-related guidance for customers; no explicit third-party certification confirmed
0/32
Kustomer
Supported via DPA
2/32
Re:amaze
Vendor publishes a privacy policy referencing GDPR; no explicit third-party certification found
0/32
BambooHR
Vendor publishes GDPR guidance and a DPA for customers; no explicit third-party certification confirmed
0/32
ADP
Regulation, not listed as a certification on this page
5/32
SmartRecruiters
Supported via DPA
1/32
iCIMS
iCIMS certifications (ISO 27701, SOC2, ISO 27001) help customers comply with GDPR; not itself a certification iCIMS 'holds' the way ISO/SOC are
3/32
Namely
Vendor publishes a privacy policy referencing GDPR; no explicit third-party certification confirmed
0/32
HiBob
Referenced via footer badge; not detailed as a formal certification on the main security page
3/32
UKG
Regulation, not listed as a certification on this specific page
6/32
Unbounce
Vendor publishes GDPR guidance for customers; not a held certification
0/32
8x8
Supported via DPA
2/32
GoTo Meeting
Supported via DPA
3/32
Cisco Duo
Vendor states alignment with European data protection laws, not a formal certification on this page
1/32
Discord
Vendor states it implements technical/organizational measures against unlawful processing; no explicit third-party certification confirmed
0/32
Basecamp
Vendor (37signals) publishes a privacy policy and subprocessor list referencing GDPR; no explicit third-party certification found
0/32
ProofHub
Vendor publishes a privacy policy referencing GDPR; no explicit third-party certification found
0/32
Shortcut
Referenced via policy pages; not a formal certification
2/32
Chargebee
Addressed via separate guidance documents, not a formal downloadable certificate
4/32
Recurly
Referenced as an issue Recurly helps address; not detailed as a certification
1/32
Zuora
Not explicitly listed in this press release, though global compliance is emphasized broadly
7/32
Tipalti
Vendor addresses GDPR in resource content; no explicit certification page found
0/32
Bitbucket
Addressed via Data Processing Addendum, not a formal certification
5/32
Travis CI
Vendor publishes a security statement; no explicit third-party certification confirmed
0/32
Sentry
DPA offered; not a formal certification
3/32
LaunchDarkly
Operates data privacy program in accordance with GDPR/CCPA; not a formal certification
5/32
AppDynamics
Supported via DPA
0/32
Grafana Cloud
DPA available; not a formal certification
3/32
Check Point
Referenced in compliance solutions navigation
2/32
Rapid7
DPO appointed; controls implemented, not itemized as a formal certification
7/32
Mimecast
Addressed via DPA; referenced alongside CCPA/POPIA/PIPEDA as regulatory obligations rather than a formal certification
5/32
Ping Identity
Referenced as a regulation to comply with, not itemized as a certification
3/32
JumpCloud
Data Privacy Officer and dedicated GDPR page referenced, not a formal certification
2/32
Varonis
Vendor aligns with GDPR as a compliance framework; not itemized as a formal certification
8/32
Power BI
Supported via DPA
19/32
Qlik
Referenced conceptually, not a formal certification
11/32
WooCommerce
Provides GDPR tooling; compliance depends on store owner's configuration
0/32
PrestaShop
Open-source, self-hosted software; provides GDPR tooling but compliance depends on merchant's own hosting/config
0/32
PandaDoc
GDPR data protection commitments via DPA; not a standalone certification
2/32
Skillsoft
EU deployment location offered for GDPR data residency
0/32
Glide
GDPR statement and a self-service DPA are published, but there is no EU data residency. Glide servers are hosted in Iowa, USA
1/32
IFS
GDPR-oriented data processing terms offered; not a certification
0/32
Odoo
Provides GDPR tooling; formal SOC 2/ISO 27001 certification not publicly confirmed as of check date
0/32
SurveyMonkey
GDPR/CCPA data protection tooling offered; not framed as a standalone certification
3/32
Kentico
GDPR-ready tooling provided; not framed as a standalone certification
2/32
LambdaTest
GDPR data handling commitments referenced; not confirmed as a standalone certification
0/32
LogRocket
Documented data-handling guidance for GDPR; not confirmed as a standalone certification
1/32
Tailscale
GDPR Data Privacy Addendum offered; not framed as a standalone certification
1/32
Weights & Biases
States alignment with GDPR requirements; not framed as a standalone certification
5/32
PostHog
GDPR compliance guidance documented; not confirmed as standalone certification
1/32
Kinsta
Referenced in footer/privacy materials; not detailed as a standalone certification in this source
4/32
Not certified
3
103 unverified
For these vendors, GDPR status is not publicly documented. That does not mean they lack the certification.
AcronisAdyenAffirmAfterpayAirbyteAkamaiAlchemerApplitoolsAvalaraBench AccountingBlackboardBraintreeCeridian DayforceCertiniaCheckout.comCircleCIClerkContentfulContractPodAiCoursera for BusinessCraftCypress.ioDivvyEcwidEpicorFlexportFormstackFourKitesFreshBooksFullStoryGladlyGoCardlessGrasshopperHeightHerokuInstructure CanvasJenkinsJFrogJustworksKeeper SecurityKnowBe4LaikaLastPassLawPayLinodeLogicGateMalwarebytesMcAfeeMelioMetricStreamMotiveNetskopeNew RelicOneTrustPaychexPaylocityPilot.comPlaidPodioPracticePantherproject44ProofpointQualtricsQualysResolverRevolut BusinessRingCentralRollbarRSA ArcherSanity.ioSauce LabsScale AIScytaleSemgrepShipBobShipStationSoftrSonarQubeSophosSplunkSprintoSquareStrapiSymantecTalendTeamwork.comTenableThoropassTrend MicroTriNetVeeamVeracodeVMware Carbon BlackVolusionVonageWave AccountingWeaviateWiseWizWordPress VIPWP EngineWrikeXero
Browse by category
GDPR-compliant analytics
GDPR-compliant artificial intelligence
GDPR-compliant communication
GDPR-compliant data engineering
GDPR-compliant design & creative
GDPR-compliant devops & monitoring
GDPR-compliant e-commerce
GDPR-compliant education & learning
GDPR-compliant erp & operations
GDPR-compliant finance & payments
GDPR-compliant governance, risk & compliance
GDPR-compliant hr & people ops
GDPR-compliant infrastructure & cloud
GDPR-compliant marketing
GDPR-compliant productivity & docs
GDPR-compliant project management
GDPR-compliant sales & crm
GDPR-compliant security
GDPR-compliant customer support
GDPR-compliant websites & cms
Don't see a vendor you need? Submit it