{"section":"announcements","requestedLocale":"en","requestedSlug":"2026-08-28-privacy-and-security-iso-iec-27701-recertification-and-updates-to-dpa-and-subprocessors","locale":"en","slug":"2026-08-28-privacy-and-security-iso-iec-27701-recertification-and-updates-to-dpa-and-subprocessors","path":"docs/en/announcements/2026/august/2026-08-28-privacy-and-security-iso-iec-27701-recertification-and-updates-to-dpa-and-subprocessors.md","branch":"main","content":"VTEX has updated its privacy and security program with ISO/IEC 27701 recertification, a revised Data Processing Addendum (DPA), and an updated list of subprocessors. See the details of each update below.\n\n## What has changed?\n\n### ISO/IEC 27701:2019 recertification\n\nVTEX completed the recertification of [ISO/IEC 27701](https://www.iso.org/standard/27701), the international standard for Privacy Information Management Systems (PIMS). This certification reflects VTEX's commitment to implementing robust privacy controls and managing personal data in line with global best practices, including the requirements of the General Data Protection Regulation (GDPR) and the Brazilian General Data Protection Law (LGPD).\n\nThe updated certificate is available on the [VTEX Trust Center](https://compliance.vtex.com/?itemUid=dc79cbc7-c99d-4eb9-891e-f5dc44b943d7&source=title).\n\n### Updated Data Processing Addendum (DPA)\n\nWe've updated our [Data Processing Addendum](http://compliance.vtex.com/item/data-processing-addendum), which governs how VTEX processes personal data on behalf of our customers. We recommend reviewing the latest version to stay informed about how we handle personal data.\n\n### Updated list of subprocessors\n\nWe reviewed and updated the list of subprocessors engaged by VTEX in connection with the VTEX Platform. We work exclusively with trusted third-party vendors, selected based on their security posture, compliance certifications, and data protection standards. The updated subprocessor list is available on the [VTEX Trust Center](https://compliance.vtex.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57&source=click).\n\n## Why did we make this change?\n\nThese updates reinforce VTEX's ongoing commitment to protecting personal data, being transparent about how we handle this information, and selecting vendors that meet high standards of security and compliance.\n\n## What needs to be done?\n\nNo action is needed. If you have questions about these updates or would like to discuss any topic related to data protection, contact VTEX's Legal & Privacy team at dpo@vtex.com. You can also visit the [Trust Center](https://compliance.vtex.com) to learn more about VTEX's privacy program, certifications, and compliance documentation."}