What is CCPA?

CCPA / CPRA (California) — California Consumer Privacy Act as amended by the CPRA — consumer privacy rights for California residents.

Who needs CCPA depends on your industry, geography, and customers: buyers frequently require it from vendors during procurement, and compliance is typically demonstrated through independent audits, official registries, or formal certifications. Timeframes vary — most organizations plan months, not weeks, to prepare, be audited, and certify. For exact requirements, refer to the official CCPA program ↗.

Which tools in our directory have CCPA?

1Password, Amplitude, Apollo, Asana, ClickUp, Cloudflare, Confluence, Databricks, Datadog, dbt Labs, Figma, Gong, Gusto, HubSpot, Intercom, Jira, Miro, Monday.com, Netlify, Notion, Okta, Outreach, Pipedrive, Ramp, Rippling, Salesforce, Segment, SendGrid, Slack, Snyk, Twilio, Vercel, Zendesk.

Additionally, 4 tools hold it partially or conditionally: Supabase, Snowflake, Mixpanel, Tableau (per-tool conditions apply — see their profiles).

Which tools don't have CCPA?

Amazon Web Services, Bill.com, Brex, CrowdStrike, Deel, DigitalOcean, GitHub, Google Cloud Platform, Linear, Looker, Microsoft Azure, MongoDB Atlas, PagerDuty.

"Not publicly documented" means we could not verify the status from public sources — it does not mean the vendor lacks the certification.

Don't see a tool you need? Submit it →

Data sourced from public trust centers. Not legal or compliance advice.

Logos and trademarks are property of their respective owners. Use does not imply endorsement, affiliation, or sponsorship.

© Compliance Posture 2026