We all have to comply with the GDPR, and that includes documenting how personal data is processed, for example in a record of processing activities (RoPA).
Most organisations manage this in a spreadsheet, but GDPR software is made for exactly this kind of work.
In this guide we look into a question few GDPR software providers answer in full on their website.
The answer to this question matters for your own GDPR compliance: which data processors does the vendor use, and are they European companies?
Last checked 27 October 2026
GDPR software providers and their data processors
To make this guide we have researched each GDPR software provider’s data processing agreement, privacy policy and list of data processors on its own website.
The companies on the map are the GDPR software providers and the data processors they have hired to process your data on your behalf.
GDPR software for data protection officers, legal and compliance teams, with an AI assistant.
Transparency
Data processing agreement, not found on its websiteList of data processors, publishedSecurity measures, not found on its websitePrivacy policy, published
Data processors
1 US-owned company1 EU-owned companyThe rest not public
Data protection management software from otris, a German software company.
Transparency
Data processing agreement, not found on its websiteList of data processors, not found on its websiteSecurity measures, publishedPrivacy policy, published
Brings GDPR work into one place: records, impact assessments, audits, requests from people and incidents.
Transparency
Data processing agreement, not found on its websiteList of data processors, publishedSecurity measures, not found on its websitePrivacy policy, published
GDPR software with a free plan for the processing inventory and first assessments.
Transparency
Data processing agreement, not found on its websiteList of data processors, not found on its websiteSecurity measures, publishedPrivacy policy, published
Data protection management software, with AI governance and IT security in its Ailance suite.
Transparency
Data processing agreement, not found on its websiteList of data processors, not found on its websiteSecurity measures, publishedPrivacy policy, published
An outsourced data protection officer service with its own GDPR platform.
Transparency
Data processing agreement, not found on its websiteList of data processors, not found on its websiteSecurity measures, not found on its websitePrivacy policy, published
Data processing agreement, not found on its websiteList of data processors, not found on its websiteSecurity measures, not found on its websitePrivacy policy, published
GDPR software from Zucchetti, an Italian software group.
Transparency
Data processing agreement, not found on its websiteList of data processors, not found on its websiteSecurity measures, publishedPrivacy policy, published
Privacy management software, formerly Data Privacy Manager.
Transparency
Data processing agreement, not found on its websiteList of data processors, not found on its websiteSecurity measures, publishedPrivacy policy, published
GDPR software built by data protection officers for small and mid-sized companies in Germany, Austria and Switzerland.
Transparency
Data processing agreement, not found on its websiteList of data processors, not found on its websiteSecurity measures, not found on its websitePrivacy policy, published
Data processors
Not found on its website (October 2026)
Not on the list?
Do you make GDPR software in Europe and are not on this list? Send us your list of data processors through our contact page, and you will be added in the next update.