| A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
1 | Program | What it does | GDPR Compliance by May 2018? | Requires user consent to run? | More info | |||||||||||||||||||||
2 | A/B Tasty | A/B tasting, multivariate testing | Yes - Publically documented | Not clear, regarding their A/B testing features. Some of their features (session recordings) are likely going deal with unique identifiers (personal data), and therefore will require consent. | https://www.abtasty.com/gdpr-compliance/ | |||||||||||||||||||||
3 | Active Campaign | Email Marketing, Marketing Automation | Yes - publically announced. New software features built out to respect GDPR. | Nope. But of course, using and storing email addresses requires proper consent. | https://help.activecampaign.com/hc/en-us/articles/115001246324-GDPR-and-ActiveCampaign-What-you-need-to-know | |||||||||||||||||||||
4 | Adobe Analytics | real-time analytics, mobile analytics, funnel tracking, predictive intelligence. | Yes - publically announced | In some cases. You'll have to take a look at any "unique identifiers," and watch out with some of their predictive features (Profiling) | https://www.adobe.com/privacy/general-data-protection-regulation.html | |||||||||||||||||||||
5 | Adobe Target | A/B and multivariate testing, Automated personalization, Mobile app optimization, Conversion rate optimization | Yes - publically announced | In some cases. You'll have to take a look at any "unique identifiers," and watch out with some of their predictive features (Profiling). | https://www.adobe.com/privacy/general-data-protection-regulation.html | |||||||||||||||||||||
6 | AdRoll | Prospecting and Retargeting platform | No public documentation—contact a representative. | Yes. Under GDPR, tracking pixels will require consent to run. | GDPR briefly mentioned here: https://www.admonsters.com/targeting-consent-publisher-vendor/ | |||||||||||||||||||||
7 | Aweber | Email marketing service provider | Yes - publically announced | No. Aweber acts as a data processsor. But of course, using and storing email addresses requires proper consent. | https://help.aweber.com/hc/en-us/articles/115016056728-The-General-Data-Protection-Regulation-GDPR-What-is-it-what-is-AWeber-doing-and-what-should-you-do- | |||||||||||||||||||||
8 | Browserling | Cross-browser testing | No public documentation, or easily accesable privacy policy. Still—browser testing generally doesn't touch personal data (unless you're on a paid plan). If you are, contact a representative. | Nope. No personal data collected. | ||||||||||||||||||||||
9 | BrowserStack | Cross-browser testing | No public documentation, or easily accesable privacy policy. Still—browser testing generally doesn't touch personal data (unless you're on a paid plan). If you are, contact a representative. | Nope. No personal data collected. | ||||||||||||||||||||||
10 | Buffer | Social Media Management Platform | No public documentation. From their privacy policy: "The Service is hosted in the United States. If you choose to use the Service from the European Union or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that your personally identifiable information may be transferred to the US and Processed under U.S. privacy standards.". | For your marketing purposes, no. Buffer only uses your personal data—it doesn't collect data from your followers. | https://buffer.com/privacy | |||||||||||||||||||||
11 | BuzzSumo | Research and monitoring tool | No public documentation. They use your data to personalize, and can share it with unnamed third parties. They're relying on the legitimate interests condition for some data processesing. | For your marketing purposes, no. You shouldn't be acting as data controller. | http://buzzsumo.com/privacy-policy/ | |||||||||||||||||||||
12 | GrowthHackers Northstar | Northstar, formerly known as Canvas, is a dashboard for organizing ideas, running structured tests, and reporting findings | No public documentation. | For your marketing purposes, no. You shouldn't be acting as data controller. | https://growthhackers.com/privacy_policy | |||||||||||||||||||||
13 | ChangeAgain.me | A/B Testing | No public documentation—contact a representative. | Likely. They have some pretty advanced targeting options, and it's not clear what type of cookies they rely on. | ||||||||||||||||||||||
14 | Clearbit | Suite of business intelligence APIs to help companies find more information on their customers | No public documentation—contact a representative. | Technically, Clearbit should be acting as a data controller—so it's up to them to gather consent. Using their data though, you have to be careful. For example, you can't email someone just because you've gotten it through Clearbit. They have to consent. | brief mention on twitter:https://twitter.com/clearbit/status/955831483356377088 Privacy Policy: https://clearbit.com/privacy | |||||||||||||||||||||
15 | ClickTale | Website Analytics & CX Optimization | Yes, publically stated. Data Protection Officer appointed. | "Clicktale enables our customers to improve their customers’ digital experiences without the need to capture or store such sensitive information." | https://www.clicktale.com/resources/blog/putting-privacy-first/ | |||||||||||||||||||||
16 | Clicky | Web analytics | No public documentation—contact a representative. | Likely—tracks IP addresses, uses personally-identifying cookies. | https://clicky.com/terms | |||||||||||||||||||||
17 | Conductrics | AB Testing and Machine Learning for Optimization | No public documentation—contact a representative. | Likely - Machine Learning under GDPR is a pretty complicated issue. They talk about some of the ramifications on their blog. | https://conductrics.com/machine-learning-and-human-interpretability/ | |||||||||||||||||||||
18 | Convert.com | A/B Testing software | Yes, pubically documented. | Consent is not required. Unique identifiying cookies are not used—and the legitimate interests conditions applies. Read more here: https://blog.convert.com/buy-gdpr-compliant-ab-testing-software.html | https://www.convert.com/gdpr/ | |||||||||||||||||||||
19 | CoSchedule | Content marketing calendar | Privacy policy unclear. | For your marketing purposes, no. CoSchedule should be acting as data controller. | https://coschedule.com/terms | |||||||||||||||||||||
20 | Crazy Egg | A/B Testing & Heatmaps | No public documentation—contact a representative. | Likely - relies on persistente cookies, which count as Personal Data. | ||||||||||||||||||||||
21 | Customer.io | Automated email | Yes - publically announced | Unlikely—as long as you have consent to email. | https://customer.io/gdpr.html | |||||||||||||||||||||
22 | Decibel Insight | digital experience analytics | Yes - Publically documented | Potentially. Decibel says they mask their collected data. We recommend disabling keystroke data, and reaching out for clarification. | https://www.decibelinsight.com/news/decibel-insight-complies-with-gdpr-by-default-offering-no-nonsense-peace-of-mind | |||||||||||||||||||||
23 | Effective Experiments | Project Management and workflow tool for CROs | Yes - publically announced | Unlikely. Project management tools use third party software and access data you've already processed. | https://effectiveexperiments.com/gdpr-compliance/ | |||||||||||||||||||||
24 | Ethn.io | Research recruiting tool | Yes. U.S Privacy shield compliant. | For your marketing purposes, no. Ethn.io should be acting as data controller. | https://ethn.io/privacy | |||||||||||||||||||||
25 | Experiment Engine - acquired by Optimizely | Tools and services that help teams manage their experimentation programs | Yes. Publically announced. | Many of Optimizely's services involve personal data (analytics services, personalizations—anything using unique identifiers). These feaures will require consent. | https://www.optimizely.com/compliance/gdpr/ | |||||||||||||||||||||
26 | Formisimo | Form Analytics. Measures visitors and what they do in forms | No public documentation—contact a representative. | Formisimo acts as data controller. | https://www.formisimo.com/privacy-policy | |||||||||||||||||||||
27 | Google Cloud / Products (Forms, Analytics, etc) | Yes - Publically documented | No, with a few modifications. Read: https://blog.convert.com/google-analytics-and-gdpr-is-it-compliant.html | https://www.google.com/cloud/security/gdpr/ https://privacy.google.com/businesses/compliance/#?modal_active=none | ||||||||||||||||||||||
28 | Heap Analytics | Insight Automation infrastructure | No public documentation—contact a representative. | For some features. Heap Analytics collects personal data. | https://heapanalytics.com/privacy | |||||||||||||||||||||
29 | Hiplay | Automatically re-post your best content to the Buffer queue | No public documentation—contact a representative. | No. Hiplay acts as data controller. | https://hiplayapp.com/privacy-policy/ | |||||||||||||||||||||
30 | Hootsuite | Social media management platform | Yes - Publically documented | For your marketing purposes, no. Hootsuite acts as data controller. | https://hootsuite.com/legal/general-data-protection-regulation | |||||||||||||||||||||
31 | HotJar | Analytics - heatmaps, funnel tracking, user polls, surveys | Yes - Publically documented | Session recordings likely require personal data—same with some ways in which heatmaps can be run. We'd reach out for clarification. More on personal data and cookies here: https://blog.convert.com/gdpr-deep-dive-cookies.html | https://www.hotjar.com/gdpr | |||||||||||||||||||||
32 | Hubspot | Inbound marketing and sales software | Yes - publically announced | Likely, uses cookies. Hubspot is enhancing their platform to make compliance easier. You can read about that here: https://www.hubspot.com/data-privacy/gdpr/product-readiness | https://www.hubspot.com/data-privacy/gdpr | |||||||||||||||||||||
33 | Hunter.io | Find and verify professional email addresses | No public documentation. Privacy policy is unclear. | Hunter acts as data controller, but reaching out using information provided through their software is likely non-conpliant. | https://hunter.io/privacy-policy | |||||||||||||||||||||
34 | Infusionsoft | Marketing automation | Yes - publically announced | Likely, depending on your usage. Infusionsoft uses cookies. More on personal data and cookies here: https://blog.convert.com/gdpr-deep-dive-cookies.html | https://www.infusionsoft.com/legal/gdpr | |||||||||||||||||||||
35 | Inspectlet | Analytics, heatmaps | No public documentation—contact a representative. | Some analytics rely on personal data, or profiling. Heatmaps may use personal data, depending on how they are segmented. More on personal data and cookies here: https://blog.convert.com/gdpr-deep-dive-cookies.html | https://www.inspectlet.com/legal | |||||||||||||||||||||
36 | Iridion | Conversion Workflow Management Tool | Yes - Publically documented for Iridion Testing+Personalization | Unlikely. Project management tools use third party software and access data you've already processed. | (Page down as of 10/04/2018) https://www.iridion.com/gdpr/ | |||||||||||||||||||||
37 | Medallia.com | Software and website feedback analytics | Likely. Privacy Sheild certified. | For the most part, does not collect personal data. Does use some persistent cookies. We'd reach out to clarify. | https://www.medallia.com/privacy-policy/ | |||||||||||||||||||||
38 | KISSMetrics | Behavioral analytics and engagement platform | Likely. Complies with the U.S. - E.U. Privacy Shield framework | Likely. Uses cookies, tracks IP addresses. | https://www.iubenda.com/blog/privacy-policy-kissmetrics/ | |||||||||||||||||||||
39 | Lucky Orange | Conversion Optimization Suite | No public documentation—contact a representative. | Possibly. Records mouse clicks, mouse movements, keystroke information, and scrolling activity. It depends on how you configure your settings, and whether or not they mask their data. We'd reach out to clarify. | http://www.luckyorange.com/privacy.php | |||||||||||||||||||||
40 | Omniconvert (Marketizator) | Web personalization, surveys, and A/B testing | No public documentation—contact a representative. | Likely. May use cookies with unique identifiers. Contact for information. | https://www.omniconvert.com/terms-and-conditions-omniconvert-insights | |||||||||||||||||||||
41 | Marketo | Marketing automation software | Yes - publically announced | The Marketo suite does a lot. It'll depend on which of their products you're using. The biggest problem is going to be Content AI—as GDPR requires you to have a legal basis for predictive analytics. | https://www.marketo.com/company/trust/gdpr/ | |||||||||||||||||||||
42 | Mattermark | Lead enrichment Contact Lists List building API | Likely. FullContact, the new owner of Mattermark, is Privacy Shield compliant. | Mattermark says they act as a data processor. This mean using that data requires you to get consent. | https://mattermark.com/privacy-policy/ | |||||||||||||||||||||
43 | Maxymiser (oracle) | Oracle Maxymiser: Test and Personalize Customer Experiences | Not specifically. Does have a whole section on GDPR available. Including a link to a whitepaper and a webinar. | Personalization generally requires cookies. Cookies generally require soliciting consent. | https://www.oracle.com/search/results?Dy=1&Nty=1&cat=omc&Ntk=S3&Ntt=GDPR | |||||||||||||||||||||
44 | Mixpanel | Product analytics. Answers your questions about how users engage with what you build. | Yes. Specificially stated. "We'll be ready! Mixpanel plans to be GDPR ready well before the May 25th, 2018 deadline". | You're the data controller, Mixpanel is the data processosr. If you use it to collect personal data, you have to solicit consent. | https://help.mixpanel.com/hc/en-us/articles/360000345423-GDPR-Compliance | |||||||||||||||||||||
45 | Mopinion | All-in-1 software to collect and analyse user feedback. | No public documentation—contact a representative. | Unclear. Little data on data collection methods. | ||||||||||||||||||||||
46 | Mouseflow | Mouseflow lets you see visitors' behavior and fix pain points with session replay, heatmaps, funnels, form analytics, and feedback campaigns | Yes - publically documented. | Yes. Suggests the following course of action to avoid personal data processesing: disable tracking of keystrokes in all form fields, disable keystrokes in specific form fields, and exclude/replace content shown in your HTML. | https://mouseflow.com/gdpr/ | |||||||||||||||||||||
47 | Moz Pro | SEO toolset. Helps boost your rankings and search engine visibility. | No public documentation—contact a representative. | For your marketing purposes, no. You shouldn't be acting as data controller. | https://moz.com/privacy-policy | |||||||||||||||||||||
48 | Optimizely | A/B testing and personalization | Yes - publically announced. | Yes. Uses cookies, tracks IP addresses, etc. | https://www.optimizely.com/compliance/gdpr/ | |||||||||||||||||||||
49 | Oracle | Many different software products in finance, marketing, security | Yes - publically documented. | Unclear. But they do have some public information on how their software can be used to help you prepare for GDPR: https://blogs.oracle.com/cx/understanding-the-gdpr-and-how-oracle-cx-helps-you-prepare-for-compliance | https://www.oracle.com/applications/gdpr/index.html | |||||||||||||||||||||
50 | Pingdom Website Speed Test | Sitespeed monitoring | Yes | No | https://www.pingdom.com/legal/privacy-policy | |||||||||||||||||||||
51 | Matomo (old Piwik) | Web analytics | Yes | No | https://matomo.org/blog/2017/09/gdpr-potential-consequences-piwik/ | |||||||||||||||||||||
52 | ProsperWorks | CRM | Yes | No | https://support.prosperworks.com/hc/en-us/articles/115003764392-ProsperWorks-security-overview-and-commonly-asked-questions | |||||||||||||||||||||
53 | Qualaroo | User survey software | No | Yes | No information found | |||||||||||||||||||||
54 | Qualtrics | User survey software | Yes | Yes | https://www.qualtrics.com/uk/platform/gdpr/ | |||||||||||||||||||||
55 | Quuu | Social Media Curated Content | No | No | No information found | |||||||||||||||||||||
56 | ScreenFly | Testing website in different screens | No | No | No information found | |||||||||||||||||||||
57 | SessionCam | Screen recording | No, don't seem to be making any specific efforts informing users that consent might be needed for sessions that can zoom in on personal data. Country and browser details can all lead to storage of personal data ... this provider seems to ignore that. | Yes. Session recordings rely on personnal data. | https://sessioncam.com/dont-panic-gdpr-heres-need-know/ | |||||||||||||||||||||
58 | SiteSpect | Optimization platform that allows customers to conduct rapid A/B testing, multivariate testing, behavioral targeting and personalization, landing page optimization, mobile web optimization, and web performance optimization. | No public documentation—contact a representative. One press release with a partner organization alludes to them being potentially compliant? | Yes—for any features that require unique ID's, or that "profile" your audience. | https://www.sitespect.com/news/scout24-switzerland-names-sitespect-their-testing-targeting-and-optimization-partner | |||||||||||||||||||||
59 | SumoMe | Website traffic tool | No public documentation—contact a representative. | Heatmaps, at the very least, use personal data and will likely require consent. | https://help.sumo.com/hc/en-us/articles/218958727-Privacy-Policy | |||||||||||||||||||||
60 | Survey Gizmo | online survey software tool | Yes - publically announced | Likely—depending on what sort of information you're collecting from your survey participants. Survey Gismo has a built in feature for this. https://help.surveygizmo.com/help/add-a-consent-question | https://www.surveygizmo.com/privacy/, https://community.surveygizmo.com/questions/question/gdpr-compliance/ | |||||||||||||||||||||
61 | Survey Monkey | online questionnaire and survey software | Yes - Publically documented | Likely—depending on what sort of information you're collecting from your survey participants. Survey Monkey has a built in feature for this. https://help.surveymonkey.com/articles/en_US/kb/How-do-I-create-a-consent-form-or-disqualify-respondents-from-a-survey | https://www.surveymonkey.com/curiosity/surveymonkey-committed-to-gdpr-compliance/ | |||||||||||||||||||||
62 | Teradata | business analytics solutions, data and analytics solutions, and hybrid cloud products and services | Yes - Publically documented | Unclear. Seems it would depend on the specific Teradata product, and what sort of analytics are used. | https://www.slideshare.net/PaulOCarroll2/teradatas-approach-to-addressing-gdpr | |||||||||||||||||||||
63 | TryMyUI | Website usability testing, user testing, user research and uncovering design insights | No public documentation—contact a representative. | No, TryMyUI will likely be the data controller in this case. Consent requirements will fall on them. | https://www.trymyui.com/privacy | |||||||||||||||||||||
64 | TypeForm | Online forms creator | Yes - publically announced | This depends on whether you use Typeform to process and collect personal data. If yes, then you need to also solicit consent. | https://www.typeform.com/help/gdpr-compliance/ | |||||||||||||||||||||
65 | Unbounce | Landing page builder | Yes - publically announced | Unbounce says: "All the data you collect on your Unbounce landing pages, sticky bars and popups will be GDPR compliant by May 25, 2018." But it doesn't explicity explain or discuss what the consent process will look like here. | https://unbounce.com/gdpr/ | |||||||||||||||||||||
66 | Unica (IBM) | Marketing and real-time personalisation | Yes - Publically documented | Yes—personalization generally requires the usage of cookings or other Unique Identifiers. Unique IDs require consent. | https://www.ibm.com/analytics/us/en/technology/general-data-protection-regulation/ | |||||||||||||||||||||
67 | UsabilityHub | UX, user testing | No public documentation. | No, UsabilityHub will likely be the data controller in this case. Consent requirements should fall on them. | https://martech.zone/usabilityhub-testing/ | |||||||||||||||||||||
68 | UserTesting.com | User testing | No public documentation. It looks like their privacy policy relies mostly on "opt-out" rather than "opt-in" permissioning. | No, UserTesting.com will likely be the data controller in this case. Consent requirements should fall on them. | https://www.usertesting.com/privacy-policy | |||||||||||||||||||||
69 | VWO | A/B testing, personalization, heatmapping, etc. | Yes - publically documented. | Yes. Uses cookies, tracks IP addresses, etc. | https://vwo.com/platform/security-compliance/gdpr/ | |||||||||||||||||||||
70 | WebEngage | Marketing automation. Cross-channel communication, deep data driven segmentation and personalization. | No public documentation. | Yes. Most segmentation and personalization features rely on unique identifiers or IP addresses—therefore requiring consent. | https://webengage.com/privacy/ | |||||||||||||||||||||
71 | Woopra | Customer analytics. Tracks web and mobile activity, forms, emails, support tickets | Likely. Participates in the EU-U.S. Privacy Shield. | Potentially. Becuase it deals with customer data, it may be permitted under the "legitimate interests" condition. Read more about that here: https://blog.convert.com/gdpr-deep-dive-counts-legitimate-interest.html | https://marketplace.zoho.com/salesiq/woopra | |||||||||||||||||||||
72 | ||||||||||||||||||||||||||
73 | ||||||||||||||||||||||||||
74 | ||||||||||||||||||||||||||
75 | ||||||||||||||||||||||||||
76 | ||||||||||||||||||||||||||
77 | ||||||||||||||||||||||||||
78 | ||||||||||||||||||||||||||
79 | ||||||||||||||||||||||||||
80 | ||||||||||||||||||||||||||
81 | ||||||||||||||||||||||||||
82 | ||||||||||||||||||||||||||
83 | ||||||||||||||||||||||||||
84 | ||||||||||||||||||||||||||
85 | ||||||||||||||||||||||||||
86 | ||||||||||||||||||||||||||
87 | ||||||||||||||||||||||||||
88 | ||||||||||||||||||||||||||
89 | ||||||||||||||||||||||||||
90 | ||||||||||||||||||||||||||
91 | ||||||||||||||||||||||||||
92 | ||||||||||||||||||||||||||
93 | ||||||||||||||||||||||||||
94 | ||||||||||||||||||||||||||
95 | ||||||||||||||||||||||||||
96 | ||||||||||||||||||||||||||
97 | ||||||||||||||||||||||||||
98 | ||||||||||||||||||||||||||
99 | ||||||||||||||||||||||||||
100 |