How we check vendor facts

Every fact on a vendor page comes from a page the vendor publishes, and the page shows where and when.

Sources

We read the vendor's own DPA, subprocessor list and regions documentation, and what the vendor says about the Data Privacy Framework. Each fact stores the URL of the page it came from and the date we checked it. We don't use third-party summaries or reviews.

Dates

The "last checked" line on a vendor page is the oldest check date among its facts, so it never looks fresher than the stalest fact. Each fact also shows its own date next to the source link.

When something isn't there

If we can't confirm a fact on the page we checked, we leave it empty and say why. We don't fill gaps with guesses.

A vendor page is only listed once its DPA, subprocessor page, data locations and transfer mechanisms are filled in. It is only offered to search engines when at least five of the seven facts in its table come from the vendor's own domain or an official registry, and a person has written a note on the page.

The Data Privacy Framework

We only mark a vendor as listed on the EU-U.S. Data Privacy Framework when we have checked the official list at dataprivacyframework.gov. A vendor stating on its own page that it takes part is shown as that statement, not as a listing.

Keeping it current

We re-check a vendor's facts when someone reports a change. Vendors can change their pages without notice, so treat the check date as the limit of what we know.

Report an error

If a fact is wrong or out of date, tell us at tothkeveandras60@gmail.com with the vendor and the fact. We will re-check it against the source.

What we don't do

We don't judge whether a vendor or your use of it is acceptable under the law, we don't rate vendors, and the pages are not legal advice.