Usantis Is Now Listed in the Amazon Service Provider Network
Short answer
Usantis is listed in the Amazon Service Provider Network under compliance, approved 17 August 2026. The SPN is Amazon's vetted directory of service providers that sellers can search from inside Seller Central. It has categories for tax, product testing and environmental compliance, and none for data protection, which is where Article 27 GDPR keeps catching sellers who thought they were finished.
Amazon approved Usantis for its Service Provider Network on 17 August 2026, in the compliance category. Sellers can now find us from inside Seller Central, in the same directory they use to find help with VAT, product testing and customs.
We are glad about it, and we want to be precise about what it means, because the word "Amazon" does a lot of work in marketing copy that it does not always earn. Amazon reviewed our company registration, our service description, our incident response process and our security practices, and it approved the listing. That is a third party checking our answers. It is not an endorsement of our advice, and it is not a partnership.
What the Amazon Service Provider Network is
The Amazon Service Provider Network is Amazon's directory of vetted third-party service providers. A seller opens it from Seller Central, picks a category and a marketplace, and gets a list of providers who have passed Amazon's review and can be contacted or hired directly.
It exists because Amazon's rules create work that most sellers cannot do alone. Tax registration in seven countries, product safety documentation, translated listings, customs paperwork. The categories reflect that: taxes, product compliance and testing, advertising, logistics, account management.
Two things about it are worth knowing before you use it:
Being listed is not a ranking. Amazon checks that a provider is a real company with a real service and no disqualifying history. It does not compare providers on quality or price. A listing tells you a provider was vetted, not that it is the best one for you.
Providers can request access to your seller account, and most do. Amazon calls these Authorized Partner Permissions. They let a provider read your orders, your reports and in some cases your buyer data. It is convenient. It is also a standing key to your business.
What Amazon checked before approving us
Our application ran from 8 August to 17 August 2026, and it was rejected once before it was approved. That is worth describing, because the vetting is more concrete than the badge suggests.
Amazon asked for company registration details, the legal entity behind the service, and named contacts. It asked whether we have a written policy for reporting organisational changes, and whether we have a documented incident response plan with defined severity levels and response times. We do, and both were written in August 2026 for exactly this kind of question. It asked what we would do if data from the Amazon relationship were exposed, and expected a reporting commitment in hours, not days.
Then it rejected our first listing. Two reasons, both formal: our service description contained a price, and our banner image contained a web address. Both are against Amazon's listing rules. We removed the price, moved it into the rate card where Amazon actually wants it, rebuilt the banner without the URL, and resubmitted the same day. Approval came hours later.
We mention the rejection because a review that rejects things is a review that means something.
We asked Amazon for no access to your seller account
When you register as a service provider, Amazon offers a menu of permissions: order data, financial reports, buyer information, inventory. We set every one of them to none.
That was a deliberate choice, and it costs us some convenience. It means we cannot pull your data ourselves, and onboarding takes a few minutes of your time instead of zero. What you get in exchange is that a provider handling your data protection obligations has no standing access to your Amazon account, holds no buyer data of yours, and cannot become the weak link in someone else's breach.
For a company whose entire service is other people's privacy compliance, holding the minimum amount of data is not a feature we added. It is the job.
The compliance category has no box for data protection
Here is the part that matters more than our listing.
Amazon's compliance category covers taxes, product testing and environmental requirements. Work through the whole directory and you will not find a category for data protection, because Amazon's compliance framework is built around products and money, not personal data.
That gap has a real consequence, and we see it in almost every conversation with a seller.
In December 2024, the EU's General Product Safety Regulation became enforceable and Amazon started blocking listings from sellers who had not named an EU responsible person for product safety. Sellers fixed it within weeks, because a blocked listing costs money today. Most of them now believe their "EU representative" question is settled.
It is not. The responsible person under the GPSR covers product safety: documentation, labelling, recalls. Article 27 of the GDPR is a separate obligation from a separate law. If your company is established outside the EU and you handle personal data of people in the EU, you must appoint a representative established inside the Union and name that representative, with contact details, in your privacy policy.
Selling on amazon.de, amazon.fr, amazon.it, amazon.es, amazon.nl, amazon.pl or amazon.se means order data, buyer messages, VAT invoices and returns. That is personal data of people in the EU, processed by you as the seller of record.
No listing block will ever warn you about it. The first contact is usually a data subject request or a letter from a supervisory authority, and by then the missing representative is already documented in your own privacy policy, which is the easiest compliance failure a regulator can prove. It does not require an audit of your systems. It requires reading one page of your website.
We wrote about that mix-up in detail in the GPSR and GDPR trap for Amazon sellers.
What our listing changes for sellers
Practically, three things.
You can find us where you already look for help, instead of evaluating a compliance provider you found through a search result. If you are already comparing providers inside Seller Central, we are in that list now.
You can point your own internal review at something external. Sellers who need to justify a vendor choice to a partner, a lawyer or a finance team now have a third-party check to point at, rather than only our own description of ourselves.
And the service behind the listing is unchanged. We provide a named individual established in Germany as your Article 27 representative, an EU address that receives correspondence from supervisory authorities and data subjects, handling and translation of the requests that arrive, and a public compliance page you can link from your privacy policy. It is 490 US dollars a year, with no setup fee and no charge per request. Setup runs online in about five minutes.
Questions sellers ask about this
Does the SPN listing mean Amazon endorses Usantis? No. Amazon vetted our company and our service description and approved the listing. It does not review or endorse the compliance advice we give, and being listed says nothing about other providers in the same category.
I already have an EU responsible person from my GPSR provider. Is that enough? No. That appointment covers product safety under a different regulation. Article 27 of the GDPR requires a separate representative for data protection matters. Having one does not satisfy the other.
Amazon runs my orders through FBA. Does Amazon's own compliance cover me? No. Amazon is responsible for its own processing and you remain responsible for yours. You are the seller of record, you receive order data and buyer messages, and Amazon's own seller policies require you to comply with applicable data protection law for the data you handle.
Do I need one appointment per marketplace? No. One representative covers the legal entity, not the storefront. If you sell on six European marketplaces through one company, that is one appointment. If you run several legal entities, each one needs its own.
Can you access my Amazon account through the SPN? No, and not by accident either. We requested no permissions at all, so there is nothing to revoke and nothing for us to see.
Where to start
If you are not sure whether Article 27 applies to you, the compliance checker asks up to seven questions and takes under a minute. If you already know it applies, appointing a representative is the next step, and the full price list is on the pricing page.
Being listed in the Amazon Service Provider Network is a good day for us. The reason to act is the other thing on this page: an obligation that no marketplace enforces, that sits in writing on your own website, and that costs a few minutes to close.
This article explains general requirements under the GDPR and does not constitute legal advice. Usantis provides the EU representative and operates the platform; it is not a law firm. For advice on your specific situation, consult a qualified lawyer. Information current as of August 2026.
Written by
Usantis
The Usantis editorial team writes about EU representation and Article 27 GDPR for companies based outside the EU. More articles
Related articles
Stay off the enforcement tracker.
See whether Article 27 applies to you in about a minute, then set up your EU representative.