Entropy scoring & verification
GDPR (General Data Protection Regulation)
The European Union’s comprehensive data protection law, governing how personal data of people in the EU is collected, processed, and stored. It applies to organizations established in the EU and, under Article 3(2), to organizations elsewhere that offer goods or services to people in the EU or monitor their behavior — so a vendor’s location alone doesn’t put it in or out of scope. Entropy tracks a vendor’s GDPR compliance attestation as part of its Governance score.