Know your vendors. Protect your data.
Factual compliance data on each vendor (certifications, subprocessors, DPAs, litigation history and AI governance), structured once and accessible to everyone.
No credit card required ยท Claiming and maintaining a vendor profile is free
24
18
21
14
| Vendor | Category | Score | Certifications | Status |
|---|---|---|---|---|
| Stripe | Payments | 9/10 | SOC 2ISO 27001 | Verified |
| Slack | Communication | 7/10 | SOC 2 | Verified |
| Notion | Productivity | 6/10 | SOC 2ISO 27001 | Pending |
| Hubspot | Marketing | 5/10 | SOC 2 | Pending |
What you get
What you can check about a vendor
Transparency Scores
10-point factual scoring: certs, DPA, trust center, subprocessors, privacy policy, verified claims.
Subprocessor Chains
See who your vendors share data with further down the chain, which Oregon SB 619 and the EDPB require you to know.
Privacy Litigation
Real US federal court cases from Seneca: BIPA, CCPA, ECPA lawsuits tied to each vendor.
AI Governance
EU AI Act roles, model inventories, bias monitoring and risk tiers, so you can tell whether a vendor is an AI system.
Vendor-Verified Data
Vendors claim their profile, complete a questionnaire once, and serve all future customers.
DPA Processing
We locate, catalog, and analyze vendors' published Data Processing Agreements against GDPR, CCPA, and US state law clauses.
Change Detection
Vendors can revise their DPAs and subprocessor lists without notice. We re-check their published documents every month and flag what changed, so that you learn of it before your audit does.
Subprocessor visibility
Follow the data chain
Oregon SB 619 and the EDPB require identifying all subprocessors down the chain. We show that chain, from your vendor down to its sub-sub-processors.
Vendor profiles
Compliance data for each vendor, in one profile
Each profile brings together certifications, subprocessors, litigation risk, AI governance indicators and the transparency score.
- Transparency score from 10 factual data points
- DPA compliance analysis across GDPR, CCPA & US state laws
- Subprocessor list with processing roles
- Privacy litigation data from US federal courts
- AI governance: EU AI Act roles & model inventory
- One-click executive report: certification coverage, DPA scores, data residency, AI inventory, and gaps across your portfolio
- Fourth-party concentration: see which providers sit beneath most of your vendors
- Filter the catalog by certification, EU data center, DPA availability, and verification status
Datadog
Monitoring and security platform for cloud applications, covering infrastructure, application performance, logs and security.
DPA Compliance
Certifications
Subprocessors
Data Locations
Compliance
Ecosystem
How it all connects
Build your portfolio once, then export up to 50 vendors at a time to DPO Central or AI Sentinel. Litigation data comes in automatically from Seneca.
VendorWatch
Vendor data transparency hub
DPO Central
Privacy compliance management
Seneca
Privacy litigation data from US federal courts
AI Sentinel
AI risk governance
How it works
From search to export in four steps
Browse & Add
Search 937+ enriched vendors and add them to your portfolio.
5 Free Reviews
Our team reviews incomplete profiles, aiming to finish within 48 hours. The first 5 reviews are free.
Tag & Classify
Tag each vendor with data categories, processing purposes and a criticality level.
Export
Push up to 50 vendors at a time to DPO Central or AI Sentinel.
For vendors
Claim your profile once, and every customer sees the same answers.
Show your AI governance on your terms. Declare the models behind your AI features, with provider, EU AI Act risk tier, and model cards, and your profile earns Transparent AI status. If your published subprocessor list names an AI provider but no models are declared, profiles show AI use as undisclosed. Transparency is self-serve, and it is free.
Claim your profile
Verify your domain through Google OAuth or your work email; it takes a few seconds.
Complete your questionnaire
Certifications, subprocessors, data locations and AI governance, answered once in a structured form.
Visible to every business
Your verified badge and transparency score are shown to every business on the platform.
Expert verification
Independent review by a professional
Independent review, when a vendor asks for it.
Compliance Expert in the Loop
A qualified privacy professional reviews your compliance posture. The review happens only when you ask for it, never automatically.
Technical Claims Checked
Security controls, encryption and data architecture claims are checked against the vendor's documented evidence as part of the same review.
Published openly
A completed review is published as a public attestation on Comply.org, an open standard anyone can audit.