From 8b313c2cf4ab30abc217b5f948c6980df94dd88c Mon Sep 17 00:00:00 2001 From: Bryan Frimin Date: Thu, 1 May 2025 14:49:32 -0700 Subject: [PATCH] Move vendors in a dedicated package Signed-off-by: Bryan Frimin --- apps/console/package.json | 1 + apps/console/public/data/vendors/vendors.json | 2292 ------------ .../organizations/vendors/ListVendorView.tsx | 33 +- package-lock.json | 10 + packages/tsconfig/base.json | 2 +- .../data => packages}/vendors/LICENSE.md | 4 +- packages/vendors/README.md | 37 + packages/vendors/VENDORS.md | 3333 +++++++++++++++++ packages/vendors/data.d.ts | 72 + packages/vendors/data.json | 2293 ++++++++++++ packages/vendors/package.json | 21 + packages/vendors/scripts/build-md.mjs | 107 + 12 files changed, 5883 insertions(+), 2322 deletions(-) delete mode 100644 apps/console/public/data/vendors/vendors.json rename {apps/console/public/data => packages}/vendors/LICENSE.md (75%) create mode 100644 packages/vendors/README.md create mode 100644 packages/vendors/VENDORS.md create mode 100644 packages/vendors/data.d.ts create mode 100644 packages/vendors/data.json create mode 100644 packages/vendors/package.json create mode 100644 packages/vendors/scripts/build-md.mjs diff --git a/apps/console/package.json b/apps/console/package.json index b18241fd2..5c1be8004 100644 --- a/apps/console/package.json +++ b/apps/console/package.json @@ -12,6 +12,7 @@ }, "dependencies": { "@probo/react-lazy": "^0.1.0", + "@probo/vendors": "^0.0.1", "@radix-ui/colors": "^3.0.0", "@radix-ui/react-avatar": "^1.1.3", "@radix-ui/react-checkbox": "^1.0.4", diff --git a/apps/console/public/data/vendors/vendors.json b/apps/console/public/data/vendors/vendors.json deleted file mode 100644 index 45a1a2edc..000000000 --- a/apps/console/public/data/vendors/vendors.json +++ /dev/null @@ -1,2292 +0,0 @@ -[ - { - "name": "Slack", - "headquarterAddress": "San Francisco, 50 Fremont Street, United States", - "legalName": "Slack Technologies, Inc.", - "websiteUrl": "https://slack.com", - "privacyPolicyUrl": "https://slack.com/intl/en-gb/trust/privacy/privacy-policy", - "serviceLevelAgreementUrl": "https://slack.com/intl/en-gb/terms/service-level-agreement", - "description": "Slack is a team communication platform that allows users to send messages, files, and images to each other.", - "statusPageUrl": "https://slack-status.com/", - "termsOfServiceUrl": "https://slack.com/intl/en-gb/main-services-agreement", - "category": "Communication", - "certifications": [ - "ISO/IEC 27001:2022", - "ISO/IEC 27017:2015", - "ISO/IEC 27018:2019", - "SOC2 Type 2", - "C5", - "GDPR" - ], - "securityPageUrl": "https://slack.com/intl/en-gb/trust/security" - }, - { - "name": "Zoom", - "headquarterAddress": "950 Page Mill Rd, Palo Alto, CA 94306", - "legalName": "Zoom Video Communications, Inc.", - "websiteUrl": "https://zoom.us", - "privacyPolicyUrl": "https://zoom.us/privacy", - "serviceLevelAgreementUrl": "https://explore.zoom.us/en/premier-support-terms/", - "description": "Zoom is a video communication platform that allows users to send messages, files, and images to each other.", - "category": "Communication", - "certifications": [ - "ISO/IEC 27001:2022", - "ISO/IEC 27017:2015", - "ISO/IEC 27018:2019", - "ISO/IEC 27701:2019", - "SOC2 Type 2", - "SOC2 HITRUST", - "CSTAR LEVEL 2", - "FedRAMP", - "StateRAMP", - "CJIS", - "UK Cyber Essentials Plus", - "iRAP", - "ENS", - "BSI C5", - "gpaNRW", - "ISMAP", - "ETDA", - "PCI DSS", - "GDPR" - ], - "securityPageUrl": "https://zoom.us/trust/security", - "statusPageUrl": "https://status.zoom.us/" - }, - { - "name": "Github", - "headquarterAddress": "88 Colin P Kelly Jr St, San Francisco, CA 94103", - "legalName": "GitHub, Inc.", - "websiteUrl": "https://github.com", - "privacyPolicyUrl": "https://github.com/site/privacy", - "serviceLevelAgreementUrl": "https://github.com/site/terms", - "subprocessorsListUrl": "https://docs.github.com/en/site-policy/privacy-policies/github-subprocessors", - "description": "Github is a code hosting platform for version control and collaboration.", - "category": "Code Hosting", - "certifications": [ - "SOC 1 Type 2", - "SOC 2 Type 2", - "CSA CAIQ Level 1", - "ISO/IEC 27001:2013", - "CSA STAR Level 2", - "GDPR" - ], - "securityPageUrl": "https://docs.github.com/en/code-security/security-overview/about-security-overview", - "statusPageUrl": "https://www.githubstatus.com/" - }, - { - "name": "Stripe", - "headquarterAddress": "101 Townsend St, San Francisco, CA 94103", - "legalName": "Stripe, Inc.", - "websiteUrl": "https://stripe.com", - "privacyPolicyUrl": "https://stripe.com/privacy", - "serviceLevelAgreementUrl": "https://stripe.com/legal/ssa", - "dataProcessingAgreementUrl": "https://stripe.com/legal/dpa", - "description": "Online payment processing platform that enables businesses to accept and manage digital payments, supporting various payment methods and currencies with integrated fraud protection and compliance features", - "category": "Payment Processing", - "certifications": [ - "PCI DSS v4.0", - "SOC 2 Type 2", - "SOC 1 Type 2", - "SOC 3", - "EMVCo Level 1", - "EMVCo Level 2", - "CBPR", - "PRP", - "EU-U.S. DPF", - "EU-U.S. DPF", - "GDPR" - ], - "securityPageUrl": "https://stripe.com/security", - "statusPageUrl": "https://status.stripe.com/" - }, - { - "name": "Cloudflare", - "headquarterAddress": "101 Townsend St, San Francisco, CA 94103", - "legalName": "Cloudflare, Inc.", - "websiteUrl": "https://cloudflare.com", - "privacyPolicyUrl": "https://cloudflare.com/privacy", - "serviceLevelAgreementUrl": "https://www.cloudflare.com/en-gb/business-sla", - "description": "Cloudflare is a cloud computing company that provides a range of services, including web hosting, domain name registration, and cloud storage.", - "category": "Web Hosting", - "certifications": [ - "ISO/IEC 27001:2013", - "ISO/IEC 27701:2019", - "ISO/IEC 27018:2019", - "FedRAMP", - "SOC 2 Type 2", - "PCI DSS 4.0", - "Global CBPR", - "Global PRP", - "EU Cloud Code of Conduct", - "Cyber Essentials", - "C5:2020", - "ENS", - "BSI Qualification", - "WCAG 2.1 AA and Section 508", - "APPI", - "LGPD", - "DPDP", - "GDPR", - "PDPA", - "PIPA", - "DORA", - "CCPA", - "CPRA" - ], - "securityPageUrl": "https://www.cloudflare.com/en-gb/security", - "statusPageUrl": "https://www.cloudflarestatus.com/" - }, - { - "name": "Sentry", - "headquarterAddress": "1 Market St, San Francisco, CA 94105", - "legalName": "Sentry, Inc.", - "websiteUrl": "https://sentry.io", - "privacyPolicyUrl": "https://sentry.io/privacy", - "serviceLevelAgreementUrl": "", - "description": "Sentry is a cloud-based platform for monitoring and analyzing application performance and user behavior.", - "category": "Monitoring", - "certifications": ["ISO/IEC 27001:2013", "SOC2 Type 2"], - "securityPageUrl": "https://sentry.io/security", - "statusPageUrl": "https://status.sentry.io/" - }, - { - "name": "Datadog", - "headquarterAddress": "1 Market St, San Francisco, CA 94105", - "legalName": "Datadog, Inc.", - "websiteUrl": "https://datadog.com", - "privacyPolicyUrl": "https://datadog.com/privacy", - "serviceLevelAgreementUrl": "https://datadog.com/terms", - "description": "Datadog is a cloud-based platform for monitoring and analyzing application performance and user behavior.", - "category": "Monitoring", - "certifications": [ - "CCPA", - "CSA STAR", - "DORA", - "EU-US DPF", - "FedRAMP", - "GDPR", - "HIPAA", - "ISO/IEC 27001:2022", - "ISO/IEC 27017:2015", - "GDPR" - ], - "securityPageUrl": "https://datadog.com/security", - "trustPageUrl": "https://datadog.com/trust", - "statusPageUrl": "https://status.datadoghq.com/" - }, - { - "name": "Vercel", - "headquarterAddress": "1 Market St, San Francisco, CA 94105", - "legalName": "Vercel, Inc.", - "websiteUrl": "https://vercel.com", - "privacyPolicyUrl": "https://vercel.com/legal/privacy-policy", - "serviceLevelAgreementUrl": "https://vercel.com/legal/sla", - "dataProcessingAgreementUrl": "https://vercel.com/legal/dpa", - "description": "Vercel is a cloud-based platform for monitoring and analyzing application performance and user behavior.", - "category": "Web Hosting", - "certifications": [ - "ISO/IEC 27001:2013", - "SOC2 Type 2", - "GDPR", - "PCI DSS", - "HIPAA", - "DPF", - "CCPA", - "PIPEDA" - ], - "securityPageUrl": "https://vercel.com/security", - "trustPageUrl": "https://security.vercel.com/", - "statusPageUrl": "https://status.vercel.com/" - }, - { - "name": "Sendgrid", - "headquarterAddress": "1801 California Street, Suite 500, Denver, CO 80202", - "legalName": "SendGrid, Inc.", - "websiteUrl": "https://sendgrid.com", - "privacyPolicyUrl": "https://www.twilio.com/en-us/legal/privacy", - "serviceLevelAgreementUrl": "https://sendgrid.com/terms", - "dataProcessingAgreementUrl": "https://sendgrid.com/dpa", - "description": "Cloud-based email delivery platform that provides transactional and marketing email services, offering reliable message delivery, analytics, and automation features for business communications.", - "category": "Email Marketing", - "certifications": [ - "CCPA", - "CPRA", - "GDPR", - "HIPAA", - "ISO/IEC 27001:2013", - "ISO/IEC 27017:2015", - "ISO/IEC 27018:2019", - "SOC2 Type 2", - "PCI DSS" - ], - "securityPageUrl": "https://sendgrid.com/en-us/policies/security", - "trustPageUrl": "https://security.twilio.com/", - "statusPageUrl": "https://status.sendgrid.com/" - }, - { - "name": "Figma", - "headquarterAddress": "760 Market St Floor 10, San Francisco, CA 94102", - "legalName": "Figma, Inc.", - "websiteUrl": "https://figma.com", - "privacyPolicyUrl": "https://www.figma.com/legal/privacy/", - "serviceSoftwareAgreementUrl": "https://www.figma.com/ssa/", - "description": "Cloud-based design and prototyping platform that enables collaborative interface design, wireframing, and mockup creation with real-time editing capabilities for teams.", - "category": "Design", - "certifications": [ - "SOC 2 Type 2", - "ISO/IEC 27001:2013", - "ISO/IEC 27001:2022", - "GDPR", - "ISO/IEC 27017:2015", - "ISO/IEC 27018:2019", - "SOC 3", - "CCPA", - "CSA", - "SIG", - "EU Cloud Code of Conduct", - "TISAX", - "VPAT" - ], - "securityPageUrl": "https://www.figma.com/security", - "trustPageUrl": "https://compliance.figma.com/", - "statusPageUrl": "https://status.figma.com/" - }, - { - "name": "Notion", - "headquarterAddress": "2300 Harrison St, San Francisco, CA 94110", - "legalName": "Notion Labs, Inc.", - "websiteUrl": "https://notion.so", - "privacyPolicyUrl": "https://www.notion.so/notion/Privacy-Policy-3468d120cf614d4c9014c09f6adc9091", - "serviceLevelAgreementUrl": "https://www.notion.so/notion/Service-Level-Terms-6f805fa1d4ca4463b805e2832ae8ff0d", - "subprocessorsListUrl": "https://www.notion.so/notion/Notion-s-List-of-Subprocessors-268fa5bcfa0f46b6bc29436b21676734", - "businessAssociateAgreementUrl": "https://www.notion.so/notion/Business-Associate-Agreement-909d9f4ccca041b1a23d0fe6e56fa111", - "description": "Cloud-based workspace and collaboration platform that offers document management, project management, and team communication features, allowing users to create, edit, and share content in a centralized environment.", - "category": "Project Management", - "certifications": [ - "SOC 2 Type 2", - "ISO/IEC 27001:2022", - "ISO/IEC 27701:2019", - "ISO/IEC 27017:2015", - "ISO/IEC 27018:2019", - "HIPAA", - "BSI C5", - "GDPR", - "CCPA" - ], - "statusPageUrl": "https://status.notion.so" - }, - { - "name": "Mintlify", - "headquarterAddress": "108 Ferris Place, Ithaca, NY 14850", - "legalName": "Mintlify, Inc.", - "websiteUrl": "https://mintlify.com", - "privacyPolicyUrl": "https://app.termly.io/policy-viewer/policy.html?policyUUID=95d79e73-9d6f-4e0a-8abd-2a608e8f5242", - "termsOfServiceUrl": "https://mintlify.com/legal/terms", - "description": "Mintlify is a cloud-based documentation platform that enables teams to create, manage, and share documentation for their projects.", - "category": "Documentation", - "certifications": ["SOC 2 Type 1"], - "subprocessorsListUrl": "https://security.mintlify.com", - "trustPageUrl": "https://security.mintlify.com/", - "statusPageUrl": "https://status.mintlify.com/" - }, - { - "name": "Supabase", - "headquarterAddress": "3500 S Dupont Hwy, United States", - "legalName": "Supabase, Inc.", - "websiteUrl": "https://supabase.com", - "privacyPolicyUrl": "https://supabase.com/privacy", - "termsOfServiceUrl": "https://supabase.com/terms", - "description": "Open-source Firebase alternative providing a backend-as-a-service platform with PostgreSQL database, authentication, storage, and API functionality for application development.", - "category": "Database", - "certifications": ["SOC2 Type 2", "HIPAA", "GDPR"], - "securityPageUrl": "https://supabase.com/security", - "serviceLevelAgreementUrl": "https://supabase.com/sla", - "trustPageUrl": "https://security.supabase.com/", - "dataProcessingAgreementUrl": "https://supabase.com/legal/dpa", - "statusPageUrl": "https://status.supabase.com/" - }, - { - "name": "Segment", - "headquarterAddress": "100 California St #700, San Francisco, CA 94111", - "legalName": "Segment, Inc.", - "websiteUrl": "https://segment.com", - "privacyPolicyUrl": "https://www.twilio.com/en-us/legal/privacy", - "termsOfServiceUrl": "https://www.twilio.com/en-us/legal/tos", - "serviceLevelAgreementUrl": "https://www.twilio.com/en-us/legal/service-level-agreement/segment-data-ingestion-api", - "description": "Segment is a cloud-based customer data platform that enables businesses to collect, clean, and analyze customer data from across their systems.", - "category": "Customer Data Platform", - "certifications": [ - "SOC 2 Type 2", - "ISO/IEC 27001:2022", - "GDPR", - "ISO/IEC 27018:2019", - "ISO/IEC 27017:2015", - "CCPA", - "HIPAA" - ], - "subprocessorsListUrl": "https://www.twilio.com/en-us/legal/sub-processors", - "securityPageUrl": "https://www.twilio.com/en-us/legal/security", - "trustPageUrl": "https://security.segment.com/", - "statusPageUrl": "https://status.segment.com/", - "dataProcessingAgreementUrl": "https://www.twilio.com/en-us/legal/data-protection-addendum" - }, - { - "name": "Auth0", - "headquarterAddress": "10900 NE 8th St. Bellevue, WA 98004, US", - "legalName": "Auth0, Inc.", - "websiteUrl": "https://auth0.com", - "privacyPolicyUrl": "https://www.okta.com/privacy-policy/", - "termsOfServiceUrl": "https://www.okta.com/terms-of-service/", - "description": "Auth0 is a cloud-based identity and access management platform that enables businesses to secure their applications and data.", - "category": "Identity and Access Management", - "certifications": [ - "SOC 2 Type 2", - "ISO/IEC 27001:2022", - "GDPR", - "CSA STAR", - "ISO/IEC 27018:2019", - "CCPA", - "HIPAA", - "HITECH", - "PCI DSS", - "PSD2", - "FAPI" - ], - "securityPageUrl": "https://www.okta.com/security-center/", - "trustPageUrl": "https://www.okta.com/trust-center/", - "statusPageUrl": "https://status.auth0.com/", - "dataProcessingAgreementUrl": "https://www.okta.com/trustandcompliance/#data-processing-addendum" - }, - { - "name": "Heroku", - "headquarterAddress": "415 Mission Street Suite 300 San Francisco, CA 94105", - "legalName": "Heroku, Inc.", - "websiteUrl": "https://heroku.com", - "privacyPolicyUrl": "https://www.salesforce.com/company/legal/privacy/", - "termsOfServiceUrl": "https://www.salesforce.com/company/legal/sfdc-website-terms-of-service/", - "dataProcessingAgreementUrl": "https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/Agreements/data-processing-addendum.pdf", - "subprocessorsListUrl": "https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/misc/salesforce-infrastructure-and-subprocessors.pdf", - "securityPageUrl": "https://www.heroku.com/policy/security", - "serviceLevelAgreementUrl": "https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/Salesforce_MSA.pdf", - "description": "Heroku is a cloud-based platform for building, deploying, and scaling applications.", - "category": "Cloud Platform", - "certifications": [ - "PCI-DSS", - "ISO/IEC 27001:2013", - "ISO/IEC 27017:2015", - "ISO/IEC 27018:2019", - "SOC 2 Type 2", - "SOC 1 Type 2", - "SOC 3", - "HIPAA" - ], - "statusPageUrl": "https://status.heroku.com/", - "trustPageUrl": "https://www.heroku.com/compliance" - }, - { - "name": "Linear", - "headquarterAddress": "San Francisco, California 94103, US", - "legalName": "Linear, Inc.", - "websiteUrl": "https://linear.app", - "privacyPolicyUrl": "https://linear.app/privacy", - "termsOfServiceUrl": "https://linear.app/terms", - "description": "Linear is a cloud-based project management platform that enables teams to manage their projects and tasks.", - "category": "Project Management", - "statusPageUrl": "https://linearstatus.com/", - "dataProcessingAgreementUrl": "https://linear.app/dpa", - "securityPageUrl": "https://linear.app/security", - "certifications": ["SOC 2 Type 2", "HIPAA", "GDPR"], - "trustPageUrl": "https://trustcenter.linear.app/", - "subprocessorsListUrl": "https://linear.app/dpa" - }, - { - "name": "Hubspot", - "legalName": "Hubspot, Inc.", - "headquarterAddress": "2 Canal Park Cambridge, MA 02141. United States", - "websiteUrl": "https://hubspot.com", - "privacyPolicyUrl": "https://legal.hubspot.com/privacy-policy", - "securityPageUrl": "https://legal.hubspot.com/security/", - "dataProcessingAgreementUrl": "https://legal.hubspot.com/dpa", - "termsOfServiceUrl": "https://legal.hubspot.com/terms-of-service", - "description": "Hubspot is a cloud-based marketing and sales platform that enables businesses to manage their marketing and sales activities.", - "category": "Marketing and Sales", - "subprocessorsListUrl": "https://legal.hubspot.com/sub-processors-page", - "certifications": ["GDPR", "SOC 3", "SOC 2 Type 2"], - "statusPageUrl": "https://status.hubspot.com/" - }, - { - "name": "Langfuse", - "legalName": "Langfuse, Inc.", - "headquarterAddress": "Berlin, Germany", - "websiteUrl": "https://langfuse.com", - "privacyPolicyUrl": "https://langfuse.com/privacy", - "termsOfServiceUrl": "https://langfuse.com/terms", - "statusPageUrl": "https://status.langfuse.com/", - "securityPageUrl": "https://langfuse.com/docs/data-security-privacy", - "description": "Langfuse is a cloud-based language model platform that enables businesses to build, test, and deploy language models.", - "dataProcessingAgreementUrl": "https://static.langfuse.com/legal/2025-02-17-Public-Langfuse%20DPA.docx.pdf", - "category": "Language Model", - "certifications": ["ISO/IEC 27001:2022", "SOC 2 Type 2", "GDPR", "HIPAA"] - }, - { - "name": "Google Workspace", - "legalName": "Google LLC", - "headquarterAddress": "1600 Amphitheatre Parkway, Mountain View, CA 94043, US", - "websiteUrl": "https://workspace.google.com", - "privacyPolicyUrl": "https://policies.google.com/privacy", - "termsOfServiceUrl": "https://policies.google.com/terms", - "description": "Google Workspace is a cloud-based productivity suite that enables businesses to manage their email, calendar, and documents.", - "subprocessorsListUrl": "https://workspace.google.com/terms/subprocessors/", - "dataProcessingAgreementUrl": "https://workspace.google.com/terms/09242021/dpa_terms/", - "statusPageUrl": "https://www.google.com/appsstatus/dashboard/", - "securityPageUrl": "https://workspace.google.com/security/", - "category": "Productivity", - "certifications": [ - "ISO/IEC 27001:2022", - "ISO/IEC 27017:2015", - "ISO/IEC 27018:2019", - "ISO/IEC 27701:2019", - "SOC 2 Type 2", - "SOC 3", - "GDPR", - "FedRAMP", - "HIPAA", - "BSI C5", - "MTCS" - ], - "trustPageUrl": "https://cloud.google.com/compliance" - }, - { - "name": "Algolia", - "legalName": "Algolia Inc.", - "headquarterAddress": "301 Howard St Suite 300, San Francisco, CA 94105", - "websiteUrl": "https://www.algolia.com", - "description": "Algolia is a search-as-a-service platform that enables businesses to deliver fast and relevant search and discovery experiences across websites and applications.", - "category": "Search-as-a-Service", - "certifications": [ - "ISO/IEC 27001:2022", - "ISO/IEC 27017:2015", - "SOC 2 Type 2", - "SOC 3", - "BSI C5", - "HIPAA", - "GDPR", - "CCPA", - "TRUSTe Certified Privacy" - ], - "securityPageUrl": "https://www.algolia.com/security", - "privacyPolicyUrl": "https://www.algolia.com/policies/privacy", - "termsOfServiceUrl": "https://www.algolia.com/policies/terms", - "dataProcessingAgreementUrl": "https://www.algolia.com/policies/data-processing", - "subprocessorsListUrl": "https://www.algolia.com/policies/infrastructure-and-sub-processors", - "trustPageUrl": "https://www.algolia.com/trust-center", - "serviceLevelAgreementUrl": "https://www.algolia.com/policies/sla", - "statusPageUrl": "https://status.algolia.com" - }, - { - "name": "PostHog", - "legalName": "PostHog, Inc.", - "headquarterAddress": "2261 Market St #4008, San Francisco HQ", - "websiteUrl": "https://posthog.com", - "description": "Open-source product analytics platform that enables teams to understand user behavior and optimize product performance.", - "category": "Product Analytics", - "certifications": ["SOC 2 Type 2", "GDPR", "CCPA"], - "securityPageUrl": "https://posthog.com/handbook/company/security", - "privacyPolicyUrl": "https://posthog.com/privacy", - "serviceLevelAgreementUrl": "https://posthog.com/terms", - "dataProcessingAgreementUrl": "https://posthog.com/dpa", - "subprocessorsListUrl": "https://posthog.com/dpa", - "statusPageUrl": "https://status.posthog.com/" - }, - { - "name": "Airtable", - "legalName": "Formagrid, Inc.", - "headquarterAddress": "1 Front St, San Francisco, CA 94111", - "websiteUrl": "https://airtable.com", - "privacyPolicyUrl": "https://www.airtable.com/privacy", - "termsOfServiceUrl": "https://www.airtable.com/company/tos", - "dataProcessingAgreementUrl": "https://www.airtable.com/company/dpa", - "serviceLevelAgreementUrl": "https://www.airtable.com/company/sla", - "subprocessorsListUrl": "https://www.airtable.com/company/subprocessors", - "statusPageUrl": "https://status.airtable.com/", - "securityPageUrl": "https://assets.ctfassets.net/wl95ljfippl8/1j9UbmmoSaoMNusVps3ib3/9e00936f3891c84c75ccd6a87cdb992c/Security_Whitepaper_Final_20210927.pdf", - "trustPageUrl": "https://www.airtable.com/company/trust-and-security", - "description": "Airtable is a no-code platform that combines the simplicity of a spreadsheet with the complexity of a database, enabling users to build custom applications without writing code.", - "category": "No-Code/Low-Code Platform", - "certifications": [ - "SOC 2 Type 2", - "ISO/IEC 27001:2022", - "ISO/IEC 27701:2019", - "TX-RAMP Level 2", - "GDPR", - "CPRA", - "CCPA", - "HIPAA" - ] - }, - { - "name": "OpenAI", - "legalName": "OpenAI, L.L.C.", - "headquarterAddress": "3180 18th St, San Francisco, CA 94110", - "websiteUrl": "https://openai.com", - "description": "OpenAI is an AI research and deployment company dedicated to ensuring that artificial general intelligence benefits all of humanity.", - "category": "Artificial Intelligence Research and Deployment", - "certifications": [ - "SOC 2 Type 2", - "CSA STAR Level 1", - "GDPR", - "CCPA", - "SOC 3", - "TX-RAMP" - ], - "securityPageUrl": "https://openai.com/security-and-privacy/", - "privacyPolicyUrl": "https://openai.com/policies/privacy-policy/", - "termsOfServiceUrl": "https://openai.com/policies/terms-of-use/", - "dataProcessingAgreementUrl": "https://openai.com/policies/data-processing-addendum/", - "subprocessorsListUrl": "https://openai.com/policies/sub-processor-list/", - "businessAssociateAgreementUrl": "https://openai.com/policies/business-terms/", - "trustPageUrl": "https://trust.openai.com/", - "statusPageUrl": "https://status.openai.com/" - }, - { - "name": "Anthropic", - "legalName": "Anthropic PBC", - "headquarterAddress": "548 Market St, San Francisco, CA 94104", - "websiteUrl": "https://www.anthropic.com", - "description": "Anthropic is an AI safety and research company developing reliable, interpretable, and steerable AI systems, including the Claude family of large language models.", - "category": "Artificial Intelligence / AI Safety", - "certifications": ["SOC 2 Type 1", "SOC 2 Type 2"], - "securityPageUrl": "https://trust.anthropic.com", - "privacyPolicyUrl": "https://www.anthropic.com/legal/privacy", - "termsOfServiceUrl": "https://www.anthropic.com/legal/commercial-terms", - "dataProcessingAgreementUrl": "https://assets-global.website-files.com/6548404a216c2e42eb79648b/65680354f8f4425cc8a8110c_Toothless-Anthropic_DPA_Sep-22-2023.pdf", - "subprocessorsListUrl": "https://trust.anthropic.com/subprocessors", - "trustPageUrl": "https://trust.anthropic.com", - "statusPageUrl": "https://status.anthropic.com" - }, - { - "name": "Gusto", - "headquarterAddress": "525 20th St, San Francisco, CA 94107", - "legalName": "Gusto, Inc.", - "websiteUrl": "https://gusto.com", - "privacyPolicyUrl": "https://gusto.com/about/privacy", - "termsOfServiceUrl": "https://gusto.com/about/terms", - "businessAssociateAgreementUrl": "https://support.gusto.com/article/152166121100000/The-Health-Insurance-Portability-and-Accountability-Act-of-1996-HIPAA", - "description": "Gusto is a cloud-based platform that provides payroll, benefits, and human resource management software for businesses. It handles payments to employees and contractors and manages compliance with tax, labor, and immigration laws.", - "category": "HR / Payroll", - "certifications": ["SOC 1 Type 2", "SOC 2 Type 2", "HIPAA"], - "securityPageUrl": "https://gusto.com/security", - "trustPageUrl": "https://trust.gusto.com/", - "statusPageUrl": "https://status.gusto.com/" - }, - { - "name": "Amazon Web Services (AWS)", - "headquarterAddress": "410 Terry Avenue North, Seattle, WA", - "legalName": "Amazon Web Services, Inc.", - "websiteUrl": "https://aws.amazon.com", - "privacyPolicyUrl": "https://aws.amazon.com/privacy/", - "termsOfServiceUrl": "https://aws.amazon.com/service-terms/", - "serviceLevelAgreementUrl": "https://aws.amazon.com/legal/service-level-agreements/", - "dataProcessingAgreementUrl": "https://docs.aws.amazon.com/whitepapers/latest/navigating-gdpr-compliance/aws-data-processing-addendum-dpa.html", - "subprocessorsListUrl": "https://aws.amazon.com/compliance/sub-processors/", - "businessAssociateAgreementUrl": "https://aws.amazon.com/compliance/hipaa-compliance/", - "description": "Amazon Web Services (AWS) is the world's most comprehensive and broadly adopted cloud platform, offering over 200 fully featured services from data centers globally. Millions of customers—including startups, enterprises, and government agencies—use AWS to lower costs, become more agile, and innovate faster.", - "category": "Cloud Infrastructure", - "certifications": [ - "CSA", - "ProcessUnity", - "CyberVadis", - "EC", - "ISO 9001", - "ISO 14001", - "ISO 20000", - "ISO 22301", - "ISO 27001", - "ISO 27017", - "ISO 27701", - "ISO 27018", - "ISO 42001", - "ISO 50001", - "PCI DSS Level 1", - "SOC 1 Type 2", - "SOC 2 Type 2", - "SOC 3", - "PBHVA", - "CCCS Medium", - "CJIS", - "CMMC", - "DFARS", - "DoD SRG", - "FedRAMP", - "FERPA", - "FIPS", - "FISMA", - "GxP", - "HIPAA", - "HITRUST CSF", - "ITAR", - "MPAA", - "NIST", - "PIPEDA", - "SEC Rule 17a-4(f)", - "VPAT / Section 508", - "CSAP", - "FinTech", - "FISC", - "IRAP", - "ISMAP", - "ISO 20000", - "K-ISMS", - "Medical Information Guidelines", - "MeitY", - "MTCS Tier 3", - "NISC", - "OSPAR", - "SNI 27001", - "BIO Thema-uitwerking Clouddiensten", - "C5", - "Data Protection Code of Conduct", - "CPSTIC", - "Cyber Essentials Plus", - "DESC CSP", - "ENS High", - "FINMA ISAE 3000 Type 2 Report", - "G-Cloud", - "GNS", - "GSMA", - "HDS", - "IAR", - "NHS DSPT", - "PASF", - "Pinakes", - "PiTuKri ISAE 3000 Type 2", - "TiSAX" - ], - "securityPageUrl": "https://aws.amazon.com/security/", - "trustPageUrl": "https://aws.amazon.com/trust-center/", - "statusPageUrl": "https://status.aws.amazon.com/" - }, - { - "name": "Calendly", - "legalName": "Calendly, LLC", - "headquarterAddress": "271 17th St NW. 10th Floor. Atlanta, Georgia 30363, US", - "websiteUrl": "https://calendly.com", - "description": "Online scheduling platform that automates appointment booking and meeting management for businesses and individuals.", - "category": "Scheduling/Appointment Management", - "certifications": [ - "SOC 2 Type 2", - "SOC 3", - "GDPR", - "PCI DSS", - "CSA STAR", - "CCPA", - "ISO/IEC 27001:2013" - ], - "securityPageUrl": "https://calendly.com/security", - "privacyPolicyUrl": "https://calendly.com/legal/privacy-notice", - "termsOfServiceUrl": "https://calendly.com/legal/customer-terms-conditions", - "dataProcessingAgreementUrl": "https://calendly.com/legal/data-processing-addendum", - "subprocessorsListUrl": "https://help.calendly.com/hc/en-us/articles/360047345493-Calendly-sub-processors-GDPR-CCPA", - "statusPageUrl": "https://status.calendly.com" - }, - { - "name": "jsDelivr", - "legalName": "Volentio JSD Limited", - "headquarterAddress": "Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB", - "websiteUrl": "https://www.jsdelivr.com", - "description": "jsDelivr is a free, open-source Content Delivery Network (CDN) for open-source files, providing fast and reliable delivery of JavaScript libraries and other web assets.", - "category": "Content Delivery Network (CDN)", - "certifications": ["GDPR", "CCPA"], - "securityPageUrl": "https://www.jsdelivr.com/documents/security-policy.pdf", - "privacyPolicyUrl": "https://www.jsdelivr.com/terms/privacy-policy", - "termsOfServiceUrl": "https://www.jsdelivr.com/terms", - "dataProcessingAgreementUrl": "https://www.jsdelivr.com/documents/data-processing-agreement.pdf", - "subprocessorsListUrl": "https://www.jsdelivr.com/terms/sub-processors", - "statusPageUrl": "https://status.jsdelivr.com/" - }, - { - "name": "npm", - "legalName": "npm, Inc.", - "headquarterAddress": "1999 Harrison St, Suite 1150, Oakland, CA 94612, United States", - "websiteUrl": "https://www.npmjs.com", - "description": "npm is the world's largest software registry, providing a platform for JavaScript developers to share and manage packages for Node.js and frontend projects.", - "category": "Package Management / Code Hosting", - "certifications": ["GDPR", "CCPA"], - "securityPageUrl": "https://docs.npmjs.com/policies/security/", - "privacyPolicyUrl": "https://www.npmjs.com/policies/privacy", - "termsOfServiceUrl": "https://www.npmjs.com/policies/terms", - "statusPageUrl": "https://status.npmjs.org/" - }, - { - "name": "Clerk", - "legalName": "Clerk, Inc.", - "headquarterAddress": "660 King Street, Unit 345, San Francisco, CA 94107, United States", - "websiteUrl": "https://clerk.com", - "description": "Clerk provides a comprehensive suite of embeddable UIs, flexible APIs, and admin dashboards to authenticate and manage users.", - "category": "Authentication and User Management", - "certifications": ["SOC 2 Type 2", "HIPAA", "GDPR", "CCPA"], - "securityPageUrl": "https://clerk.com/docs/security/overview", - "privacyPolicyUrl": "https://clerk.com/legal/privacy", - "termsOfServiceUrl": "https://clerk.com/legal/terms", - "dataProcessingAgreementUrl": "https://clerk.com/legal/dpa", - "subprocessorsListUrl": "https://clerk.com/legal/subprocessors", - "statusPageUrl": "https://status.clerk.com/" - }, - { - "name": "Plausible Analytics", - "legalName": "Plausible Insights OÜ", - "headquarterAddress": "Västriku tn 2, 50403, Tartu, Estonia", - "websiteUrl": "https://plausible.io/", - "description": "Open-source, privacy-focused web analytics platform that provides simple and lightweight tracking without cookies.", - "category": "Platform and user analytics", - "certifications": ["GDPR", "CCPA", "PECR"], - "securityPageUrl": "https://plausible.io/security", - "privacyPolicyUrl": "https://plausible.io/privacy", - "termsOfServiceUrl": "https://plausible.io/terms", - "dataProcessingAgreementUrl": "https://plausible.io/dpa", - "subprocessorsListUrl": "https://plausible.io/privacy", - "statusPageUrl": "https://status.plausible.io/" - }, - { - "name": "Latitude.sh", - "legalName": "Latitude.sh Ltda", - "headquarterAddress": "Rua Cubatão, 929, São Paulo, 04013-043, Brazil", - "websiteUrl": "https://www.latitude.sh", - "description": "Latitude.sh provides global bare metal cloud infrastructure, enabling developers to deploy and manage physical servers with low latency and high automation.", - "category": "Bare Metal Cloud Infrastructure", - "certifications": ["CCPA"], - "securityPageUrl": "https://www.latitude.sh/legal/security", - "privacyPolicyUrl": "https://www.latitude.sh/legal/privacy", - "termsOfServiceUrl": "https://www.latitude.sh/legal/terms", - "dataProcessingAgreementUrl": "https://www.latitude.sh/legal/dpa", - "statusPageUrl": "https://status.latitude.sh/" - }, - { - "name": "Together AI", - "legalName": "Together Computer, Inc.", - "headquarterAddress": "251 Rhode Island Street, Suite 205, San Francisco, CA 94103, United States", - "websiteUrl": "https://www.together.ai", - "description": "Together AI provides a full-stack cloud platform for developers to train, fine-tune, and deploy open-source generative AI models with high-performance infrastructure.", - "category": "AI Infrastructure / Model Hosting", - "certifications": ["SOC 2 Type 1", "HIPAA", "GDPR", "CCPA"], - "privacyPolicyUrl": "https://www.together.ai/privacy", - "termsOfServiceUrl": "https://www.together.ai/terms-of-service", - "trustPageUrl": "https://trust.together.ai", - "statusPageUrl": "https://status.together.ai/" - }, - { - "name": "Mercury", - "legalName": "Mercury Technologies Inc.", - "headquarterAddress": "660 Mission Street, San Francisco, CA 94103, United States", - "websiteUrl": "https://www.mercury.com", - "description": "Fintech company that provides banking services to early stage start-up companies. The company is not a bank, but works with banking service providers to provide bank accounts and other financial services.", - "category": "Banking Services", - "certifications": ["SOC 2 Type 1", "SOC 2 Type 2", "PCI DSS"], - "securityPageUrl": "https://mercury.com/security", - "privacyPolicyUrl": "https://www.datocms-assets.com/115132/1741892788-v5-mercury-privacy-policy-2025-03-13.pdf", - "termsOfServiceUrl": "https://www.datocms-assets.com/115132/1741383503-v7-mercury-terms-of-use-2025-03-07.pdf", - "statusPageUrl": "https://status.mercury.com/", - "trustPageUrl": "https://trust.mercury.com/" - }, - { - "name": "Signal", - "legalName": "Signal Messenger LLC", - "headquarterAddress": "650 Castro St 120 223Mountain View, CA 94041, United States", - "websiteUrl": "https://signal.org", - "description": "Signal is a secure messaging app that provides end-to-end encryption for text, voice, and video communications.", - "category": "Messaging", - "securityPageUrl": "https://signal.org/security", - "privacyPolicyUrl": "https://signal.org/legal/#privacy-policy", - "termsOfServiceUrl": "https://signal.org/legal/#terms-of-service", - "statusPageUrl": "https://status.signal.org/" - }, - { - "name": "monday.com", - "legalName": "Monday.com Ltd.", - "headquarterAddress": "Tel Aviv, Israel", - "websiteUrl": "https://monday.com", - "description": "monday.com is a work management platform that helps teams plan, track, and manage work.", - "category": "Work Management", - "certifications": [ - "ISO/IEC 27001:2022", - "ISO/IEC 27018:2014", - "ISO/IEC 27017:2015", - "ISO/IEC 27032:2023", - "ISO/IEC 27701:2019", - "HIPAA", - "GDPR", - "CCPA", - "SOC 1 Type 2", - "SOC 2 Type 2", - "SOC 3", - "TX RAMP", - "CSA" - ], - "securityPageUrl": "https://monday.com/trustcenter/datasecure/", - "privacyPolicyUrl": "https://monday.com/l/privacy/privacy-policy", - "termsOfServiceUrl": "https://monday.com/l/legal/tos", - "dataProcessingAgreementUrl": "https://monday.com/l/privacy/dpa", - "subprocessorsListUrl": "https://monday.com/l/privacy/sub-processors-subsidiaries-support", - "businessAssociateAgreementUrl": "https://monday.com/l/privacy/hipaa-baa", - "statusPageUrl": "https://status.monday.com", - "trustPageUrl": "https://monday.com/trustcenter" - }, - { - "name": "Carta", - "legalName": "eShares, Inc.", - "headquarterAddress": "333 Bush Street, San Francisco, California 94104, United States", - "websiteUrl": "https://carta.com", - "description": "Carta is a financial technology company that provides a platform for managing employee equity compensation.", - "category": "Employee Equity Compensation", - "certifications": [ - "SOC 1 Type 2", - "SOC 2 Type 2", - "ISO/IEC 27001:2022", - "GDPR", - "CCPA" - ], - "securityPageUrl": "https://carta.com/security", - "privacyPolicyUrl": "https://carta.com/privacy/", - "termsOfServiceUrl": "https://carta.com/terms-of-service/", - "dataProcessingAgreementUrl": "https://carta.com/legal/carta-europe/data-processor-agreement/", - "subprocessorsListUrl": "https://carta.com/legal/carta-europe/data-processor-agreement/", - "trustPageUrl": "https://app.conveyor.com/profile/carta" - }, - { - "name": "Apollo.io", - "legalName": "ZenLeads Inc.", - "headquarterAddress": "440 N Barranca Ave #4750, Covina, CA 91723-1722, United States", - "websiteUrl": "https://www.apollo.io/", - "description": "Apollo.io is an AI-powered sales intelligence and engagement platform that helps B2B teams find, contact, and close ideal buyers through a comprehensive database and automation tools.", - "category": "Sales Intelligence & Engagement", - "certifications": [ - "ISO 27001", - "SOC 2 Type 2", - "GDPR", - "CCPA", - "EU-U.S. DPF", - "PCI DSS v4.0.0", - "CPRA" - ], - "securityPageUrl": "https://www.apollo.io/product/security", - "privacyPolicyUrl": "https://www.apollo.io/privacy-policy", - "termsOfServiceUrl": "https://www.apollo.io/terms", - "dataProcessingAgreementUrl": "https://www.apollo.io/dpa", - "subprocessorsListUrl": "https://trust.apollo.io/", - "trustPageUrl": "https://trust.apollo.io/", - "statusPageUrl": "https://status.apollo.io/" - }, - { - "name": "Atlassian", - "legalName": "Atlassian Corporation Plc", - "headquarterAddress": "Level 6, 341 George Street, Sydney, NSW 2000, Australia", - "websiteUrl": "https://www.atlassian.com", - "description": "Atlassian provides collaboration and productivity software for teams, including products like Jira, Confluence, and Trello.", - "category": "Collaboration and Productivity Software", - "certifications": [ - "HIPAA", - "ISO/IEC 27001:2013", - "CSA STAR Level 1", - "FedRAMP", - "GDPR", - "CCPA", - "SOC 2", - "PCI-DSS", - "TISAX Level 2", - "EBA", - "ENISA", - "FINMA", - "Good Clinical, Laboratory, and Manufacturing Practices (GxP)", - "HECVAT", - "HKMA", - "Lei Geral de Proteção de Dados (LGPD)", - "MAS", - "NCSC", - "nFADP", - "Section 889", - "UKPRA", - "VPAT", - "WCAG 2.1 AA", - "ACSC - Cloud Computing Security", - "ACSC - Essential 8 Maturity Model", - "Australia Privacy Act", - "BaFin" - ], - "securityPageUrl": "https://www.atlassian.com/trust/security/security-practices", - "privacyPolicyUrl": "https://www.atlassian.com/legal/privacy-policy", - "termsOfServiceUrl": "https://www.atlassian.com/legal/atlassian-customer-agreement", - "dataProcessingAgreementUrl": "https://www.atlassian.com/legal/data-processing-addendum", - "subprocessorsListUrl": "https://www.atlassian.com/legal/sub-processors", - "businessAssociateAgreementUrl": "https://www.atlassian.com/legal/business-associate-agreement", - "trustPageUrl": "https://www.atlassian.com/trust", - "statusPageUrl": "https://status.atlassian.com/" - }, - { - "name": "Webflow", - "legalName": "Webflow, Inc.", - "headquarterAddress": "398 11th Street, 2nd Floor, San Francisco, CA 94103, United States", - "websiteUrl": "https://webflow.com", - "description": "Webflow is a no-code visual development platform that allows users to design, build, and launch responsive websites without writing code.", - "category": "Website Builder / No-Code Platform", - "certifications": [ - "PCI DSS v4.0 SAQ-D", - "ISO/IEC 27001:2022", - "ISO/IEC 27018:2019", - "ISO/IEC 27017:2015", - "SOC 2 Type 2" - ], - "privacyPolicyUrl": "https://webflow.com/legal/privacy", - "termsOfServiceUrl": "https://webflow.com/legal/terms", - "dataProcessingAgreementUrl": "https://webflow.com/legal/dpa", - "subprocessorsListUrl": "https://uploads-ssl.webflow.com/5d80c03f1edd7bd68fcdb623/657c411c020d1ee5f047f6ab_20231207%20-%20List%20of%20approved%20Sub-processors.pdf", - "trustPageUrl": "https://trust.webflow.com/", - "statusPageUrl": "https://status.webflow.com/" - }, - { - "name": "1Password", - "legalName": "AgileBits Inc.", - "headquarterAddress": "4711 Yonge Street, 10th Floor, Toronto, Ontario, M2N 6K8, Canada", - "websiteUrl": "https://1password.com", - "description": "1Password is a secure password manager that helps individuals and businesses store and manage passwords, credentials, and sensitive information across devices.", - "category": "Password Management", - "certifications": [ - "SOC 2 Type 2", - "ISO/IEC 27001", - "ISO/IEC 27017", - "ISO/IEC 27018", - "ISO/IEC 27701", - "GDPR", - "HIPAA", - "DORA" - ], - "securityPageUrl": "https://1password.com/security", - "privacyPolicyUrl": "https://1password.com/legal/privacy", - "termsOfServiceUrl": "https://1password.com/legal/terms-of-service", - "dataProcessingAgreementUrl": "https://1passwordstatic.com/files/legal-center/1Password_Online_DPA_v202504.pdf", - "subprocessorsListUrl": "https://1passwordstatic.com/files/legal-center/notice-of-updates-to-the-1password-subprocessor-list.pdf", - "statusPageUrl": "https://status.1password.com/" - }, - { - "name": "Checkr", - "legalName": "Checkr, Inc.", - "headquarterAddress": "1 Montgomery St, Suite 2400, San Francisco, CA 94104, United States", - "websiteUrl": "https://checkr.com", - "description": "Checkr provides AI-powered background check and screening services to help businesses make informed hiring decisions quickly and fairly.", - "category": "Employment Screening", - "certifications": [ - "SOC 2 Type 2", - "SOC 3", - "ISO 27001", - "GDPR", - "CCPA", - "CPRA", - "PIPEDA", - "Privacy Shield" - ], - "securityPageUrl": "https://checkr.com/trust-and-security", - "privacyPolicyUrl": "https://checkr.com/privacy-policy", - "termsOfServiceUrl": "https://checkr.com/terms-of-service", - "dataProcessingAgreementUrl": "https://checkr.com/legal/dpa", - "subprocessorsListUrl": "https://checkr.com/sub-processor-list", - "trustPageUrl": "https://security.checkr.com/", - "statusPageUrl": "https://checkrstatus.com/" - }, - { - "name": "Rippling", - "legalName": "Rippling People Center, Inc.", - "headquarterAddress": "430 California Street, 11th Floor, San Francisco, CA 94104, United States", - "websiteUrl": "https://www.rippling.com", - "description": "Rippling is an all-in-one workforce management platform that unifies HR, IT, payroll, and finance operations into a single system.", - "category": "Workforce Management", - "certifications": [ - "SOC 1 Type 1", - "SOC 2 Type 2", - "ISO 27001", - "ISO 27018", - "CSA STAR Level 2" - ], - "securityPageUrl": "https://www.rippling.com/security", - "privacyPolicyUrl": "https://app.rippling.com/legal/privacy", - "termsOfServiceUrl": "https://app.rippling.com/legal", - "dataProcessingAgreementUrl": "https://app.rippling.com/legal/dpa", - "subprocessorsListUrl": "https://app.rippling.com/legal/subprocessors" - }, - { - "name": "Vouch", - "legalName": "Vouch, Inc.", - "headquarterAddress": "250 Montgomery St, San Francisco, CA 94104", - "websiteUrl": "https://www.vouch.us", - "description": "Vouch is a digital-first insurance platform providing tailored coverage solutions for startups and high-growth companies.", - "category": "Business Insurance", - "certifications": ["CPRA"], - "privacyPolicyUrl": "https://www.vouch.us/legal/privacy-notice", - "termsOfServiceUrl": "https://www.vouch.us/legal/terms-of-use", - "dataProcessingAgreementUrl": "https://help.vouchfor.com/docs/support/security/data-processing-addendum/" - }, - { - "name": "Twilio", - "legalName": "Twilio, Inc.", - "headquarterAddress": "101 Spear Street, Fifth Floor, San Francisco, CA 94105", - "websiteUrl": "https://www.twilio.com/", - "description": "Twilio is a cloud communications platform that provides APIs for developers to add messaging, voice, video, and email capabilities to applications.", - "category": "Cloud Communications Platform", - "certifications": [ - "SOC 2 Type 2", - "GDPR", - "CCPA", - "CPRA", - "HIPAA", - "ISO 27001", - "ISO 27017", - "ISO 27018", - "PCI DSS", - "PCI DSS v4.0.0" - ], - "securityPageUrl": "https://www.twilio.com/en-us/security", - "privacyPolicyUrl": "https://www.twilio.com/en-us/legal/privacy", - "termsOfServiceUrl": "https://www.twilio.com/en-us/legal/tos", - "dataProcessingAgreementUrl": "https://www.twilio.com/en-us/legal/data-protection-addendum", - "subprocessorsListUrl": "https://www.twilio.com/en-us/legal/sub-processors", - "trustPageUrl": "https://security.twilio.com/", - "statusPageUrl": "https://status.twilio.com/" - }, - { - "name": "Qonto", - "legalName": "Olinda SAS", - "headquarterAddress": "18 rue de Navarin, 75009 Paris, France", - "websiteUrl": "https://qonto.com", - "description": "Qonto is a European business finance solution offering online banking, invoicing, expense management, and financial tools for SMEs and freelancers.", - "category": "Business Banking / Financial Services", - "certifications": ["ISO 27001", "PCI DSS", "GDPR", "DSP2", "DORA"], - "securityPageUrl": "https://qonto.com/en/security", - "privacyPolicyUrl": "https://legal.qonto.com/en?_gl=1*eyxi0u*_gcl_au*NDEzMTYzMTE2LjE3NDQ5OTkzOTA.#template-6uiwuhdde", - "termsOfServiceUrl": "https://legal.qonto.com/en", - "trustPageUrl": "https://qonto.com/en/trust" - }, - { - "name": "Cursor", - "legalName": "Anysphere Inc.", - "headquarterAddress": "403 Francisco Street, San Francisco", - "websiteUrl": "https://www.cursor.com", - "description": "AI-powered integrated development environment enhancing developer productivity with advanced AI features.", - "category": "AI Code Editor", - "certifications": ["SOC 2 Type 2", "SOC 2 Type 1"], - "securityPageUrl": "https://www.cursor.com/security", - "privacyPolicyUrl": "https://www.cursor.com/privacy", - "termsOfServiceUrl": "https://www.cursor.com/terms-of-service", - "subprocessorsListUrl": "https://trust.cursor.com/subprocessors", - "trustPageUrl": "https://trust.cursor.com", - "statusPageUrl": "https://status.cursor.com/" - }, - { - "name": "Pulley", - "legalName": "PROLIFIC LABS Incorporated", - "headquarterAddress": "6114 La Salle Ave, Suite 459, Oakland, CA 94611, United States", - "websiteUrl": "https://pulley.com", - "description": "Pulley is an equity management platform that helps startups manage cap tables, issue equity, and ensure compliance with tools for fundraising modeling, 409A valuations, and more.", - "category": "Equity Management / Cap Table Software", - "certifications": ["SOC 2 Type 2", "GDPR", "CCPA"], - "securityPageUrl": "https://pulley.com/security", - "privacyPolicyUrl": "https://pulley.com/privacy", - "termsOfServiceUrl": "https://pulley.com/terms", - "subprocessorsListUrl": "https://large-walk-bd5.notion.site/6449d3ecd2854af0a313b6e8679b5795?v=d61abc36355842bb939d49544f18dc95" - }, - { - "name": "Microsoft Azure", - "legalName": "Microsoft Corporation", - "headquarterAddress": "One Microsoft Way, Redmond, WA 98052-6399, United States", - "websiteUrl": "https://azure.microsoft.com", - "description": "Microsoft Azure is a comprehensive cloud computing platform offering a wide range of services including computing, analytics, storage, and networking.", - "category": "Cloud Computing Platform", - "certifications": [ - "CIS Benchmark", - "CSA-STAR", - "CyberGRX", - "ISO 20000-1:2011", - "ISO 22301", - "ISO 27001", - "ISO 27017", - "ISO 27018", - "ISO 27701", - "ISO 9001", - "SOC 1", - "SOC 2", - "SOC 3", - "WCAG", - "CJIS", - "CNSSI 1253", - "DFARS", - "DoD IL2", - "DoD IL5", - "DoE 10 CFR Part 810", - "EAR (US Export Administration Regulations)", - "FedRAMP", - "FIPS 140-2", - "IRS 1075", - "ITAR", - "NIST 800-171", - "NIST CSF", - "Section 508 VPATS", - "23 NYCRR Part 500", - "AFM + DNB (Netherlands)", - "APRA (Australia)", - "AMF and ACPR (France)", - "CDSA", - "DPP (UK)", - "EBA (EU)", - "FACT (UK)", - "FCA + PRA (UK)", - "FDA CFR Title 21 Part 11", - "FERPA", - "FFIEC (US)", - "FINMA (Switzerland)", - "FISC (Japan)", - "FSA (Denmark)", - "GLBA (US)", - "GSMA", - "GxP", - "HDS (France)", - "HIPAA / HITECH", - "HITRUST", - "KNF (Poland)", - "Know Your Third Party (KY3P)", - "MARS-E (US)", - "MAS + ABS (Singapore)", - "MPA", - "NBB + FSMA (Belgium)", - "NEN-7510 (Netherlands)", - "NERC", - "OSFI (Canada)", - "PCI-3DS", - "PCI-DSS", - "RBI + IRDAI (India)", - "SEC 17a-4", - "SEC 18a-6", - "FINRA 4511", - "CFTC 1.31", - "SEC Regulation SCI (US)", - "Shared Assessments", - "SOX", - "TISAX", - "ABS OSPAR (Singapore)", - "BIR 2012 (Netherlands)", - "C5 (Germany)", - "Canada Controlled Goods", - "Canadian Privacy Laws", - "CCCS Medium (Canada)", - "Cyber Essentials Plus (UK)", - "IRAP (Australia)", - "DJCP (China)", - "DORA (EU)", - "EN 301 549 (EU)", - "ENISA IAF (EU)", - "ENS (Spain)", - "EU Model Clauses", - "GB 18030 (China)", - "GDPR", - "G-Cloud (UK)", - "IDW PS 951 (Germany)", - "ISMAP (Japan)", - "ISMS (Korea)", - "IT-Grundschutz Workbook (Germany)", - "LOPD (Spain)", - "MeitY (India)", - "MTCS (Singapore)", - "My Number (Japan)", - "National Information Assurance (Qatar)", - "NZ CC Framework (New Zealand)", - "PASF (UK)", - "PDPA (Argentina)", - "Personal Data Localization (Russia)", - "TRUCS (China)" - ], - "securityPageUrl": "https://www.microsoft.com/en-us/trust-center/security/secure-future-initiative", - "privacyPolicyUrl": "https://azure.microsoft.com/en-us/explore/trusted-cloud/privacy", - "termsOfServiceUrl": "https://azure.microsoft.com/en-us/support/legal/", - "dataProcessingAgreementUrl": "https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA", - "subprocessorsListUrl": "https://www.microsoft.com/en-us/download/details.aspx?id=50426", - "businessAssociateAgreementUrl": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech", - "trustPageUrl": "https://www.microsoft.com/en-us/trust-center/product-overview", - "statusPageUrl": "https://azure.status.microsoft/" - }, - { - "name": "Microsoft 365", - "legalName": "Microsoft Corporation", - "headquarterAddress": "One Microsoft Way, Redmond, WA 98052-6399, United States", - "websiteUrl": "https://www.microsoft.com/microsoft-365", - "description": "Microsoft 365 is a cloud-based productivity suite offering applications like Word, Excel, Teams, and OneDrive, integrated with AI-powered features and enterprise-grade security.", - "category": "Productivity & Collaboration Software", - "certifications": [ - "CIS Benchmark", - "CSA-STAR", - "CyberGRX", - "ISO 20000-1:2011", - "ISO 22301", - "ISO 27001", - "ISO 27017", - "ISO 27018", - "ISO 27701", - "ISO 9001", - "SOC 1", - "SOC 2", - "SOC 3", - "WCAG", - "CJIS", - "CNSSI 1253", - "DFARS", - "DoD IL2", - "DoD IL5", - "DoE 10 CFR Part 810", - "EAR (US Export Administration Regulations)", - "FedRAMP", - "FIPS 140-2", - "IRS 1075", - "ITAR", - "NIST 800-171", - "NIST CSF", - "Section 508 VPATS", - "23 NYCRR Part 500", - "AFM + DNB (Netherlands)", - "APRA (Australia)", - "AMF and ACPR (France)", - "CDSA", - "DPP (UK)", - "EBA (EU)", - "FACT (UK)", - "FCA + PRA (UK)", - "FDA CFR Title 21 Part 11", - "FERPA", - "FFIEC (US)", - "FINMA (Switzerland)", - "FISC (Japan)", - "FSA (Denmark)", - "GLBA (US)", - "GSMA", - "GxP", - "HDS (France)", - "HIPAA / HITECH", - "HITRUST", - "KNF (Poland)", - "Know Your Third Party (KY3P)", - "MARS-E (US)", - "MAS + ABS (Singapore)", - "MPA", - "NBB + FSMA (Belgium)", - "NEN-7510 (Netherlands)", - "NERC", - "OSFI (Canada)", - "PCI-3DS", - "PCI-DSS", - "RBI + IRDAI (India)", - "SEC 17a-4", - "SEC 18a-6", - "FINRA 4511", - "CFTC 1.31", - "SEC Regulation SCI (US)", - "Shared Assessments", - "SOX", - "TISAX", - "ABS OSPAR (Singapore)", - "BIR 2012 (Netherlands)", - "C5 (Germany)", - "Canada Controlled Goods", - "Canadian Privacy Laws", - "CCCS Medium (Canada)", - "Cyber Essentials Plus (UK)", - "IRAP (Australia)", - "DJCP (China)", - "DORA (EU)", - "EN 301 549 (EU)", - "ENISA IAF (EU)", - "ENS (Spain)", - "EU Model Clauses", - "GB 18030 (China)", - "GDPR", - "G-Cloud (UK)", - "IDW PS 951 (Germany)", - "ISMAP (Japan)", - "ISMS (Korea)", - "IT-Grundschutz Workbook (Germany)", - "LOPD (Spain)", - "MeitY (India)", - "MTCS (Singapore)", - "My Number (Japan)", - "National Information Assurance (Qatar)", - "NZ CC Framework (New Zealand)", - "PASF (UK)", - "PDPA (Argentina)", - "Personal Data Localization (Russia)", - "TRUCS (China)" - ], - "securityPageUrl": "https://www.microsoft.com/en-us/trust-center/security/secure-future-initiative", - "privacyPolicyUrl": "https://www.microsoft.com/en-us/privacy/privacystatement", - "termsOfServiceUrl": "https://www.microsoft.com/en-us/servicesagreement", - "dataProcessingAgreementUrl": "https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA", - "subprocessorsListUrl": "https://www.microsoft.com/en-us/download/details.aspx?id=50426", - "businessAssociateAgreementUrl": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech", - "trustPageUrl": "https://www.microsoft.com/en-us/trust-center/product-overview", - "statusPageUrl": "https://portal.office.com/servicestatus" - }, - { - "name": "Google", - "legalName": "Google LLC", - "headquarterAddress": "1600 Amphitheatre Parkway, Mountain View, CA 94043, US", - "websiteUrl": "https://google.com", - "description": "Google is a multinational technology company specializing in internet-related services and products, including search, advertising, cloud computing, software, and hardware.", - "category": "Technology & Internet Services", - "certifications": [ - "ISO 27001", - "ISO 27017", - "ISO 27018", - "ISO 27701", - "FedRAMP", - "PCI DSS", - "SOC 2", - "SOC 3", - "GDPR" - ], - "securityPageUrl": "https://business.safety.google/", - "privacyPolicyUrl": "https://policies.google.com/privacy", - "termsOfServiceUrl": "https://policies.google.com/terms", - "trustPageUrl": "https://business.safety.google/", - "statusPageUrl": "https://ads.google.com/status/publisher/" - }, - { - "name": "Namecheap", - "legalName": "Namecheap, Inc.", - "headquarterAddress": "4600 East Washington Street, Suite 305, Phoenix, AZ 85034, United States", - "websiteUrl": "https://www.namecheap.com", - "description": "Namecheap is an ICANN-accredited domain registrar and web hosting company offering domain registration, hosting, VPN, and other web services.", - "category": "Domain Registration and Web Hosting", - "certifications": [ - "CCPA", - "GDPR" - ], - "privacyPolicyUrl": "https://www.namecheap.com/legal/general/privacy-policy/", - "termsOfServiceUrl": "https://www.namecheap.com/legal/", - "dataProcessingAgreementUrl": "https://www.namecheap.com/legal/universal/data-processing-addendum/", - "statusPageUrl": "https://www.namecheap.com/status-updates/" - }, - { - "name": "Porter", - "legalName": "Porter Technologies Inc.", - "headquarterAddress": "New York City, NY, United States", - "websiteUrl": "https://www.porter.run", - "description": "Porter is a platform-as-a-service (PaaS) that enables developers to deploy and manage applications in their own AWS, GCP, or Azure cloud accounts with minimal DevOps overhead.", - "category": "Platform as a Service (PaaS)", - "certifications": [ - "SOC 2 Type 2", - "GDPR", - "CCPA" - ], - "securityPageUrl": "https://docs.porter.run/security-and-compliance/soc2-hipaa", - "privacyPolicyUrl": "https://docs.porter.run/terms-and-privacy/privacy-policy", - "termsOfServiceUrl": "https://docs.porter.run/terms-and-privacy/terms-of-service", - "statusPageUrl": "https://status.porter.run/" - }, - { - "name": "Bitwarden", - "legalName": "Bitwarden, Inc.", - "headquarterAddress": "1 North Calle Cesar Chavez, Suite 102, Santa Barbara, CA 93103", - "websiteUrl": "https://bitwarden.com", - "description": "Bitwarden is a secure, open-source password manager that enables individuals and organizations to store, manage, and share sensitive data across devices.", - "category": "Password Management", - "certifications": [ - "ISO/IEC 27001:2022", - "SOC 2 Type 2", - "SOC 3", - "HIPAA", - "GDPR", - "CCPA", - "CPRA", - "Data Privacy Framework (DPF)" - ], - "securityPageUrl": "https://bitwarden.com/help/security-faqs/", - "privacyPolicyUrl": "https://bitwarden.com/privacy/", - "termsOfServiceUrl": "https://bitwarden.com/terms/", - "subprocessorsListUrl": "https://bitwarden.com/help/subprocessors/", - "trustPageUrl": "https://bitwarden.com/compliance/", - "statusPageUrl": "https://status.bitwarden.com/" - }, - { - "name": "Framer", - "legalName": "Framer B.V.", - "headquarterAddress": "Rozengracht 207B, 1016 LZ Amsterdam, Netherlands", - "websiteUrl": "https://www.framer.com", - "description": "Framer is a no-code website builder that enables designers and teams to create and publish professional, responsive websites with built-in CMS, animations, and real-time collaboration tools.", - "category": "Website Builder / No-Code Platform", - "certifications": [ - "SOC 2 Type 2", - "ISO/IEC 27001:2022", - "GDPR", - "CCPA", - "Privacy Shield" - ], - "securityPageUrl": "https://www.framer.com/legal/security/", - "privacyPolicyUrl": "https://www.framer.com/legal/privacy-statement/", - "termsOfServiceUrl": "https://www.framer.com/legal/terms-of-service/", - "dataProcessingAgreementUrl": "https://www.framer.com/legal/data-processing-addendum/", - "subprocessorsListUrl": "https://www.framer.com/legal/sub-processors/", - "statusPageUrl": "https://www.framerstatus.com/" - }, - { - "name": "Cal.com", - "legalName": "Cal.com, Inc.", - "headquarterAddress": "2261 Market Street #4382, San Francisco, CA 94114, USA", - "websiteUrl": "https://cal.com", - "description": "Cal.com is an open-source scheduling platform that lets individuals and organizations create customizable booking experiences and integrate scheduling into their products.", - "category": "Scheduling / Productivity", - "certifications": [ - "SOC 2 Type 2", - "ISO/IEC 27001:2022", - "HIPAA", - "GDPR", - "CCPA" - ], - "securityPageUrl": "https://cal.com/security", - "privacyPolicyUrl": "https://cal.com/privacy", - "termsOfServiceUrl": "https://cal.com/terms", - "dataProcessingAgreementUrl": "https://security.cal.com/?itemUid=c4223a81-5840-4e11-ac9f-2b812794a67e", - "subprocessorsListUrl": "https://security.cal.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57", - "businessAssociateAgreementUrl": "https://app.cal.com/apps/baa-for-hipaa", - "trustPageUrl": "https://security.cal.com", - "statusPageUrl": "https://status.cal.com" - }, - { - "name": "Mailchimp", - "legalName": "The Rocket Science Group LLC", - "headquarterAddress": "2 Sun Court Suite 400 Peachtree Corners, GA 30092", - "websiteUrl": "https://mailchimp.com", - "description": "All-in-one marketing automation platform that lets organizations create, send, and analyze email campaigns and other customer-engagement content.", - "category": "Marketing Automation", - "certifications": [ - "SOC 2 Type 2", - "ISO 27001", - "Data Privacy Framework (DPF)", - "GDPR", - "CCPA", - "VPAT", - "PCI DSS" - ], - "securityPageUrl": "https://mailchimp.com/about/security/", - "privacyPolicyUrl": "https://www.intuit.com/privacy/statement/", - "termsOfServiceUrl": "https://mailchimp.com/legal/terms/", - "dataProcessingAgreementUrl": "https://mailchimp.com/legal/data-processing-addendum/", - "subprocessorsListUrl": "https://mailchimp.com/legal/subprocessors/", - "trustPageUrl": "https://www.intuit.com/compliance/", - "statusPageUrl": "https://status.mailchimp.com/" - }, - { - "name": "Otter.ai", - "legalName": "Otter.ai, Inc.", - "headquarterAddress": "800 W El Camino Real, Suite 170, Mountain View, CA 94040", - "websiteUrl": "https://otter.ai", - "description": "AI-powered meeting assistant that captures, transcribes, and summarizes conversations in real time to make information from meetings searchable and shareable.", - "category": "AI Transcription & Meeting Intelligence", - "certifications": [ - "SOC 2 Type 2", - "ISO/IEC 27001:2022", - "GDPR", - "CCPA", - "Data Privacy Framework (DPF)" - ], - "securityPageUrl": "https://otter.ai/privacy-security", - "privacyPolicyUrl": "https://otter.ai/privacy-policy", - "termsOfServiceUrl": "https://otter.ai/terms-of-service", - "dataProcessingAgreementUrl": "https://otter.ai/terms-of-service#data-processing-agreement", - "subprocessorsListUrl": "https://otter.ai/subprocessors", - "trustPageUrl": "https://otter.ai/privacy-security", - "statusPageUrl": "https://status.otter.ai/" - }, - { - "name": "Resend", - "legalName": "Plus Five Five, Inc.", - "headquarterAddress": "2261 Market Street #5039, San Francisco, CA 94114, United States", - "websiteUrl": "https://resend.com", - "description": "Developer‑focused email delivery platform offering a modern API and tooling to build, test and send transactional and marketing emails at scale.", - "category": "Email Delivery Platform", - "certifications": [ - "SOC 2 Type 2", - "GDPR", - "CCPA", - "Data Privacy Framework (DPF)" - ], - "securityPageUrl": "https://resend.com/security", - "privacyPolicyUrl": "https://resend.com/legal/privacy-policy", - "termsOfServiceUrl": "https://resend.com/legal/terms-of-service", - "dataProcessingAgreementUrl": "https://resend.com/legal/dpa", - "subprocessorsListUrl": "https://resend.com/legal/subprocessors", - "trustPageUrl": "https://resend.com/security", - "statusPageUrl": "https://resend-status.com/" - }, - { - "name": "Pylon", - "legalName": "Pylon Labs, Inc.", - "headquarterAddress": "188 King Street, Unit 502, San Francisco, CA 94107, USA", - "websiteUrl": "https://usepylon.com", - "description": "Pylon provides a modern unified customer-support platform for B2B companies, combining ticketing, chat, knowledge base, AI assistance, customer portal and workflows in one tool.", - "category": "Customer Support Platform", - "certifications": [ - "SOC 2 Type 2", - "ISO/IEC 27001", - "GDPR", - "HIPAA" - ], - "securityPageUrl": "https://usepylon.com/security", - "privacyPolicyUrl": "https://usepylon.com/privacy", - "termsOfServiceUrl": "https://usepylon.com/terms", - "dataProcessingAgreementUrl": "https://usepylon.com/data-processing-agreement", - "subprocessorsListUrl": "https://usepylon.com/subprocessors", - "trustPageUrl": "https://trust.usepylon.com", - "statusPageUrl": "https://status.usepylon.com" - }, - { - "name": "Loops", - "legalName": "Astrodon Inc.", - "websiteUrl": "https://loops.so", - "description": "Email platform for SaaS companies that lets teams create, send and track product, marketing, and transactional emails from a single interface", - "category": "Email Marketing Platform", - "certifications": [ - "GDPR", - "CCPA" - ], - "privacyPolicyUrl": "https://loops.so/privacy", - "termsOfServiceUrl": "https://loops.so/terms", - "dataProcessingAgreementUrl": "https://loops.so/dpa", - "subprocessorsListUrl": "https://loops.so/subprocessors", - "statusPageUrl": "https://loops.statuspage.io" - }, - { - "name": "Perplexity", - "legalName": "Perplexity AI, Inc.", - "headquarterAddress": "115 Sansome St, San Francisco, CA 94104-3601, United States", - "websiteUrl": "https://www.perplexity.ai", - "description": "Generative AI answer engine that delivers real-time, source-cited answers to user questions.", - "category": "AI Answer Engine", - "certifications": [ - "SOC 2 Type 2", - "GDPR", - "CCPA", - "PCI DSS", - "CAIQ Lite" - ], - "securityPageUrl": "https://www.perplexity.ai/hub/security", - "privacyPolicyUrl": "https://www.perplexity.ai/hub/legal/privacy-policy", - "termsOfServiceUrl": "https://www.perplexity.ai/hub/legal/terms-of-service", - "dataProcessingAgreementUrl": "https://www.perplexity.ai/hub/legal/enterprise-terms-of-service", - "subprocessorsListUrl": "https://trust.perplexity.ai/", - "trustPageUrl": "https://trust.perplexity.ai", - "statusPageUrl": "https://status.perplexity.ai/" - }, - { - "name": "Google Cloud Platform", - "legalName": "Google LLC", - "headquarterAddress": "1600 Amphitheatre Parkway, Mountain View, CA 94043, USA", - "websiteUrl": "https://cloud.google.com", - "description": "Comprehensive public cloud computing platform offering infrastructure, data analytics, AI, security, and developer tools", - "category": "Cloud Computing Platform", - "certifications": [ - "Cloud Computing Compliance Controls Catalog (C5)", - "CSA", - "GSMA SAS-SM", - "Higher Education Cloud Vendor Assessment Tool (HECVAT)", - "ISO 9001:2015", - "ISO 22301:2019 & BS EN ISO 22301:2019", - "ISO 50001:2018", - "ISO/IEC 27001", - "ISO/IEC 27017", - "ISO/IEC 27018", - "ISO/IEC 27701", - "ISO/IEC 42001", - "PCI 3DS Core Security Standard", - "PCI DSS", - "PCI PIN Security", - "SOC 1", - "SOC 2", - "SOC 3", - "SWIFT on Google Cloud", - "Uptime Institute's Tier Standards", - "VPAT (WCAG, U.S. Section 508, EN 301 549)", - "FedRAMP", - "FIPS 140-2 Validated", - "HITRUST CSF", - "Independent Security Evaluators (ISE) Audit", - "Minimum Acceptable Risk Standards for Exchanges (MARS-E)", - "StateRAMP", - "TruSight", - "U.S. Cybersecurity Maturity Model Certification (CMMC)", - "U.S. Defense Information Systems Agency Provisional Authorization", - "Spain Esquema Nacional de Seguridad (ENS)", - "EU Cloud Code of Conduct", - "HDS", - "ISAE 3000 Type 2 Report (FINMA)", - "ISO 14001", - "Microfin", - "NCSC - Cyber Essentials Plus (UK)", - "Police Assured Secure Facilities (PASF)", - "Qatar National Information Assurance (NIA)", - "SWIPO Data Portability Code of Conduct", - "TISAX", - "Australia Hosting Certification Framework (HCF)", - "Cloud Security Assurance Program (CSAP) Low Level for Group C", - "Information System Security Management and Assessment Program (ISMAP)", - "IRAP (Information Security Registered Assessors Program)", - "JIIMA", - "K-ISMS (Korea)", - "MTCS (Singapore) Tier 3", - "OSPAR", - "SNI 27001", - "ETDA (Thailand)", - "GxP", - "California Consumer Privacy Act (CCPA)", - "COPPA (U.S.)", - "Export Administration Regulations (EAR)", - "FERPA (U.S.)", - "FINRA (US)", - "Google Cloud Data Processing Addendum Mapping - U.S. State Privacy Laws", - "HIPAA", - "IRS 1075", - "International Traffic in Arms Regulations (ITAR)", - "GLBA", - "OSFI (Canada)", - "FG16/5 - FCA", - "NERC CIP", - "PHIPA (Canada)", - "PIPEDA (Canada)", - "US Federal Banking Agencies", - "U.S. Defense Federal Acquisition Regulation Supplement (DFARS)", - "ACPR (France)", - "BaFin Cloud Outsourcing Guidance", - "Banco de España", - "Banco de Portugal", - "Bank of Italy", - "BRSA (Turkey)", - "BSI Critical Infrastructure (KRITIS)", - "BWG (Austria)", - "Central Bank of Ireland (Ireland)", - "CSSF (Luxembourg)", - "De Nederlandsche Bank (the Netherlands)", - "EU DORA", - "European Union’s Digital Markets Act", - "EU Solvency II", - "EU Standard Contractual Clauses", - "FINMA (Switzerland)", - "FSA (Denmark)", - "GDPR", - "Google Cloud & the EU Network and Information Systems Directive (NIS2)", - "Israel’s Privacy Protection Authority", - "KNF (Poland)", - "MaRisk AT 9 Outsourcing", - "PRA (UK)", - "revFADP (Switzerland)", - "South Africa POPI", - "SFSA (Sweden)", - "Telecoms Security Act (UK)", - "VAG (Austria)", - "SYSC 8 Outsourcing - FCA Handbook", - "UK CHECK", - "PDPL (Argentina)", - "BCRA (Argentina)", - "Central Bank of Brazil (Brazil)", - "CNBV (Mexico)", - "CNSF (Mexico)", - "CMF (Chile)", - "Superintendencia de Banca (Peru)", - "Financial Superintendence of Colombia", - "Lei Geral de Proteção de Dados (LGPD)", - "ASFI (Bolivia)", - "Act on the Protection of Personal Information (Japan)", - "APRA Prudential Standard CPS 234", - "APPs (Australia)", - "APRA (Australia)", - "Bank Negara (Malaysia)", - "Bank of Thailand (BOT)", - "BSP (Philippines)", - "DSA (Bangladesh)", - "FSC Insurance Outsourcing Directions", - "FSC Banking Outsourcing Regulations", - "GR 95/2018 guidelines", - "IA (Hong Kong)", - "HKMA (Hong Kong)", - "MAMPU (Malaysia)", - "PDPO (Hong Kong)", - "Indonesia Government Regulation No. 71 (GR 71)", - "IRDAI (India)", - "FSC (Korea)", - "Korean Financial Supervisory Service (FSS)", - "MAS TRM Guidelines", - "OIC (Thailand)", - "OJK Circular 21 of 2017 (SEOJK 21)", - "OJK Regulation No. 38 of 2016 (POJK 38)", - "PDP Law (Indonesia)", - "PDPA (Malaysia)", - "PDPA (Philippines)", - "PDPA (Taiwan)", - "PDPA (Thailand)", - "PDPD (Vietnam)", - "PIPA (Korea)", - "RBI (India)", - "Reserve Bank of New Zealand (New Zealand)", - "Securities and Exchange Board of India (SEBI)", - "PDPA (Singapore)", - "State Bank of Vietnam", - "The Privacy Act (New Zealand)" - ], - "securityPageUrl": "https://cloud.google.com/security", - "privacyPolicyUrl": "https://cloud.google.com/terms/cloud-privacy-notice", - "termsOfServiceUrl": "https://cloud.google.com/terms", - "serviceLevelAgreementUrl": "https://cloud.google.com/terms/sla", - "dataProcessingAgreementUrl": "https://cloud.google.com/terms/data-processing-terms", - "subprocessorsListUrl": "https://cloud.google.com/terms/subprocessors", - "businessAssociateAgreementUrl": "https://cloud.google.com/terms/hipaa-baa", - "trustPageUrl": "https://cloud.google.com/trust-center", - "statusPageUrl": "https://status.cloud.google.com/" - }, - { - "name": "Fly.io", - "legalName": "Fly.io, Inc.", - "headquarterAddress": "2045 W Grand Ave, Chicago, IL 60612, United States", - "websiteUrl": "https://fly.io", - "description": "Developer-focused public cloud platform offering hardware-virtualized containers (Fly Machines) with KVM isolation, automatic scaling to zero, and integrated tools for deploying and managing applications globally", - "category": "Application Hosting", - "certifications": [ - "SOC 2 Type 2", - "EU-U.S. DPF", - "UK DPF", - "Swiss-U.S. DPF", - "HIPAA", - "GDPR", - "CCPA" - ], - "securityPageUrl": "https://fly.io/security", - "privacyPolicyUrl": "https://fly.io/legal/privacy-policy", - "termsOfServiceUrl": "https://fly.io/legal/terms-of-service", - "serviceLevelAgreementUrl": "https://fly.io/legal/sla-uptime/", - "dataProcessingAgreementUrl": "https://fly.io/documents", - "subprocessorsListUrl": "https://fly.io/legal/sub-processors/", - "businessAssociateAgreementUrl": "https://fly.io/documents", - "trustPageUrl": "https://fly.io/compliance", - "statusPageUrl": "https://status.fly.io/" - }, - { - "name": "Upstash", - "legalName": "Upstash, Inc.", - "headquarterAddress": "6202 Via De Adrianna, San Jose, CA 95120, United States", - "websiteUrl": "https://upstash.com", - "description": "Serverless data platform providing HTTP-based Redis, Vector, and QStash services with global low-latency, automatic scaling, and durable storage", - "category": "Serverless Database Platform", - "certifications": [ - "SOC 2 Type 2", - "GDPR", - "CCPA" - ], - "securityPageUrl": "https://upstash.com/static/trust/security-measures.pdf", - "privacyPolicyUrl": "https://upstash.com/trust/privacy.pdf", - "termsOfServiceUrl": "https://upstash.com/trust/terms.pdf", - "serviceLevelAgreementUrl": "https://upstash.com/docs/common/help/sla", - "dataProcessingAgreementUrl": "https://upstash.com/static/trust/dpa.pdf", - "subprocessorsListUrl": "https://trust.upstash.com/subprocessors", - "trustPageUrl": "https://trust.upstash.com", - "statusPageUrl": "https://status.upstash.com" - }, - { - "name": "bunny.net", - "legalName": "BunnyWay d.o.o.", - "headquarterAddress": "Dunajska cesta 165, 1000 Ljubljana, Slovenia", - "websiteUrl": "https://bunny.net", - "description": "Cloud-based content-delivery, edge-storage and optimization platform that accelerates and secures web content worldwide.", - "category": "Content Delivery Network (CDN) / Edge Cloud", - "certifications": [ - "ISO 27001", - "GDPR" - ], - "securityPageUrl": "https://bunny.net/shield/", - "privacyPolicyUrl": "https://bunny.net/privacy/", - "termsOfServiceUrl": "https://bunny.net/tos/", - "serviceLevelAgreementUrl": "https://bunny.net/sla/", - "subprocessorsListUrl": "https://bunny.net/gdpr/sub-processors/", - "statusPageUrl": "https://status.bunny.net/" - }, - { - "name": "ClickUp", - "legalName": "Mango Technologies, Inc.", - "headquarterAddress": "350 Tenth Ave, 5th Floor, San Diego, CA 92101, United States", - "websiteUrl": "https://clickup.com", - "description": "All-in-one productivity platform for project management, document collaboration, and goal tracking.", - "category": "Project Management", - "certifications": [ - "SOC 2 Type 2", - "ISO/IEC 27001", - "ISO 27017", - "ISO 27018", - "PCI DSS", - "GDPR", - "CCPA", - "CPRA", - "LGPD", - "VCDPA" - ], - "securityPageUrl": "https://clickup.com/security", - "privacyPolicyUrl": "https://clickup.com/terms/privacy", - "termsOfServiceUrl": "https://clickup.com/terms", - "dataProcessingAgreementUrl": "https://clickup.com/terms/dpa", - "subprocessorsListUrl": "https://clickup.com/terms/dpa/subprocessors", - "trustPageUrl": "https://security.clickup.com", - "statusPageUrl": "https://status.clickup.com" - }, - { - "name": "Danami", - "legalName": "Danami International Inc.", - "headquarterAddress": "5314 56 St, Camrose, Alberta T4V 2E5, Canada", - "websiteUrl": "https://www.danami.com", - "description": "Developer of security, firewall and anti-spam extensions for the Plesk hosting control panel.", - "category": "Web-hosting security / Plesk extensions", - "privacyPolicyUrl": "https://www.danami.com/legal/privacy-policy", - "termsOfServiceUrl": "https://www.danami.com/legal/terms-of-service" - }, - { - "name": "New Relic", - "legalName": "New Relic, Inc.", - "headquarterAddress": "188 Spear St., Suite 1000, San Francisco, CA 94105, USA", - "websiteUrl": "https://newrelic.com", - "description": "New Relic provides a full-stack observability platform that lets engineering teams monitor, analyze, and improve application, infrastructure, and digital-experience performance in real time.", - "category": "Observability / Application Performance Monitoring", - "certifications": [ - "SOC 2 Type 2", - "ISO/IEC 27001:2022", - "FedRAMP Moderate", - "PCI DSS Level 1", - "TISAX Level 2", - "HITRUST CSF", - "HIPAA", - "GDPR", - "CCPA", - "Data Privacy Framework (DPF)" - ], - "securityPageUrl": "https://newrelic.com/security", - "privacyPolicyUrl": "https://newrelic.com/termsandconditions/privacy", - "termsOfServiceUrl": "https://newrelic.com/termsandconditions/terms", - "serviceLevelAgreementUrl": "https://docs.newrelic.com/docs/licenses/license-information/referenced-policies/service-level-availability-commitment/", - "dataProcessingAgreementUrl": "https://newrelic.com/sites/default/files/2023-11/New_Relic_GDPR_DPA_SCCs_Oct_2023_presigned.pdf", - "subprocessorsListUrl": "https://newrelic.com/sub-processors", - "businessAssociateAgreementUrl": "https://newrelic.com/termsandconditions/hipaabaafaq", - "trustPageUrl": "https://newrelic.com/security", - "statusPageUrl": "https://status.newrelic.com/" - }, - { - "name": "OVHcloud global", - "legalName": "OVH Groupe SAS", - "headquarterAddress": "2 Rue Kellermann, 59100 Roubaix, France", - "websiteUrl": "https://www.ovhcloud.com", - "description": "OVHcloud is a French cloud computing company offering public and private cloud products, shared hosting, and dedicated server solutions in 140 countries worldwide.", - "category": "Cloud Infrastructure Provider", - "certifications": [ - "ISO/IEC 27001", - "ISO/IEC 27017", - "ISO/IEC 27018", - "ISO/IEC 27701", - "CSA STAR", - "ISO/IEC 14001", - "ISO 50001", - "HDS", - "ANSSI SecNum Cloud", - "ACN", - "BSI C5", - "ENS", - "PCI DSS", - "SOC 1", - "SOC 2", - "SOC 3" - ], - "securityPageUrl": "https://corporate.ovhcloud.com/en/trusted-cloud/security-certifications/", - "privacyPolicyUrl": "https://www.ovhcloud.com/en/terms-and-conditions/privacy-policy/", - "termsOfServiceUrl": "https://www.ovhcloud.com/en/terms-and-conditions/contracts/", - "dataProcessingAgreementUrl": "https://storage.gra.cloud.ovh.net/v1/AUTH_325716a587c64897acbef9a4a4726e38/contracts/4683679-OVH_Data_Protection_Agreement-IE-5.1.pdf", - "subprocessorsListUrl": "https://www.ovh.ie/support/termsofservice/OVH%20IE%20Sub%20processors.pdf", - "trustPageUrl": "https://corporate.ovhcloud.com/en/trusted-cloud/security-certifications/", - "statusPageUrl": "https://www.status-ovhcloud.com/" - }, - { - "name": "OVHcloud US", - "legalName": "OVH US LLC", - "headquarterAddress": "11950 Democracy Drive, Suite 300, Reston, VA 20190, USA", - "websiteUrl": "https://us.ovhcloud.com", - "description": "Global cloud-infrastructure provider delivering bare-metal servers, public and private cloud, and web-hosting services at scale.", - "category": "Cloud Infrastructure Provider", - "certifications": [ - "ISO/IEC 27001", - "ISO/IEC 27017", - "ISO/IEC 27018", - "ISO/IEC 27701", - "SOC 1 Type 2", - "SOC 2 Type 2", - "SOC 3", - "CSA STAR", - "HIPAA", - "PCI DSS", - "Data Privacy Framework (DPF)", - "GDPR", - "CCPA" - ], - "securityPageUrl": "https://us.ovhcloud.com/personal-data-protection/security/", - "privacyPolicyUrl": "https://us.ovhcloud.com/legal/privacy-policy/", - "termsOfServiceUrl": "https://us.ovhcloud.com/legal/terms-of-service/", - "serviceLevelAgreementUrl": "https://us.ovhcloud.com/legal/", - "dataProcessingAgreementUrl": "https://us.ovhcloud.com/legal/data-processing-agreement/", - "subprocessorsListUrl": "https://storage.gra.cloud.ovh.net/v1/AUTH_325716a587c64897acbef9a4a4726e38/contracts/30c4ab8-OVH_Sub_processors-IE-2.0.pdf", - "trustPageUrl": "https://us.ovhcloud.com/compliance/", - "statusPageUrl": "https://status.us.ovhcloud.com/" - }, - { - "name": "Pipedrive", - "legalName": "Pipedrive Inc.", - "headquarterAddress": "530 Fifth Avenue, 8th Floor, Suite 802, New York, NY 10036, United States", - "websiteUrl": "https://www.pipedrive.com", - "description": "Pipedrive is a sales-focused CRM platform designed to help small businesses manage leads, track deals, and automate sales processes.", - "category": "CRM Software", - "certifications": [ - "SOC 2 Type 2", - "SOC 3", - "ISO/IEC 27001:2013", - "ISO/IEC 27701:2019", - "GDPR", - "CCPA" - ], - "securityPageUrl": "https://www.pipedrive.com/en/features/privacy-security", - "privacyPolicyUrl": "https://www.pipedrive.com/en/privacy", - "termsOfServiceUrl": "https://www.pipedrive.com/en/terms-of-service", - "dataProcessingAgreementUrl": "https://www.pipedrive.com/en/privacy/dpa", - "subprocessorsListUrl": "https://www.pipedrive.com/en/subprocessors", - "trustPageUrl": "https://www.pipedrive.com/en/trust-center", - "statusPageUrl": "https://status.pipedrive.com/" - }, - { - "name": "Plesk", - "legalName": "WebPros International GmbH (formerly Plesk International GmbH)", - "headquarterAddress": "Vordergasse 59, 8200 Schaffhausen, Switzerland", - "websiteUrl": "https://www.plesk.com", - "description": "Web-hosting control-panel software for building, securing and running websites and cloud applications.", - "category": "Web Hosting Control Panel", - "certifications": [ - "GDPR" - ], - - "securityPageUrl": "https://docs.plesk.com/en-US/obsidian/administrator-guide/plesk-administration/securing-plesk.59464/", - "privacyPolicyUrl": "https://www.plesk.com/legal/#privacy-policy", - "termsOfServiceUrl": "https://www.plesk.com/legal/#terms-of-use/", - "subprocessorsListUrl": "https://www.plesk.com/wp-content/uploads/legal/gdpr3.pdf" - }, - { - "name": "Brevo", - "legalName": "Sendinblue SAS", - "headquarterAddress": "106 boulevard Haussmann, 75008 Paris, France", - "websiteUrl": "https://www.brevo.com", - "description": "Cloud-based CRM and multichannel marketing platform that lets businesses run email, SMS, WhatsApp and automated campaigns while managing customer relationships from one suite.", - "category": "Email Marketing & CRM", - "certifications": [ - "ISO/IES 27001:2013", - "GDPR", - "CCPA", - "CASL" - ], - "securityPageUrl": "https://www.brevo.com/features/data-security/", - "privacyPolicyUrl": "https://www.brevo.com/legal/privacypolicy/", - "termsOfServiceUrl": "https://www.brevo.com/legal/termsofuse/", - "dataProcessingAgreementUrl": "https://www.brevo.com/legal/termsofuse/#dpa", - "subprocessorsListUrl": "https://www.brevo.com/legal/termsofuse/#sub-processors", - "trustPageUrl": "https://www.brevo.com/features/data-security/", - "statusPageUrl": "https://status.brevo.com/" - }, - { - "name": "Better Stack", - "legalName": "Better Stack, Inc.", - "websiteUrl": "https://betterstack.com", - "description": "Developer-first observability platform that unifies log management, uptime monitoring, incident response, and public status pages.", - "category": "Observability / Monitoring", - - "certifications": [ - "SOC 2 Type 2", - "GDPR", - "CCPA" - ], - - "securityPageUrl": "https://betterstack.com/security", - "privacyPolicyUrl": "https://betterstack.com/privacy", - "termsOfServiceUrl": "https://betterstack.com/terms", - "dataProcessingAgreementUrl": "https://betterstack.com/dpa", - "subprocessorsListUrl": "https://betterstack.com/dpa/schedules", - "statusPageUrl": "https://status.betterstack.com/" - }, - { - "name": "PlanetScale", - "legalName": "PlanetScale, Inc.", - "headquarterAddress": "535 Mission Street, 14th Floor, San Francisco, CA 94105, United States", - "websiteUrl": "https://planetscale.com", - "description": "PlanetScale provides a serverless, MySQL-compatible database-as-a-service built on Vitess that lets developers scale relational workloads without managing infrastructure.", - "category": "Database-as-a-Service", - - "certifications": [ - "SOC 2 Type 2", - "HIPAA", - "PCI DSS 4.0", - "GDPR", - "CCPA", - "LGPD" - ], - "securityPageUrl": "https://planetscale.com/docs/concepts/security", - "privacyPolicyUrl": "https://planetscale.com/legal/privacy", - "termsOfServiceUrl": "https://planetscale.com/legal/siteterms", - "serviceLevelAgreementUrl": "https://planetscale.com/legal/planetscale-service-level-agreement", - "dataProcessingAgreementUrl": "https://planetscale.com/legal/data-processing-addendum", - "subprocessorsListUrl": "https://planetscale.com/legal/subprocessors", - "trustPageUrl": "https://trust.planetscale.com", - "statusPageUrl": "https://www.planetscalestatus.com/" - }, - { - "name": "Docker", - "legalName": "Docker, Inc.", - "headquarterAddress": "3790 El Camino Real #1052, Palo Alto, CA 94306, USA", - "websiteUrl": "https://www.docker.com", - "description": "Developer platform for building, sharing, and running containerized applications.", - "category": "Container Platform", - "certifications": [ - "SOC 2 Type 2", - "ISO/IEC 27001", - "CSA Trusted Cloud", - "Data Privacy Framework (DPF)", - "GDPR", - "CCPA", - "APEC", - "CPA", - "CTDPA", - "VCDPA", - "UCPA" - ], - "securityPageUrl": "https://www.docker.com/trust/security/", - "privacyPolicyUrl": "https://www.docker.com/legal/docker-privacy-policy/", - "termsOfServiceUrl": "https://www.docker.com/legal/docker-terms-service/", - "serviceLevelAgreementUrl": "https://www.docker.com/legal/docker-subscription-service-agreement/", - "dataProcessingAgreementUrl": "https://www.docker.com/app/uploads/2022/03/2022-Docker-EU-UK-SCC-Data-Processing-Agreement.pdf", - "subprocessorsListUrl": "https://www.docker.com/trust/privacy/sub-processors/", - "trustPageUrl": "https://www.docker.com/trust/", - "statusPageUrl": "https://www.dockerstatus.com/" - }, - { - "name": "Brex", - "legalName": "Brex Inc.", - "headquarterAddress": "650 S 500W Suite 300, Salt Lake City, UT 84101, United States", - "websiteUrl": "https://www.brex.com", - "description": "AI-powered global spend platform offering corporate cards, expense management, business accounts and travel in one place.", - "category": "Spend Management & Corporate Card", - "certifications": [ - "SOC 1 Type 2", - "SOC 2 Type 2", - "PCI DSS", - "GDPR", - "CCPA" - ], - "securityPageUrl": "https://www.brex.com/support/security", - "privacyPolicyUrl": "https://www.brex.com/legal/privacy", - "termsOfServiceUrl": "https://www.brex.com/legal/user-terms", - "dataProcessingAgreementUrl": "https://www.brex.com/legal/dpa", - "subprocessorsListUrl": "https://trust-portal.brex.com", - "trustPageUrl": "https://trust-portal.brex.com", - "statusPageUrl": "https://status.brex.com/" - }, - { - "name": "Ramp", - "legalName": "Ramp Business Corporation", - "headquarterAddress": "28 West 23rd Street, Floor 2, New York, NY 10010 USA", - "websiteUrl": "https://ramp.com", - "description": "Corporate spend-management platform offering corporate cards, expense automation, bill pay, and vendor management for finance teams.", - "category": "Spend Management", - "certifications": [ - "SOC 2 Type 2", - "SOC 1 Type 2", - "ISO/IEC 27001:2022", - "PCI DSS v4.0", - "GDPR", - "CCPA", - "Data Privacy Framework (DPF)" - ], - "securityPageUrl": "https://ramp.com/security", - "privacyPolicyUrl": "https://ramp.com/legal/privacy-policy", - "termsOfServiceUrl": "https://ramp.com/legal/platform-agreement", - "dataProcessingAgreementUrl": "https://ramp.com/legal/dpa", - "subprocessorsListUrl": "https://trust.ramp.com/", - "trustPageUrl": "https://trust.ramp.com/" - }, - { - "name": "ClickHouse", - "legalName": "ClickHouse, Inc.", - "headquarterAddress": "650 Castro St., Suite 120 #92426, Mountain View, CA 94041, USA", - "websiteUrl": "https://clickhouse.com", - "description": "Open-source column-oriented database and managed cloud service for ultra-fast, real-time analytics on large-volume data.", - "category": "Real-time Analytics Database", - "certifications": [ - "SOC 2 Type 2", - "ISO/IEC 27001", - "Data Privacy Framework (DPF)", - "HIPAA", - "PCI DSS v4.0", - "GDPR", - "CCPA", - "Colorado Privacy Act (CPA)", - "Connecticut Data Privacy Act (CTDPA)", - "Virginia Consumer Data Protection Act (VCDPA)" - ], - "securityPageUrl": "https://clickhouse.com/docs/cloud/security/security-and-compliance", - "privacyPolicyUrl": "https://clickhouse.com/legal/privacy-policy", - "termsOfServiceUrl": "https://clickhouse.com/legal/agreements/terms-of-service", - "serviceLevelAgreementUrl": "https://clickhouse.com/legal/agreements/service-level-agreement", - "dataProcessingAgreementUrl": "https://clickhouse.com/legal/agreements/data-processing-addendum", - "subprocessorsListUrl": "https://clickhouse.com/legal/agreements/subprocessors", - "trustPageUrl": "https://trust.clickhouse.com", - "statusPageUrl": "https://status.clickhouse.com" - }, - { - "name": "Tailscale", - "legalName": "Tailscale Inc.", - "headquarterAddress": "401-50 Lynn Williams Street, Toronto, ON M6K 3R9, Canada", - "websiteUrl": "https://tailscale.com", - "description": "Tailscale provides a zero-config mesh VPN and zero-trust networking platform that securely connects devices and services across any network.", - "category": "Zero-Trust Networking / Mesh VPN", - "certifications": [ - "SOC 2 Type II", - "GDPR", - "CCPA" - ], - "securityPageUrl": "https://tailscale.com/security", - "privacyPolicyUrl": "https://tailscale.com/privacy-policy", - "termsOfServiceUrl": "https://tailscale.com/terms", - "serviceLevelAgreementUrl": "https://tailscale.com/sla", - "dataProcessingAgreementUrl": "https://tailscale.com/dpa", - "subprocessorsListUrl": "https://tailscale.com/dpa-subprocessors", - "trustPageUrl": "https://tailscale.com/legal", - "statusPageUrl": "https://status.tailscale.com/" - }, - { - "name": "Puzzle", - "legalName": "Puzzle Financial Inc.", - "headquarterAddress": "575 Market Street, Floor 5, San Francisco, CA 94105, USA", - "websiteUrl": "https://puzzle.io", - "description": "Puzzle provides modern, real-time accounting software that gives startups automated bookkeeping and instant finance metrics such as cash, burn and runway.", - "category": "Accounting Software", - "certifications": [ - "SOC 2 Type 2", - "GDPR", - "CCPA" - ], - "securityPageUrl": "https://puzzle.io/security", - "privacyPolicyUrl": "https://puzzle.io/legal/privacy", - "termsOfServiceUrl": "https://puzzle.io/legal/terms-of-service", - "trustPageUrl": "https://trust.puzzle.io", - "statusPageUrl": "https://status.puzzle.io/" - }, - { - "name": "Probo", - "legalName": "Probo Inc.", - "headquarterAddress": "490 Post St, Suite 640,San Francisco, CA 94102, United States", - "websiteUrl": "https://www.getprobo.com/", - "description": "Probo is an open-source compliance platform that helps startups achieve SOC 2 and ISO 27001 certifications quickly and affordably, with expert guidance and no vendor lock-in.", - "category": "Compliance & risk management software", - "privacyPolicyUrl": "https://www.getprobo.com/privacy", - "termsOfServiceUrl": "https://www.getprobo.com/terms", - "subprocessorsListUrl": "https://www.getprobo.com/subprocessors" - }, - { - "name": "folk", - "legalName": "FOLK SAS", - "headquarterAddress": "31 Rue des Vinaigriers, 75010 Paris, France", - "websiteUrl": "https://www.folk.app", - "description": "Lightweight, collaborative CRM that automates contact and relationship management for modern teams.", - "category": "CRM", - "certifications": [ - "SOC 2 Type 1", - "GDPR", - "CCPA" - ], - "securityPageUrl": "https://help.folk.app/en/articles/5007534-security-privacy", - "privacyPolicyUrl": "https://www.folk.app/privacy-policy", - "termsOfServiceUrl": "https://www.folk.app/terms-of-use", - "subprocessorsListUrl": "https://www.folk.app/privacy-policy#3-list-of-sub-processors", - "statusPageUrl": "https://status.folk.app/" - }, - { - "name": "Claap", - "websiteUrl": "https://www.claap.io", - "description": "AI-powered meeting recorder and video workspace that automates post-meeting tasks and CRM enrichment.", - "category": "Sales Enablement / AI Meeting Automation", - "certifications": [ - "SOC 2 Type 2", - "GDPR", - "CCPA" - ], - "privacyPolicyUrl": "https://www.claap.io/legal/privacy-policy", - "termsOfServiceUrl": "https://www.claap.io/legal/terms-and-conditions", - "subprocessorsListUrl": "https://www.claap.io/legal/privacy-policy#sub-processors", - "statusPageUrl": "https://claap.instatus.com/" - }, - { - "name": "Pitch", - "legalName": "Pitch Software GmbH", - "headquarterAddress": "Joachimstraße 7, 10119 Berlin, Germany", - "websiteUrl": "https://pitch.com", - "description": "Cloud-based presentation platform that lets teams collaboratively create, design, and share visually engaging slide decks in real time.", - "category": "Presentation Software", - "certifications": [ - "GDPR" - ], - "securityPageUrl": "https://pitch.com/security-policy", - "privacyPolicyUrl": "https://pitch.com/privacy-policy", - "termsOfServiceUrl": "https://pitch.com/terms-of-use", - "dataProcessingAgreementUrl": "https://pitch.com/dpa", - "subprocessorsListUrl": "https://pitch.com/dpa#annex-7-2", - "trustPageUrl": "https://pitch.com/gdpr", - "statusPageUrl": "https://status.pitch.com/" - }, - { - "name": "Spendesk", - "legalName": "Spendesk SAS", - "headquarterAddress": "51 Rue de Londres, 75008 Paris, France", - "websiteUrl": "https://www.spendesk.com", - "description": "Spendesk is a comprehensive spend management platform offering solutions like virtual and physical cards, invoice processing, and expense reimbursements to streamline company spending.", - "category": "Spend Management", - "certifications": [ - "GDPR", - "ISO/IEC 27001:2022", - "DORA" - ], - "securityPageUrl": "https://www.spendesk.com/spendesk-security/", - "privacyPolicyUrl": "https://www.spendesk.com/legals/privacy/", - "termsOfServiceUrl": "https://www.spendesk.com/legals/terms/customers/", - "dataProcessingAgreementUrl": "https://www.spendesk.com/legals/terms/customers/#Annex-three", - "subprocessorsListUrl": "https://www.spendesk.com/legals/subprocessors/", - "trustPageUrl": "https://trust.spendesk.com/", - "statusPageUrl": "https://status.spendesk.com/" - }, - { - "name": "Lever", - "legalName": "Lever, Inc.", - "headquarterAddress": "1125 Mission Street, San Francisco, CA 94103, United States", - "websiteUrl": "https://www.lever.co", - "description": "Cloud-based talent-acquisition suite that combines applicant-tracking and candidate-relationship-management tools so organisations can source, engage and hire talent in one place.", - "category": "Applicant Tracking / Talent Acquisition", - "certifications": [ - "SOC 2 Type 2", - "ISO/IEC 27001", - "GDPR", - "CAIQ", - "CCPA", - "EU-U.S. Privacy Shield" - ], - "securityPageUrl": "https://www.lever.co/security/", - "privacyPolicyUrl": "https://www.lever.co/privacy-notice/", - "termsOfServiceUrl": "https://www.lever.co/agreements/tos", - "serviceLevelAgreementUrl": "https://www.lever.co/agreements/sla/", - "dataProcessingAgreementUrl": "https://www.lever.co/agreements/dpa/", - "subprocessorsListUrl": "https://www.lever.co/subprocessors-archive-june-2023/", - "statusPageUrl": "https://status.lever.co/" - } -] diff --git a/apps/console/src/pages/organizations/vendors/ListVendorView.tsx b/apps/console/src/pages/organizations/vendors/ListVendorView.tsx index 489ab0042..c26145093 100644 --- a/apps/console/src/pages/organizations/vendors/ListVendorView.tsx +++ b/apps/console/src/pages/organizations/vendors/ListVendorView.tsx @@ -29,24 +29,7 @@ import { DropdownMenuItem, DropdownMenuTrigger, } from "@/components/ui/dropdown-menu"; - -interface VendorData { - name: string; - headquarterAddress: string; - legalName: string; - websiteUrl: string; - privacyPolicyUrl: string; - serviceLevelAgreementUrl?: string; - category: string; - dataProcessingAgreementUrl?: string; - description: string; - categories: string[]; - certifications: string[]; - securityPageUrl?: string; - trustPageUrl?: string; - statusPageUrl?: string; - termsOfServiceUrl?: string; -} +import { Vendor, Vendors } from "@probo/vendors"; const ITEMS_PER_PAGE = 25; @@ -214,8 +197,8 @@ function ListVendorContent({ const [, startTransition] = useTransition(); const [searchTerm, setSearchTerm] = useState(""); const [showAddVendorDropdown, setShowAddVendorDropdown] = useState(false); - const [filteredVendors, setFilteredVendors] = useState([]); - const [vendorsData, setVendorsData] = useState([]); + const [filteredVendors, setFilteredVendors] = useState([]); + const [vendorsData, setVendorsData] = useState([]); const [isLoadingVendors, setIsLoadingVendors] = useState(false); const [createVendor] = useMutation(createVendorMutation); @@ -227,12 +210,8 @@ function ListVendorContent({ const loadVendorsData = async () => { try { setIsLoadingVendors(true); - const response = await fetch("/data/vendors/vendors.json"); - if (!response.ok) { - throw new Error("Failed to load vendors data"); - } - const data = await response.json(); - setVendorsData(data); + const { default: vendors } = await import("@probo/vendors"); + setVendorsData(vendors); } catch (error) { console.error("Error loading vendors data:", error); toast({ @@ -265,7 +244,7 @@ function ListVendorContent({ vendorsConnection.vendors.edges.map((edge) => edge.node) ?? []; const pageInfo = vendorsConnection.vendors.pageInfo; - const fuse = new Fuse(vendorsData, { + const fuse = new Fuse(vendorsData, { keys: ["name"], threshold: 0.3, }); diff --git a/package-lock.json b/package-lock.json index 20e67e61e..14ad80ebf 100644 --- a/package-lock.json +++ b/package-lock.json @@ -19,6 +19,7 @@ "version": "0.0.1", "dependencies": { "@probo/react-lazy": "^0.1.0", + "@probo/vendors": "^0.0.1", "@radix-ui/colors": "^3.0.0", "@radix-ui/react-avatar": "^1.1.3", "@radix-ui/react-checkbox": "^1.0.4", @@ -2525,6 +2526,10 @@ "resolved": "packages/tsconfig", "link": true }, + "node_modules/@probo/vendors": { + "resolved": "packages/vendors", + "link": true + }, "node_modules/@radix-ui/colors": { "version": "3.0.0", "resolved": "https://registry.npmjs.org/@radix-ui/colors/-/colors-3.0.0.tgz", @@ -10100,6 +10105,11 @@ "name": "@probo/tsconfig", "version": "0.0.1", "license": "MIT" + }, + "packages/vendors": { + "name": "@probo/vendors", + "version": "0.0.1", + "license": "CC BY-SA 4.0" } } } diff --git a/packages/tsconfig/base.json b/packages/tsconfig/base.json index 5044de387..b67a4220c 100644 --- a/packages/tsconfig/base.json +++ b/packages/tsconfig/base.json @@ -9,7 +9,7 @@ "forceConsistentCasingInFileNames": true, "inlineSources": false, "isolatedModules": true, - "moduleResolution": "node", + "moduleResolution": "bundler", "noUnusedLocals": false, "noUnusedParameters": false, "preserveWatchOutput": true, diff --git a/apps/console/public/data/vendors/LICENSE.md b/packages/vendors/LICENSE.md similarity index 75% rename from apps/console/public/data/vendors/LICENSE.md rename to packages/vendors/LICENSE.md index b654718fd..feea9ea6e 100644 --- a/apps/console/public/data/vendors/LICENSE.md +++ b/packages/vendors/LICENSE.md @@ -1,6 +1,6 @@ -# Vendors Data +# Vendors -The [vendors.json](vendors.json) file contains data about various vendors and their security certifications. This data is licensed under the Creative Commons Attribution-ShareAlike 4.0 International (CC BY-SA 4.0) license. +The [vendors.json](vendors.json) file and derived files contains data about various vendors and their security certifications. This data is licensed under the Creative Commons Attribution-ShareAlike 4.0 International (CC BY-SA 4.0) license. ## License Requirements diff --git a/packages/vendors/README.md b/packages/vendors/README.md new file mode 100644 index 000000000..748dad590 --- /dev/null +++ b/packages/vendors/README.md @@ -0,0 +1,37 @@ +# Vendors library + +A curated collection of software vendor information for use in vendor management and compliance activities. + +## Overview + +This package provides a structured dataset of software vendors and service providers with comprehensive metadata including: + +- Basic vendor information (name, website, description) +- Legal documentation URLs (privacy policy, terms of service, etc.) +- Compliance certifications +- Security information + +## Data Structure + +Each vendor entry follows the structure defined in `data.d.ts`, including fields for: + +- `name`: Display name of the vendor +- `legalName`: Legal business name +- `websiteUrl`: Vendor's website +- `privacyPolicyUrl`: URL to privacy policy +- `termsOfServiceUrl`: URL to terms of service +- And many more compliance-related URLs and metadata + +See `data.d.ts` for the complete type definition. + +### Building the Markdown Documentation + +To generate the VENDORS.md documentation file from the data: + +```bash +npm run build:md +``` + +## License + +CC BY-SA 4.0 - See LICENSE.md for details. diff --git a/packages/vendors/VENDORS.md b/packages/vendors/VENDORS.md new file mode 100644 index 000000000..b0a4907f8 --- /dev/null +++ b/packages/vendors/VENDORS.md @@ -0,0 +1,3333 @@ +# Vendors + +## Slack + +Slack is a team communication platform that allows users to send messages, files, and images to each other. + +**Legal Name:** Slack Technologies, Inc. + +**Headquarters:** San Francisco, 50 Fremont Street, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://slack.com) | +| Privacy Policy | [Link](https://slack.com/intl/en-gb/trust/privacy/privacy-policy) | +| Terms of Service | [Link](https://slack.com/intl/en-gb/main-services-agreement) | +| Service Level Agreement | [Link](https://slack.com/intl/en-gb/terms/service-level-agreement) | +| Security Page | [Link](https://slack.com/intl/en-gb/trust/security) | +| Status Page | [Link](https://slack-status.com/) | + +**Category:** Communication + +### Certifications + +- ISO/IEC 27001:2022 +- ISO/IEC 27017:2015 +- ISO/IEC 27018:2019 +- SOC2 Type 2 +- C5 +- GDPR + +--- + +## Zoom + +Zoom is a video communication platform that allows users to send messages, files, and images to each other. + +**Legal Name:** Zoom Video Communications, Inc. + +**Headquarters:** 950 Page Mill Rd, Palo Alto, CA 94306 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://zoom.us) | +| Privacy Policy | [Link](https://zoom.us/privacy) | +| Service Level Agreement | [Link](https://explore.zoom.us/en/premier-support-terms/) | +| Security Page | [Link](https://zoom.us/trust/security) | +| Status Page | [Link](https://status.zoom.us/) | + +**Category:** Communication + +### Certifications + +- ISO/IEC 27001:2022 +- ISO/IEC 27017:2015 +- ISO/IEC 27018:2019 +- ISO/IEC 27701:2019 +- SOC2 Type 2 +- SOC2 HITRUST +- CSTAR LEVEL 2 +- FedRAMP +- StateRAMP +- CJIS +- UK Cyber Essentials Plus +- iRAP +- ENS +- BSI C5 +- gpaNRW +- ISMAP +- ETDA +- PCI DSS +- GDPR + +--- + +## Github + +Github is a code hosting platform for version control and collaboration. + +**Legal Name:** GitHub, Inc. + +**Headquarters:** 88 Colin P Kelly Jr St, San Francisco, CA 94103 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://github.com) | +| Privacy Policy | [Link](https://github.com/site/privacy) | +| Service Level Agreement | [Link](https://github.com/site/terms) | +| Security Page | [Link](https://docs.github.com/en/code-security/security-overview/about-security-overview) | +| Status Page | [Link](https://www.githubstatus.com/) | +| Subprocessors List | [Link](https://docs.github.com/en/site-policy/privacy-policies/github-subprocessors) | + +**Category:** Code Hosting + +### Certifications + +- SOC 1 Type 2 +- SOC 2 Type 2 +- CSA CAIQ Level 1 +- ISO/IEC 27001:2013 +- CSA STAR Level 2 +- GDPR + +--- + +## Stripe + +Online payment processing platform that enables businesses to accept and manage digital payments, supporting various payment methods and currencies with integrated fraud protection and compliance features + +**Legal Name:** Stripe, Inc. + +**Headquarters:** 101 Townsend St, San Francisco, CA 94103 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://stripe.com) | +| Privacy Policy | [Link](https://stripe.com/privacy) | +| Service Level Agreement | [Link](https://stripe.com/legal/ssa) | +| Security Page | [Link](https://stripe.com/security) | +| Status Page | [Link](https://status.stripe.com/) | +| Data Processing Agreement | [Link](https://stripe.com/legal/dpa) | + +**Category:** Payment Processing + +### Certifications + +- PCI DSS v4.0 +- SOC 2 Type 2 +- SOC 1 Type 2 +- SOC 3 +- EMVCo Level 1 +- EMVCo Level 2 +- CBPR +- PRP +- EU-U.S. DPF +- EU-U.S. DPF +- GDPR + +--- + +## Cloudflare + +Cloudflare is a cloud computing company that provides a range of services, including web hosting, domain name registration, and cloud storage. + +**Legal Name:** Cloudflare, Inc. + +**Headquarters:** 101 Townsend St, San Francisco, CA 94103 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://cloudflare.com) | +| Privacy Policy | [Link](https://cloudflare.com/privacy) | +| Service Level Agreement | [Link](https://www.cloudflare.com/en-gb/business-sla) | +| Security Page | [Link](https://www.cloudflare.com/en-gb/security) | +| Status Page | [Link](https://www.cloudflarestatus.com/) | + +**Category:** Web Hosting + +### Certifications + +- ISO/IEC 27001:2013 +- ISO/IEC 27701:2019 +- ISO/IEC 27018:2019 +- FedRAMP +- SOC 2 Type 2 +- PCI DSS 4.0 +- Global CBPR +- Global PRP +- EU Cloud Code of Conduct +- Cyber Essentials +- C5:2020 +- ENS +- BSI Qualification +- WCAG 2.1 AA and Section 508 +- APPI +- LGPD +- DPDP +- GDPR +- PDPA +- PIPA +- DORA +- CCPA +- CPRA + +--- + +## Sentry + +Sentry is a cloud-based platform for monitoring and analyzing application performance and user behavior. + +**Legal Name:** Sentry, Inc. + +**Headquarters:** 1 Market St, San Francisco, CA 94105 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://sentry.io) | +| Privacy Policy | [Link](https://sentry.io/privacy) | +| Security Page | [Link](https://sentry.io/security) | +| Status Page | [Link](https://status.sentry.io/) | + +**Category:** Monitoring + +### Certifications + +- ISO/IEC 27001:2013 +- SOC2 Type 2 + +--- + +## Datadog + +Datadog is a cloud-based platform for monitoring and analyzing application performance and user behavior. + +**Legal Name:** Datadog, Inc. + +**Headquarters:** 1 Market St, San Francisco, CA 94105 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://datadog.com) | +| Privacy Policy | [Link](https://datadog.com/privacy) | +| Service Level Agreement | [Link](https://datadog.com/terms) | +| Security Page | [Link](https://datadog.com/security) | +| Trust Page | [Link](https://datadog.com/trust) | +| Status Page | [Link](https://status.datadoghq.com/) | + +**Category:** Monitoring + +### Certifications + +- CCPA +- CSA STAR +- DORA +- EU-US DPF +- FedRAMP +- GDPR +- HIPAA +- ISO/IEC 27001:2022 +- ISO/IEC 27017:2015 +- GDPR + +--- + +## Vercel + +Vercel is a cloud-based platform for monitoring and analyzing application performance and user behavior. + +**Legal Name:** Vercel, Inc. + +**Headquarters:** 1 Market St, San Francisco, CA 94105 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://vercel.com) | +| Privacy Policy | [Link](https://vercel.com/legal/privacy-policy) | +| Service Level Agreement | [Link](https://vercel.com/legal/sla) | +| Security Page | [Link](https://vercel.com/security) | +| Trust Page | [Link](https://security.vercel.com/) | +| Status Page | [Link](https://status.vercel.com/) | +| Data Processing Agreement | [Link](https://vercel.com/legal/dpa) | + +**Category:** Web Hosting + +### Certifications + +- ISO/IEC 27001:2013 +- SOC2 Type 2 +- GDPR +- PCI DSS +- HIPAA +- DPF +- CCPA +- PIPEDA + +--- + +## Sendgrid + +Cloud-based email delivery platform that provides transactional and marketing email services, offering reliable message delivery, analytics, and automation features for business communications. + +**Legal Name:** SendGrid, Inc. + +**Headquarters:** 1801 California Street, Suite 500, Denver, CO 80202 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://sendgrid.com) | +| Privacy Policy | [Link](https://www.twilio.com/en-us/legal/privacy) | +| Service Level Agreement | [Link](https://sendgrid.com/terms) | +| Security Page | [Link](https://sendgrid.com/en-us/policies/security) | +| Trust Page | [Link](https://security.twilio.com/) | +| Status Page | [Link](https://status.sendgrid.com/) | +| Data Processing Agreement | [Link](https://sendgrid.com/dpa) | + +**Category:** Email Marketing + +### Certifications + +- CCPA +- CPRA +- GDPR +- HIPAA +- ISO/IEC 27001:2013 +- ISO/IEC 27017:2015 +- ISO/IEC 27018:2019 +- SOC2 Type 2 +- PCI DSS + +--- + +## Figma + +Cloud-based design and prototyping platform that enables collaborative interface design, wireframing, and mockup creation with real-time editing capabilities for teams. + +**Legal Name:** Figma, Inc. + +**Headquarters:** 760 Market St Floor 10, San Francisco, CA 94102 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://figma.com) | +| Privacy Policy | [Link](https://www.figma.com/legal/privacy/) | +| Security Page | [Link](https://www.figma.com/security) | +| Trust Page | [Link](https://compliance.figma.com/) | +| Status Page | [Link](https://status.figma.com/) | +| Service Software Agreement | [Link](https://www.figma.com/ssa/) | + +**Category:** Design + +### Certifications + +- SOC 2 Type 2 +- ISO/IEC 27001:2013 +- ISO/IEC 27001:2022 +- GDPR +- ISO/IEC 27017:2015 +- ISO/IEC 27018:2019 +- SOC 3 +- CCPA +- CSA +- SIG +- EU Cloud Code of Conduct +- TISAX +- VPAT + +--- + +## Notion + +Cloud-based workspace and collaboration platform that offers document management, project management, and team communication features, allowing users to create, edit, and share content in a centralized environment. + +**Legal Name:** Notion Labs, Inc. + +**Headquarters:** 2300 Harrison St, San Francisco, CA 94110 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://notion.so) | +| Privacy Policy | [Link](https://www.notion.so/notion/Privacy-Policy-3468d120cf614d4c9014c09f6adc9091) | +| Service Level Agreement | [Link](https://www.notion.so/notion/Service-Level-Terms-6f805fa1d4ca4463b805e2832ae8ff0d) | +| Status Page | [Link](https://status.notion.so) | +| Business Associate Agreement | [Link](https://www.notion.so/notion/Business-Associate-Agreement-909d9f4ccca041b1a23d0fe6e56fa111) | +| Subprocessors List | [Link](https://www.notion.so/notion/Notion-s-List-of-Subprocessors-268fa5bcfa0f46b6bc29436b21676734) | + +**Category:** Project Management + +### Certifications + +- SOC 2 Type 2 +- ISO/IEC 27001:2022 +- ISO/IEC 27701:2019 +- ISO/IEC 27017:2015 +- ISO/IEC 27018:2019 +- HIPAA +- BSI C5 +- GDPR +- CCPA + +--- + +## Mintlify + +Mintlify is a cloud-based documentation platform that enables teams to create, manage, and share documentation for their projects. + +**Legal Name:** Mintlify, Inc. + +**Headquarters:** 108 Ferris Place, Ithaca, NY 14850 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://mintlify.com) | +| Privacy Policy | [Link](https://app.termly.io/policy-viewer/policy.html?policyUUID=95d79e73-9d6f-4e0a-8abd-2a608e8f5242) | +| Terms of Service | [Link](https://mintlify.com/legal/terms) | +| Trust Page | [Link](https://security.mintlify.com/) | +| Status Page | [Link](https://status.mintlify.com/) | +| Subprocessors List | [Link](https://security.mintlify.com) | + +**Category:** Documentation + +### Certifications + +- SOC 2 Type 1 + +--- + +## Supabase + +Open-source Firebase alternative providing a backend-as-a-service platform with PostgreSQL database, authentication, storage, and API functionality for application development. + +**Legal Name:** Supabase, Inc. + +**Headquarters:** 3500 S Dupont Hwy, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://supabase.com) | +| Privacy Policy | [Link](https://supabase.com/privacy) | +| Terms of Service | [Link](https://supabase.com/terms) | +| Service Level Agreement | [Link](https://supabase.com/sla) | +| Security Page | [Link](https://supabase.com/security) | +| Trust Page | [Link](https://security.supabase.com/) | +| Status Page | [Link](https://status.supabase.com/) | +| Data Processing Agreement | [Link](https://supabase.com/legal/dpa) | + +**Category:** Database + +### Certifications + +- SOC2 Type 2 +- HIPAA +- GDPR + +--- + +## Segment + +Segment is a cloud-based customer data platform that enables businesses to collect, clean, and analyze customer data from across their systems. + +**Legal Name:** Segment, Inc. + +**Headquarters:** 100 California St #700, San Francisco, CA 94111 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://segment.com) | +| Privacy Policy | [Link](https://www.twilio.com/en-us/legal/privacy) | +| Terms of Service | [Link](https://www.twilio.com/en-us/legal/tos) | +| Service Level Agreement | [Link](https://www.twilio.com/en-us/legal/service-level-agreement/segment-data-ingestion-api) | +| Security Page | [Link](https://www.twilio.com/en-us/legal/security) | +| Trust Page | [Link](https://security.segment.com/) | +| Status Page | [Link](https://status.segment.com/) | +| Data Processing Agreement | [Link](https://www.twilio.com/en-us/legal/data-protection-addendum) | +| Subprocessors List | [Link](https://www.twilio.com/en-us/legal/sub-processors) | + +**Category:** Customer Data Platform + +### Certifications + +- SOC 2 Type 2 +- ISO/IEC 27001:2022 +- GDPR +- ISO/IEC 27018:2019 +- ISO/IEC 27017:2015 +- CCPA +- HIPAA + +--- + +## Auth0 + +Auth0 is a cloud-based identity and access management platform that enables businesses to secure their applications and data. + +**Legal Name:** Auth0, Inc. + +**Headquarters:** 10900 NE 8th St. Bellevue, WA 98004, US + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://auth0.com) | +| Privacy Policy | [Link](https://www.okta.com/privacy-policy/) | +| Terms of Service | [Link](https://www.okta.com/terms-of-service/) | +| Security Page | [Link](https://www.okta.com/security-center/) | +| Trust Page | [Link](https://www.okta.com/trust-center/) | +| Status Page | [Link](https://status.auth0.com/) | +| Data Processing Agreement | [Link](https://www.okta.com/trustandcompliance/#data-processing-addendum) | + +**Category:** Identity and Access Management + +### Certifications + +- SOC 2 Type 2 +- ISO/IEC 27001:2022 +- GDPR +- CSA STAR +- ISO/IEC 27018:2019 +- CCPA +- HIPAA +- HITECH +- PCI DSS +- PSD2 +- FAPI + +--- + +## Heroku + +Heroku is a cloud-based platform for building, deploying, and scaling applications. + +**Legal Name:** Heroku, Inc. + +**Headquarters:** 415 Mission Street Suite 300 San Francisco, CA 94105 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://heroku.com) | +| Privacy Policy | [Link](https://www.salesforce.com/company/legal/privacy/) | +| Terms of Service | [Link](https://www.salesforce.com/company/legal/sfdc-website-terms-of-service/) | +| Service Level Agreement | [Link](https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/Salesforce_MSA.pdf) | +| Security Page | [Link](https://www.heroku.com/policy/security) | +| Trust Page | [Link](https://www.heroku.com/compliance) | +| Status Page | [Link](https://status.heroku.com/) | +| Data Processing Agreement | [Link](https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/Agreements/data-processing-addendum.pdf) | +| Subprocessors List | [Link](https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/misc/salesforce-infrastructure-and-subprocessors.pdf) | + +**Category:** Cloud Platform + +### Certifications + +- PCI-DSS +- ISO/IEC 27001:2013 +- ISO/IEC 27017:2015 +- ISO/IEC 27018:2019 +- SOC 2 Type 2 +- SOC 1 Type 2 +- SOC 3 +- HIPAA + +--- + +## Linear + +Linear is a cloud-based project management platform that enables teams to manage their projects and tasks. + +**Legal Name:** Linear, Inc. + +**Headquarters:** San Francisco, California 94103, US + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://linear.app) | +| Privacy Policy | [Link](https://linear.app/privacy) | +| Terms of Service | [Link](https://linear.app/terms) | +| Security Page | [Link](https://linear.app/security) | +| Trust Page | [Link](https://trustcenter.linear.app/) | +| Status Page | [Link](https://linearstatus.com/) | +| Data Processing Agreement | [Link](https://linear.app/dpa) | +| Subprocessors List | [Link](https://linear.app/dpa) | + +**Category:** Project Management + +### Certifications + +- SOC 2 Type 2 +- HIPAA +- GDPR + +--- + +## Hubspot + +Hubspot is a cloud-based marketing and sales platform that enables businesses to manage their marketing and sales activities. + +**Legal Name:** Hubspot, Inc. + +**Headquarters:** 2 Canal Park Cambridge, MA 02141. United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://hubspot.com) | +| Privacy Policy | [Link](https://legal.hubspot.com/privacy-policy) | +| Terms of Service | [Link](https://legal.hubspot.com/terms-of-service) | +| Security Page | [Link](https://legal.hubspot.com/security/) | +| Status Page | [Link](https://status.hubspot.com/) | +| Data Processing Agreement | [Link](https://legal.hubspot.com/dpa) | +| Subprocessors List | [Link](https://legal.hubspot.com/sub-processors-page) | + +**Category:** Marketing and Sales + +### Certifications + +- GDPR +- SOC 3 +- SOC 2 Type 2 + +--- + +## Langfuse + +Langfuse is a cloud-based language model platform that enables businesses to build, test, and deploy language models. + +**Legal Name:** Langfuse, Inc. + +**Headquarters:** Berlin, Germany + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://langfuse.com) | +| Privacy Policy | [Link](https://langfuse.com/privacy) | +| Terms of Service | [Link](https://langfuse.com/terms) | +| Security Page | [Link](https://langfuse.com/docs/data-security-privacy) | +| Status Page | [Link](https://status.langfuse.com/) | +| Data Processing Agreement | [Link](https://static.langfuse.com/legal/2025-02-17-Public-Langfuse%20DPA.docx.pdf) | + +**Category:** Language Model + +### Certifications + +- ISO/IEC 27001:2022 +- SOC 2 Type 2 +- GDPR +- HIPAA + +--- + +## Google Workspace + +Google Workspace is a cloud-based productivity suite that enables businesses to manage their email, calendar, and documents. + +**Legal Name:** Google LLC + +**Headquarters:** 1600 Amphitheatre Parkway, Mountain View, CA 94043, US + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://workspace.google.com) | +| Privacy Policy | [Link](https://policies.google.com/privacy) | +| Terms of Service | [Link](https://policies.google.com/terms) | +| Security Page | [Link](https://workspace.google.com/security/) | +| Trust Page | [Link](https://cloud.google.com/compliance) | +| Status Page | [Link](https://www.google.com/appsstatus/dashboard/) | +| Data Processing Agreement | [Link](https://workspace.google.com/terms/09242021/dpa_terms/) | +| Subprocessors List | [Link](https://workspace.google.com/terms/subprocessors/) | + +**Category:** Productivity + +### Certifications + +- ISO/IEC 27001:2022 +- ISO/IEC 27017:2015 +- ISO/IEC 27018:2019 +- ISO/IEC 27701:2019 +- SOC 2 Type 2 +- SOC 3 +- GDPR +- FedRAMP +- HIPAA +- BSI C5 +- MTCS + +--- + +## Algolia + +Algolia is a search-as-a-service platform that enables businesses to deliver fast and relevant search and discovery experiences across websites and applications. + +**Legal Name:** Algolia Inc. + +**Headquarters:** 301 Howard St Suite 300, San Francisco, CA 94105 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.algolia.com) | +| Privacy Policy | [Link](https://www.algolia.com/policies/privacy) | +| Terms of Service | [Link](https://www.algolia.com/policies/terms) | +| Service Level Agreement | [Link](https://www.algolia.com/policies/sla) | +| Security Page | [Link](https://www.algolia.com/security) | +| Trust Page | [Link](https://www.algolia.com/trust-center) | +| Status Page | [Link](https://status.algolia.com) | +| Data Processing Agreement | [Link](https://www.algolia.com/policies/data-processing) | +| Subprocessors List | [Link](https://www.algolia.com/policies/infrastructure-and-sub-processors) | + +**Category:** Search-as-a-Service + +### Certifications + +- ISO/IEC 27001:2022 +- ISO/IEC 27017:2015 +- SOC 2 Type 2 +- SOC 3 +- BSI C5 +- HIPAA +- GDPR +- CCPA +- TRUSTe Certified Privacy + +--- + +## PostHog + +Open-source product analytics platform that enables teams to understand user behavior and optimize product performance. + +**Legal Name:** PostHog, Inc. + +**Headquarters:** 2261 Market St #4008, San Francisco HQ + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://posthog.com) | +| Privacy Policy | [Link](https://posthog.com/privacy) | +| Service Level Agreement | [Link](https://posthog.com/terms) | +| Security Page | [Link](https://posthog.com/handbook/company/security) | +| Status Page | [Link](https://status.posthog.com/) | +| Data Processing Agreement | [Link](https://posthog.com/dpa) | +| Subprocessors List | [Link](https://posthog.com/dpa) | + +**Category:** Product Analytics + +### Certifications + +- SOC 2 Type 2 +- GDPR +- CCPA + +--- + +## Airtable + +Airtable is a no-code platform that combines the simplicity of a spreadsheet with the complexity of a database, enabling users to build custom applications without writing code. + +**Legal Name:** Formagrid, Inc. + +**Headquarters:** 1 Front St, San Francisco, CA 94111 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://airtable.com) | +| Privacy Policy | [Link](https://www.airtable.com/privacy) | +| Terms of Service | [Link](https://www.airtable.com/company/tos) | +| Service Level Agreement | [Link](https://www.airtable.com/company/sla) | +| Security Page | [Link](https://assets.ctfassets.net/wl95ljfippl8/1j9UbmmoSaoMNusVps3ib3/9e00936f3891c84c75ccd6a87cdb992c/Security_Whitepaper_Final_20210927.pdf) | +| Trust Page | [Link](https://www.airtable.com/company/trust-and-security) | +| Status Page | [Link](https://status.airtable.com/) | +| Data Processing Agreement | [Link](https://www.airtable.com/company/dpa) | +| Subprocessors List | [Link](https://www.airtable.com/company/subprocessors) | + +**Category:** No-Code/Low-Code Platform + +### Certifications + +- SOC 2 Type 2 +- ISO/IEC 27001:2022 +- ISO/IEC 27701:2019 +- TX-RAMP Level 2 +- GDPR +- CPRA +- CCPA +- HIPAA + +--- + +## OpenAI + +OpenAI is an AI research and deployment company dedicated to ensuring that artificial general intelligence benefits all of humanity. + +**Legal Name:** OpenAI, L.L.C. + +**Headquarters:** 3180 18th St, San Francisco, CA 94110 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://openai.com) | +| Privacy Policy | [Link](https://openai.com/policies/privacy-policy/) | +| Terms of Service | [Link](https://openai.com/policies/terms-of-use/) | +| Security Page | [Link](https://openai.com/security-and-privacy/) | +| Trust Page | [Link](https://trust.openai.com/) | +| Status Page | [Link](https://status.openai.com/) | +| Data Processing Agreement | [Link](https://openai.com/policies/data-processing-addendum/) | +| Business Associate Agreement | [Link](https://openai.com/policies/business-terms/) | +| Subprocessors List | [Link](https://openai.com/policies/sub-processor-list/) | + +**Category:** Artificial Intelligence Research and Deployment + +### Certifications + +- SOC 2 Type 2 +- CSA STAR Level 1 +- GDPR +- CCPA +- SOC 3 +- TX-RAMP + +--- + +## Anthropic + +Anthropic is an AI safety and research company developing reliable, interpretable, and steerable AI systems, including the Claude family of large language models. + +**Legal Name:** Anthropic PBC + +**Headquarters:** 548 Market St, San Francisco, CA 94104 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.anthropic.com) | +| Privacy Policy | [Link](https://www.anthropic.com/legal/privacy) | +| Terms of Service | [Link](https://www.anthropic.com/legal/commercial-terms) | +| Security Page | [Link](https://trust.anthropic.com) | +| Trust Page | [Link](https://trust.anthropic.com) | +| Status Page | [Link](https://status.anthropic.com) | +| Data Processing Agreement | [Link](https://assets-global.website-files.com/6548404a216c2e42eb79648b/65680354f8f4425cc8a8110c_Toothless-Anthropic_DPA_Sep-22-2023.pdf) | +| Subprocessors List | [Link](https://trust.anthropic.com/subprocessors) | + +**Category:** Artificial Intelligence / AI Safety + +### Certifications + +- SOC 2 Type 1 +- SOC 2 Type 2 + +--- + +## Gusto + +Gusto is a cloud-based platform that provides payroll, benefits, and human resource management software for businesses. It handles payments to employees and contractors and manages compliance with tax, labor, and immigration laws. + +**Legal Name:** Gusto, Inc. + +**Headquarters:** 525 20th St, San Francisco, CA 94107 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://gusto.com) | +| Privacy Policy | [Link](https://gusto.com/about/privacy) | +| Terms of Service | [Link](https://gusto.com/about/terms) | +| Security Page | [Link](https://gusto.com/security) | +| Trust Page | [Link](https://trust.gusto.com/) | +| Status Page | [Link](https://status.gusto.com/) | +| Business Associate Agreement | [Link](https://support.gusto.com/article/152166121100000/The-Health-Insurance-Portability-and-Accountability-Act-of-1996-HIPAA) | + +**Category:** HR / Payroll + +### Certifications + +- SOC 1 Type 2 +- SOC 2 Type 2 +- HIPAA + +--- + +## Amazon Web Services (AWS) + +Amazon Web Services (AWS) is the world's most comprehensive and broadly adopted cloud platform, offering over 200 fully featured services from data centers globally. Millions of customers—including startups, enterprises, and government agencies—use AWS to lower costs, become more agile, and innovate faster. + +**Legal Name:** Amazon Web Services, Inc. + +**Headquarters:** 410 Terry Avenue North, Seattle, WA + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://aws.amazon.com) | +| Privacy Policy | [Link](https://aws.amazon.com/privacy/) | +| Terms of Service | [Link](https://aws.amazon.com/service-terms/) | +| Service Level Agreement | [Link](https://aws.amazon.com/legal/service-level-agreements/) | +| Security Page | [Link](https://aws.amazon.com/security/) | +| Trust Page | [Link](https://aws.amazon.com/trust-center/) | +| Status Page | [Link](https://status.aws.amazon.com/) | +| Data Processing Agreement | [Link](https://docs.aws.amazon.com/whitepapers/latest/navigating-gdpr-compliance/aws-data-processing-addendum-dpa.html) | +| Business Associate Agreement | [Link](https://aws.amazon.com/compliance/hipaa-compliance/) | +| Subprocessors List | [Link](https://aws.amazon.com/compliance/sub-processors/) | + +**Category:** Cloud Infrastructure + +### Certifications + +- CSA +- ProcessUnity +- CyberVadis +- EC +- ISO 9001 +- ISO 14001 +- ISO 20000 +- ISO 22301 +- ISO 27001 +- ISO 27017 +- ISO 27701 +- ISO 27018 +- ISO 42001 +- ISO 50001 +- PCI DSS Level 1 +- SOC 1 Type 2 +- SOC 2 Type 2 +- SOC 3 +- PBHVA +- CCCS Medium +- CJIS +- CMMC +- DFARS +- DoD SRG +- FedRAMP +- FERPA +- FIPS +- FISMA +- GxP +- HIPAA +- HITRUST CSF +- ITAR +- MPAA +- NIST +- PIPEDA +- SEC Rule 17a-4(f) +- VPAT / Section 508 +- CSAP +- FinTech +- FISC +- IRAP +- ISMAP +- ISO 20000 +- K-ISMS +- Medical Information Guidelines +- MeitY +- MTCS Tier 3 +- NISC +- OSPAR +- SNI 27001 +- BIO Thema-uitwerking Clouddiensten +- C5 +- Data Protection Code of Conduct +- CPSTIC +- Cyber Essentials Plus +- DESC CSP +- ENS High +- FINMA ISAE 3000 Type 2 Report +- G-Cloud +- GNS +- GSMA +- HDS +- IAR +- NHS DSPT +- PASF +- Pinakes +- PiTuKri ISAE 3000 Type 2 +- TiSAX + +--- + +## Calendly + +Online scheduling platform that automates appointment booking and meeting management for businesses and individuals. + +**Legal Name:** Calendly, LLC + +**Headquarters:** 271 17th St NW. 10th Floor. Atlanta, Georgia 30363, US + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://calendly.com) | +| Privacy Policy | [Link](https://calendly.com/legal/privacy-notice) | +| Terms of Service | [Link](https://calendly.com/legal/customer-terms-conditions) | +| Security Page | [Link](https://calendly.com/security) | +| Status Page | [Link](https://status.calendly.com) | +| Data Processing Agreement | [Link](https://calendly.com/legal/data-processing-addendum) | +| Subprocessors List | [Link](https://help.calendly.com/hc/en-us/articles/360047345493-Calendly-sub-processors-GDPR-CCPA) | + +**Category:** Scheduling/Appointment Management + +### Certifications + +- SOC 2 Type 2 +- SOC 3 +- GDPR +- PCI DSS +- CSA STAR +- CCPA +- ISO/IEC 27001:2013 + +--- + +## jsDelivr + +jsDelivr is a free, open-source Content Delivery Network (CDN) for open-source files, providing fast and reliable delivery of JavaScript libraries and other web assets. + +**Legal Name:** Volentio JSD Limited + +**Headquarters:** Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.jsdelivr.com) | +| Privacy Policy | [Link](https://www.jsdelivr.com/terms/privacy-policy) | +| Terms of Service | [Link](https://www.jsdelivr.com/terms) | +| Security Page | [Link](https://www.jsdelivr.com/documents/security-policy.pdf) | +| Status Page | [Link](https://status.jsdelivr.com/) | +| Data Processing Agreement | [Link](https://www.jsdelivr.com/documents/data-processing-agreement.pdf) | +| Subprocessors List | [Link](https://www.jsdelivr.com/terms/sub-processors) | + +**Category:** Content Delivery Network (CDN) + +### Certifications + +- GDPR +- CCPA + +--- + +## npm + +npm is the world's largest software registry, providing a platform for JavaScript developers to share and manage packages for Node.js and frontend projects. + +**Legal Name:** npm, Inc. + +**Headquarters:** 1999 Harrison St, Suite 1150, Oakland, CA 94612, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.npmjs.com) | +| Privacy Policy | [Link](https://www.npmjs.com/policies/privacy) | +| Terms of Service | [Link](https://www.npmjs.com/policies/terms) | +| Security Page | [Link](https://docs.npmjs.com/policies/security/) | +| Status Page | [Link](https://status.npmjs.org/) | + +**Category:** Package Management / Code Hosting + +### Certifications + +- GDPR +- CCPA + +--- + +## Clerk + +Clerk provides a comprehensive suite of embeddable UIs, flexible APIs, and admin dashboards to authenticate and manage users. + +**Legal Name:** Clerk, Inc. + +**Headquarters:** 660 King Street, Unit 345, San Francisco, CA 94107, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://clerk.com) | +| Privacy Policy | [Link](https://clerk.com/legal/privacy) | +| Terms of Service | [Link](https://clerk.com/legal/terms) | +| Security Page | [Link](https://clerk.com/docs/security/overview) | +| Status Page | [Link](https://status.clerk.com/) | +| Data Processing Agreement | [Link](https://clerk.com/legal/dpa) | +| Subprocessors List | [Link](https://clerk.com/legal/subprocessors) | + +**Category:** Authentication and User Management + +### Certifications + +- SOC 2 Type 2 +- HIPAA +- GDPR +- CCPA + +--- + +## Plausible Analytics + +Open-source, privacy-focused web analytics platform that provides simple and lightweight tracking without cookies. + +**Legal Name:** Plausible Insights OÜ + +**Headquarters:** Västriku tn 2, 50403, Tartu, Estonia + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://plausible.io/) | +| Privacy Policy | [Link](https://plausible.io/privacy) | +| Terms of Service | [Link](https://plausible.io/terms) | +| Security Page | [Link](https://plausible.io/security) | +| Status Page | [Link](https://status.plausible.io/) | +| Data Processing Agreement | [Link](https://plausible.io/dpa) | +| Subprocessors List | [Link](https://plausible.io/privacy) | + +**Category:** Platform and user analytics + +### Certifications + +- GDPR +- CCPA +- PECR + +--- + +## Latitude.sh + +Latitude.sh provides global bare metal cloud infrastructure, enabling developers to deploy and manage physical servers with low latency and high automation. + +**Legal Name:** Latitude.sh Ltda + +**Headquarters:** Rua Cubatão, 929, São Paulo, 04013-043, Brazil + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.latitude.sh) | +| Privacy Policy | [Link](https://www.latitude.sh/legal/privacy) | +| Terms of Service | [Link](https://www.latitude.sh/legal/terms) | +| Security Page | [Link](https://www.latitude.sh/legal/security) | +| Status Page | [Link](https://status.latitude.sh/) | +| Data Processing Agreement | [Link](https://www.latitude.sh/legal/dpa) | + +**Category:** Bare Metal Cloud Infrastructure + +### Certifications + +- CCPA + +--- + +## Together AI + +Together AI provides a full-stack cloud platform for developers to train, fine-tune, and deploy open-source generative AI models with high-performance infrastructure. + +**Legal Name:** Together Computer, Inc. + +**Headquarters:** 251 Rhode Island Street, Suite 205, San Francisco, CA 94103, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.together.ai) | +| Privacy Policy | [Link](https://www.together.ai/privacy) | +| Terms of Service | [Link](https://www.together.ai/terms-of-service) | +| Trust Page | [Link](https://trust.together.ai) | +| Status Page | [Link](https://status.together.ai/) | + +**Category:** AI Infrastructure / Model Hosting + +### Certifications + +- SOC 2 Type 1 +- HIPAA +- GDPR +- CCPA + +--- + +## Mercury + +Fintech company that provides banking services to early stage start-up companies. The company is not a bank, but works with banking service providers to provide bank accounts and other financial services. + +**Legal Name:** Mercury Technologies Inc. + +**Headquarters:** 660 Mission Street, San Francisco, CA 94103, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.mercury.com) | +| Privacy Policy | [Link](https://www.datocms-assets.com/115132/1741892788-v5-mercury-privacy-policy-2025-03-13.pdf) | +| Terms of Service | [Link](https://www.datocms-assets.com/115132/1741383503-v7-mercury-terms-of-use-2025-03-07.pdf) | +| Security Page | [Link](https://mercury.com/security) | +| Trust Page | [Link](https://trust.mercury.com/) | +| Status Page | [Link](https://status.mercury.com/) | + +**Category:** Banking Services + +### Certifications + +- SOC 2 Type 1 +- SOC 2 Type 2 +- PCI DSS + +--- + +## Signal + +Signal is a secure messaging app that provides end-to-end encryption for text, voice, and video communications. + +**Legal Name:** Signal Messenger LLC + +**Headquarters:** 650 Castro St 120 223Mountain View, CA 94041, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://signal.org) | +| Privacy Policy | [Link](https://signal.org/legal/#privacy-policy) | +| Terms of Service | [Link](https://signal.org/legal/#terms-of-service) | +| Security Page | [Link](https://signal.org/security) | +| Status Page | [Link](https://status.signal.org/) | + +**Category:** Messaging + +--- + +## monday.com + +monday.com is a work management platform that helps teams plan, track, and manage work. + +**Legal Name:** Monday.com Ltd. + +**Headquarters:** Tel Aviv, Israel + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://monday.com) | +| Privacy Policy | [Link](https://monday.com/l/privacy/privacy-policy) | +| Terms of Service | [Link](https://monday.com/l/legal/tos) | +| Security Page | [Link](https://monday.com/trustcenter/datasecure/) | +| Trust Page | [Link](https://monday.com/trustcenter) | +| Status Page | [Link](https://status.monday.com) | +| Data Processing Agreement | [Link](https://monday.com/l/privacy/dpa) | +| Business Associate Agreement | [Link](https://monday.com/l/privacy/hipaa-baa) | +| Subprocessors List | [Link](https://monday.com/l/privacy/sub-processors-subsidiaries-support) | + +**Category:** Work Management + +### Certifications + +- ISO/IEC 27001:2022 +- ISO/IEC 27018:2014 +- ISO/IEC 27017:2015 +- ISO/IEC 27032:2023 +- ISO/IEC 27701:2019 +- HIPAA +- GDPR +- CCPA +- SOC 1 Type 2 +- SOC 2 Type 2 +- SOC 3 +- TX RAMP +- CSA + +--- + +## Carta + +Carta is a financial technology company that provides a platform for managing employee equity compensation. + +**Legal Name:** eShares, Inc. + +**Headquarters:** 333 Bush Street, San Francisco, California 94104, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://carta.com) | +| Privacy Policy | [Link](https://carta.com/privacy/) | +| Terms of Service | [Link](https://carta.com/terms-of-service/) | +| Security Page | [Link](https://carta.com/security) | +| Trust Page | [Link](https://app.conveyor.com/profile/carta) | +| Data Processing Agreement | [Link](https://carta.com/legal/carta-europe/data-processor-agreement/) | +| Subprocessors List | [Link](https://carta.com/legal/carta-europe/data-processor-agreement/) | + +**Category:** Employee Equity Compensation + +### Certifications + +- SOC 1 Type 2 +- SOC 2 Type 2 +- ISO/IEC 27001:2022 +- GDPR +- CCPA + +--- + +## Apollo.io + +Apollo.io is an AI-powered sales intelligence and engagement platform that helps B2B teams find, contact, and close ideal buyers through a comprehensive database and automation tools. + +**Legal Name:** ZenLeads Inc. + +**Headquarters:** 440 N Barranca Ave #4750, Covina, CA 91723-1722, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.apollo.io/) | +| Privacy Policy | [Link](https://www.apollo.io/privacy-policy) | +| Terms of Service | [Link](https://www.apollo.io/terms) | +| Security Page | [Link](https://www.apollo.io/product/security) | +| Trust Page | [Link](https://trust.apollo.io/) | +| Status Page | [Link](https://status.apollo.io/) | +| Data Processing Agreement | [Link](https://www.apollo.io/dpa) | +| Subprocessors List | [Link](https://trust.apollo.io/) | + +**Category:** Sales Intelligence & Engagement + +### Certifications + +- ISO 27001 +- SOC 2 Type 2 +- GDPR +- CCPA +- EU-U.S. DPF +- PCI DSS v4.0.0 +- CPRA + +--- + +## Atlassian + +Atlassian provides collaboration and productivity software for teams, including products like Jira, Confluence, and Trello. + +**Legal Name:** Atlassian Corporation Plc + +**Headquarters:** Level 6, 341 George Street, Sydney, NSW 2000, Australia + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.atlassian.com) | +| Privacy Policy | [Link](https://www.atlassian.com/legal/privacy-policy) | +| Terms of Service | [Link](https://www.atlassian.com/legal/atlassian-customer-agreement) | +| Security Page | [Link](https://www.atlassian.com/trust/security/security-practices) | +| Trust Page | [Link](https://www.atlassian.com/trust) | +| Status Page | [Link](https://status.atlassian.com/) | +| Data Processing Agreement | [Link](https://www.atlassian.com/legal/data-processing-addendum) | +| Business Associate Agreement | [Link](https://www.atlassian.com/legal/business-associate-agreement) | +| Subprocessors List | [Link](https://www.atlassian.com/legal/sub-processors) | + +**Category:** Collaboration and Productivity Software + +### Certifications + +- HIPAA +- ISO/IEC 27001:2013 +- CSA STAR Level 1 +- FedRAMP +- GDPR +- CCPA +- SOC 2 +- PCI-DSS +- TISAX Level 2 +- EBA +- ENISA +- FINMA +- Good Clinical, Laboratory, and Manufacturing Practices (GxP) +- HECVAT +- HKMA +- Lei Geral de Proteção de Dados (LGPD) +- MAS +- NCSC +- nFADP +- Section 889 +- UKPRA +- VPAT +- WCAG 2.1 AA +- ACSC - Cloud Computing Security +- ACSC - Essential 8 Maturity Model +- Australia Privacy Act +- BaFin + +--- + +## Webflow + +Webflow is a no-code visual development platform that allows users to design, build, and launch responsive websites without writing code. + +**Legal Name:** Webflow, Inc. + +**Headquarters:** 398 11th Street, 2nd Floor, San Francisco, CA 94103, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://webflow.com) | +| Privacy Policy | [Link](https://webflow.com/legal/privacy) | +| Terms of Service | [Link](https://webflow.com/legal/terms) | +| Trust Page | [Link](https://trust.webflow.com/) | +| Status Page | [Link](https://status.webflow.com/) | +| Data Processing Agreement | [Link](https://webflow.com/legal/dpa) | +| Subprocessors List | [Link](https://uploads-ssl.webflow.com/5d80c03f1edd7bd68fcdb623/657c411c020d1ee5f047f6ab_20231207%20-%20List%20of%20approved%20Sub-processors.pdf) | + +**Category:** Website Builder / No-Code Platform + +### Certifications + +- PCI DSS v4.0 SAQ-D +- ISO/IEC 27001:2022 +- ISO/IEC 27018:2019 +- ISO/IEC 27017:2015 +- SOC 2 Type 2 + +--- + +## 1Password + +1Password is a secure password manager that helps individuals and businesses store and manage passwords, credentials, and sensitive information across devices. + +**Legal Name:** AgileBits Inc. + +**Headquarters:** 4711 Yonge Street, 10th Floor, Toronto, Ontario, M2N 6K8, Canada + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://1password.com) | +| Privacy Policy | [Link](https://1password.com/legal/privacy) | +| Terms of Service | [Link](https://1password.com/legal/terms-of-service) | +| Security Page | [Link](https://1password.com/security) | +| Status Page | [Link](https://status.1password.com/) | +| Data Processing Agreement | [Link](https://1passwordstatic.com/files/legal-center/1Password_Online_DPA_v202504.pdf) | +| Subprocessors List | [Link](https://1passwordstatic.com/files/legal-center/notice-of-updates-to-the-1password-subprocessor-list.pdf) | + +**Category:** Password Management + +### Certifications + +- SOC 2 Type 2 +- ISO/IEC 27001 +- ISO/IEC 27017 +- ISO/IEC 27018 +- ISO/IEC 27701 +- GDPR +- HIPAA +- DORA + +--- + +## Checkr + +Checkr provides AI-powered background check and screening services to help businesses make informed hiring decisions quickly and fairly. + +**Legal Name:** Checkr, Inc. + +**Headquarters:** 1 Montgomery St, Suite 2400, San Francisco, CA 94104, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://checkr.com) | +| Privacy Policy | [Link](https://checkr.com/privacy-policy) | +| Terms of Service | [Link](https://checkr.com/terms-of-service) | +| Security Page | [Link](https://checkr.com/trust-and-security) | +| Trust Page | [Link](https://security.checkr.com/) | +| Status Page | [Link](https://checkrstatus.com/) | +| Data Processing Agreement | [Link](https://checkr.com/legal/dpa) | +| Subprocessors List | [Link](https://checkr.com/sub-processor-list) | + +**Category:** Employment Screening + +### Certifications + +- SOC 2 Type 2 +- SOC 3 +- ISO 27001 +- GDPR +- CCPA +- CPRA +- PIPEDA +- Privacy Shield + +--- + +## Rippling + +Rippling is an all-in-one workforce management platform that unifies HR, IT, payroll, and finance operations into a single system. + +**Legal Name:** Rippling People Center, Inc. + +**Headquarters:** 430 California Street, 11th Floor, San Francisco, CA 94104, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.rippling.com) | +| Privacy Policy | [Link](https://app.rippling.com/legal/privacy) | +| Terms of Service | [Link](https://app.rippling.com/legal) | +| Security Page | [Link](https://www.rippling.com/security) | +| Data Processing Agreement | [Link](https://app.rippling.com/legal/dpa) | +| Subprocessors List | [Link](https://app.rippling.com/legal/subprocessors) | + +**Category:** Workforce Management + +### Certifications + +- SOC 1 Type 1 +- SOC 2 Type 2 +- ISO 27001 +- ISO 27018 +- CSA STAR Level 2 + +--- + +## Vouch + +Vouch is a digital-first insurance platform providing tailored coverage solutions for startups and high-growth companies. + +**Legal Name:** Vouch, Inc. + +**Headquarters:** 250 Montgomery St, San Francisco, CA 94104 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.vouch.us) | +| Privacy Policy | [Link](https://www.vouch.us/legal/privacy-notice) | +| Terms of Service | [Link](https://www.vouch.us/legal/terms-of-use) | +| Data Processing Agreement | [Link](https://help.vouchfor.com/docs/support/security/data-processing-addendum/) | + +**Category:** Business Insurance + +### Certifications + +- CPRA + +--- + +## Twilio + +Twilio is a cloud communications platform that provides APIs for developers to add messaging, voice, video, and email capabilities to applications. + +**Legal Name:** Twilio, Inc. + +**Headquarters:** 101 Spear Street, Fifth Floor, San Francisco, CA 94105 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.twilio.com/) | +| Privacy Policy | [Link](https://www.twilio.com/en-us/legal/privacy) | +| Terms of Service | [Link](https://www.twilio.com/en-us/legal/tos) | +| Security Page | [Link](https://www.twilio.com/en-us/security) | +| Trust Page | [Link](https://security.twilio.com/) | +| Status Page | [Link](https://status.twilio.com/) | +| Data Processing Agreement | [Link](https://www.twilio.com/en-us/legal/data-protection-addendum) | +| Subprocessors List | [Link](https://www.twilio.com/en-us/legal/sub-processors) | + +**Category:** Cloud Communications Platform + +### Certifications + +- SOC 2 Type 2 +- GDPR +- CCPA +- CPRA +- HIPAA +- ISO 27001 +- ISO 27017 +- ISO 27018 +- PCI DSS +- PCI DSS v4.0.0 + +--- + +## Qonto + +Qonto is a European business finance solution offering online banking, invoicing, expense management, and financial tools for SMEs and freelancers. + +**Legal Name:** Olinda SAS + +**Headquarters:** 18 rue de Navarin, 75009 Paris, France + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://qonto.com) | +| Privacy Policy | [Link](https://legal.qonto.com/en?_gl=1*eyxi0u*_gcl_au*NDEzMTYzMTE2LjE3NDQ5OTkzOTA.#template-6uiwuhdde) | +| Terms of Service | [Link](https://legal.qonto.com/en) | +| Security Page | [Link](https://qonto.com/en/security) | +| Trust Page | [Link](https://qonto.com/en/trust) | + +**Category:** Business Banking / Financial Services + +### Certifications + +- ISO 27001 +- PCI DSS +- GDPR +- DSP2 +- DORA + +--- + +## Cursor + +AI-powered integrated development environment enhancing developer productivity with advanced AI features. + +**Legal Name:** Anysphere Inc. + +**Headquarters:** 403 Francisco Street, San Francisco + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.cursor.com) | +| Privacy Policy | [Link](https://www.cursor.com/privacy) | +| Terms of Service | [Link](https://www.cursor.com/terms-of-service) | +| Security Page | [Link](https://www.cursor.com/security) | +| Trust Page | [Link](https://trust.cursor.com) | +| Status Page | [Link](https://status.cursor.com/) | +| Subprocessors List | [Link](https://trust.cursor.com/subprocessors) | + +**Category:** AI Code Editor + +### Certifications + +- SOC 2 Type 2 +- SOC 2 Type 1 + +--- + +## Pulley + +Pulley is an equity management platform that helps startups manage cap tables, issue equity, and ensure compliance with tools for fundraising modeling, 409A valuations, and more. + +**Legal Name:** PROLIFIC LABS Incorporated + +**Headquarters:** 6114 La Salle Ave, Suite 459, Oakland, CA 94611, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://pulley.com) | +| Privacy Policy | [Link](https://pulley.com/privacy) | +| Terms of Service | [Link](https://pulley.com/terms) | +| Security Page | [Link](https://pulley.com/security) | +| Subprocessors List | [Link](https://large-walk-bd5.notion.site/6449d3ecd2854af0a313b6e8679b5795?v=d61abc36355842bb939d49544f18dc95) | + +**Category:** Equity Management / Cap Table Software + +### Certifications + +- SOC 2 Type 2 +- GDPR +- CCPA + +--- + +## Microsoft Azure + +Microsoft Azure is a comprehensive cloud computing platform offering a wide range of services including computing, analytics, storage, and networking. + +**Legal Name:** Microsoft Corporation + +**Headquarters:** One Microsoft Way, Redmond, WA 98052-6399, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://azure.microsoft.com) | +| Privacy Policy | [Link](https://azure.microsoft.com/en-us/explore/trusted-cloud/privacy) | +| Terms of Service | [Link](https://azure.microsoft.com/en-us/support/legal/) | +| Security Page | [Link](https://www.microsoft.com/en-us/trust-center/security/secure-future-initiative) | +| Trust Page | [Link](https://www.microsoft.com/en-us/trust-center/product-overview) | +| Status Page | [Link](https://azure.status.microsoft/) | +| Data Processing Agreement | [Link](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA) | +| Business Associate Agreement | [Link](https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech) | +| Subprocessors List | [Link](https://www.microsoft.com/en-us/download/details.aspx?id=50426) | + +**Category:** Cloud Computing Platform + +### Certifications + +- CIS Benchmark +- CSA-STAR +- CyberGRX +- ISO 20000-1:2011 +- ISO 22301 +- ISO 27001 +- ISO 27017 +- ISO 27018 +- ISO 27701 +- ISO 9001 +- SOC 1 +- SOC 2 +- SOC 3 +- WCAG +- CJIS +- CNSSI 1253 +- DFARS +- DoD IL2 +- DoD IL5 +- DoE 10 CFR Part 810 +- EAR (US Export Administration Regulations) +- FedRAMP +- FIPS 140-2 +- IRS 1075 +- ITAR +- NIST 800-171 +- NIST CSF +- Section 508 VPATS +- 23 NYCRR Part 500 +- AFM + DNB (Netherlands) +- APRA (Australia) +- AMF and ACPR (France) +- CDSA +- DPP (UK) +- EBA (EU) +- FACT (UK) +- FCA + PRA (UK) +- FDA CFR Title 21 Part 11 +- FERPA +- FFIEC (US) +- FINMA (Switzerland) +- FISC (Japan) +- FSA (Denmark) +- GLBA (US) +- GSMA +- GxP +- HDS (France) +- HIPAA / HITECH +- HITRUST +- KNF (Poland) +- Know Your Third Party (KY3P) +- MARS-E (US) +- MAS + ABS (Singapore) +- MPA +- NBB + FSMA (Belgium) +- NEN-7510 (Netherlands) +- NERC +- OSFI (Canada) +- PCI-3DS +- PCI-DSS +- RBI + IRDAI (India) +- SEC 17a-4 +- SEC 18a-6 +- FINRA 4511 +- CFTC 1.31 +- SEC Regulation SCI (US) +- Shared Assessments +- SOX +- TISAX +- ABS OSPAR (Singapore) +- BIR 2012 (Netherlands) +- C5 (Germany) +- Canada Controlled Goods +- Canadian Privacy Laws +- CCCS Medium (Canada) +- Cyber Essentials Plus (UK) +- IRAP (Australia) +- DJCP (China) +- DORA (EU) +- EN 301 549 (EU) +- ENISA IAF (EU) +- ENS (Spain) +- EU Model Clauses +- GB 18030 (China) +- GDPR +- G-Cloud (UK) +- IDW PS 951 (Germany) +- ISMAP (Japan) +- ISMS (Korea) +- IT-Grundschutz Workbook (Germany) +- LOPD (Spain) +- MeitY (India) +- MTCS (Singapore) +- My Number (Japan) +- National Information Assurance (Qatar) +- NZ CC Framework (New Zealand) +- PASF (UK) +- PDPA (Argentina) +- Personal Data Localization (Russia) +- TRUCS (China) + +--- + +## Microsoft 365 + +Microsoft 365 is a cloud-based productivity suite offering applications like Word, Excel, Teams, and OneDrive, integrated with AI-powered features and enterprise-grade security. + +**Legal Name:** Microsoft Corporation + +**Headquarters:** One Microsoft Way, Redmond, WA 98052-6399, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.microsoft.com/microsoft-365) | +| Privacy Policy | [Link](https://www.microsoft.com/en-us/privacy/privacystatement) | +| Terms of Service | [Link](https://www.microsoft.com/en-us/servicesagreement) | +| Security Page | [Link](https://www.microsoft.com/en-us/trust-center/security/secure-future-initiative) | +| Trust Page | [Link](https://www.microsoft.com/en-us/trust-center/product-overview) | +| Status Page | [Link](https://portal.office.com/servicestatus) | +| Data Processing Agreement | [Link](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA) | +| Business Associate Agreement | [Link](https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech) | +| Subprocessors List | [Link](https://www.microsoft.com/en-us/download/details.aspx?id=50426) | + +**Category:** Productivity & Collaboration Software + +### Certifications + +- CIS Benchmark +- CSA-STAR +- CyberGRX +- ISO 20000-1:2011 +- ISO 22301 +- ISO 27001 +- ISO 27017 +- ISO 27018 +- ISO 27701 +- ISO 9001 +- SOC 1 +- SOC 2 +- SOC 3 +- WCAG +- CJIS +- CNSSI 1253 +- DFARS +- DoD IL2 +- DoD IL5 +- DoE 10 CFR Part 810 +- EAR (US Export Administration Regulations) +- FedRAMP +- FIPS 140-2 +- IRS 1075 +- ITAR +- NIST 800-171 +- NIST CSF +- Section 508 VPATS +- 23 NYCRR Part 500 +- AFM + DNB (Netherlands) +- APRA (Australia) +- AMF and ACPR (France) +- CDSA +- DPP (UK) +- EBA (EU) +- FACT (UK) +- FCA + PRA (UK) +- FDA CFR Title 21 Part 11 +- FERPA +- FFIEC (US) +- FINMA (Switzerland) +- FISC (Japan) +- FSA (Denmark) +- GLBA (US) +- GSMA +- GxP +- HDS (France) +- HIPAA / HITECH +- HITRUST +- KNF (Poland) +- Know Your Third Party (KY3P) +- MARS-E (US) +- MAS + ABS (Singapore) +- MPA +- NBB + FSMA (Belgium) +- NEN-7510 (Netherlands) +- NERC +- OSFI (Canada) +- PCI-3DS +- PCI-DSS +- RBI + IRDAI (India) +- SEC 17a-4 +- SEC 18a-6 +- FINRA 4511 +- CFTC 1.31 +- SEC Regulation SCI (US) +- Shared Assessments +- SOX +- TISAX +- ABS OSPAR (Singapore) +- BIR 2012 (Netherlands) +- C5 (Germany) +- Canada Controlled Goods +- Canadian Privacy Laws +- CCCS Medium (Canada) +- Cyber Essentials Plus (UK) +- IRAP (Australia) +- DJCP (China) +- DORA (EU) +- EN 301 549 (EU) +- ENISA IAF (EU) +- ENS (Spain) +- EU Model Clauses +- GB 18030 (China) +- GDPR +- G-Cloud (UK) +- IDW PS 951 (Germany) +- ISMAP (Japan) +- ISMS (Korea) +- IT-Grundschutz Workbook (Germany) +- LOPD (Spain) +- MeitY (India) +- MTCS (Singapore) +- My Number (Japan) +- National Information Assurance (Qatar) +- NZ CC Framework (New Zealand) +- PASF (UK) +- PDPA (Argentina) +- Personal Data Localization (Russia) +- TRUCS (China) + +--- + +## Google + +Google is a multinational technology company specializing in internet-related services and products, including search, advertising, cloud computing, software, and hardware. + +**Legal Name:** Google LLC + +**Headquarters:** 1600 Amphitheatre Parkway, Mountain View, CA 94043, US + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://google.com) | +| Privacy Policy | [Link](https://policies.google.com/privacy) | +| Terms of Service | [Link](https://policies.google.com/terms) | +| Security Page | [Link](https://business.safety.google/) | +| Trust Page | [Link](https://business.safety.google/) | +| Status Page | [Link](https://ads.google.com/status/publisher/) | + +**Category:** Technology & Internet Services + +### Certifications + +- ISO 27001 +- ISO 27017 +- ISO 27018 +- ISO 27701 +- FedRAMP +- PCI DSS +- SOC 2 +- SOC 3 +- GDPR + +--- + +## Namecheap + +Namecheap is an ICANN-accredited domain registrar and web hosting company offering domain registration, hosting, VPN, and other web services. + +**Legal Name:** Namecheap, Inc. + +**Headquarters:** 4600 East Washington Street, Suite 305, Phoenix, AZ 85034, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.namecheap.com) | +| Privacy Policy | [Link](https://www.namecheap.com/legal/general/privacy-policy/) | +| Terms of Service | [Link](https://www.namecheap.com/legal/) | +| Status Page | [Link](https://www.namecheap.com/status-updates/) | +| Data Processing Agreement | [Link](https://www.namecheap.com/legal/universal/data-processing-addendum/) | + +**Category:** Domain Registration and Web Hosting + +### Certifications + +- CCPA +- GDPR + +--- + +## Porter + +Porter is a platform-as-a-service (PaaS) that enables developers to deploy and manage applications in their own AWS, GCP, or Azure cloud accounts with minimal DevOps overhead. + +**Legal Name:** Porter Technologies Inc. + +**Headquarters:** New York City, NY, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.porter.run) | +| Privacy Policy | [Link](https://docs.porter.run/terms-and-privacy/privacy-policy) | +| Terms of Service | [Link](https://docs.porter.run/terms-and-privacy/terms-of-service) | +| Security Page | [Link](https://docs.porter.run/security-and-compliance/soc2-hipaa) | +| Status Page | [Link](https://status.porter.run/) | + +**Category:** Platform as a Service (PaaS) + +### Certifications + +- SOC 2 Type 2 +- GDPR +- CCPA + +--- + +## Bitwarden + +Bitwarden is a secure, open-source password manager that enables individuals and organizations to store, manage, and share sensitive data across devices. + +**Legal Name:** Bitwarden, Inc. + +**Headquarters:** 1 North Calle Cesar Chavez, Suite 102, Santa Barbara, CA 93103 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://bitwarden.com) | +| Privacy Policy | [Link](https://bitwarden.com/privacy/) | +| Terms of Service | [Link](https://bitwarden.com/terms/) | +| Security Page | [Link](https://bitwarden.com/help/security-faqs/) | +| Trust Page | [Link](https://bitwarden.com/compliance/) | +| Status Page | [Link](https://status.bitwarden.com/) | +| Subprocessors List | [Link](https://bitwarden.com/help/subprocessors/) | + +**Category:** Password Management + +### Certifications + +- ISO/IEC 27001:2022 +- SOC 2 Type 2 +- SOC 3 +- HIPAA +- GDPR +- CCPA +- CPRA +- Data Privacy Framework (DPF) + +--- + +## Framer + +Framer is a no-code website builder that enables designers and teams to create and publish professional, responsive websites with built-in CMS, animations, and real-time collaboration tools. + +**Legal Name:** Framer B.V. + +**Headquarters:** Rozengracht 207B, 1016 LZ Amsterdam, Netherlands + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.framer.com) | +| Privacy Policy | [Link](https://www.framer.com/legal/privacy-statement/) | +| Terms of Service | [Link](https://www.framer.com/legal/terms-of-service/) | +| Security Page | [Link](https://www.framer.com/legal/security/) | +| Status Page | [Link](https://www.framerstatus.com/) | +| Data Processing Agreement | [Link](https://www.framer.com/legal/data-processing-addendum/) | +| Subprocessors List | [Link](https://www.framer.com/legal/sub-processors/) | + +**Category:** Website Builder / No-Code Platform + +### Certifications + +- SOC 2 Type 2 +- ISO/IEC 27001:2022 +- GDPR +- CCPA +- Privacy Shield + +--- + +## Cal.com + +Cal.com is an open-source scheduling platform that lets individuals and organizations create customizable booking experiences and integrate scheduling into their products. + +**Legal Name:** Cal.com, Inc. + +**Headquarters:** 2261 Market Street #4382, San Francisco, CA 94114, USA + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://cal.com) | +| Privacy Policy | [Link](https://cal.com/privacy) | +| Terms of Service | [Link](https://cal.com/terms) | +| Security Page | [Link](https://cal.com/security) | +| Trust Page | [Link](https://security.cal.com) | +| Status Page | [Link](https://status.cal.com) | +| Data Processing Agreement | [Link](https://security.cal.com/?itemUid=c4223a81-5840-4e11-ac9f-2b812794a67e) | +| Business Associate Agreement | [Link](https://app.cal.com/apps/baa-for-hipaa) | +| Subprocessors List | [Link](https://security.cal.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57) | + +**Category:** Scheduling / Productivity + +### Certifications + +- SOC 2 Type 2 +- ISO/IEC 27001:2022 +- HIPAA +- GDPR +- CCPA + +--- + +## Mailchimp + +All-in-one marketing automation platform that lets organizations create, send, and analyze email campaigns and other customer-engagement content. + +**Legal Name:** The Rocket Science Group LLC + +**Headquarters:** 2 Sun Court Suite 400 Peachtree Corners, GA 30092 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://mailchimp.com) | +| Privacy Policy | [Link](https://www.intuit.com/privacy/statement/) | +| Terms of Service | [Link](https://mailchimp.com/legal/terms/) | +| Security Page | [Link](https://mailchimp.com/about/security/) | +| Trust Page | [Link](https://www.intuit.com/compliance/) | +| Status Page | [Link](https://status.mailchimp.com/) | +| Data Processing Agreement | [Link](https://mailchimp.com/legal/data-processing-addendum/) | +| Subprocessors List | [Link](https://mailchimp.com/legal/subprocessors/) | + +**Category:** Marketing Automation + +### Certifications + +- SOC 2 Type 2 +- ISO 27001 +- Data Privacy Framework (DPF) +- GDPR +- CCPA +- VPAT +- PCI DSS + +--- + +## Otter.ai + +AI-powered meeting assistant that captures, transcribes, and summarizes conversations in real time to make information from meetings searchable and shareable. + +**Legal Name:** Otter.ai, Inc. + +**Headquarters:** 800 W El Camino Real, Suite 170, Mountain View, CA 94040 + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://otter.ai) | +| Privacy Policy | [Link](https://otter.ai/privacy-policy) | +| Terms of Service | [Link](https://otter.ai/terms-of-service) | +| Security Page | [Link](https://otter.ai/privacy-security) | +| Trust Page | [Link](https://otter.ai/privacy-security) | +| Status Page | [Link](https://status.otter.ai/) | +| Data Processing Agreement | [Link](https://otter.ai/terms-of-service#data-processing-agreement) | +| Subprocessors List | [Link](https://otter.ai/subprocessors) | + +**Category:** AI Transcription & Meeting Intelligence + +### Certifications + +- SOC 2 Type 2 +- ISO/IEC 27001:2022 +- GDPR +- CCPA +- Data Privacy Framework (DPF) + +--- + +## Resend + +Developer‑focused email delivery platform offering a modern API and tooling to build, test and send transactional and marketing emails at scale. + +**Legal Name:** Plus Five Five, Inc. + +**Headquarters:** 2261 Market Street #5039, San Francisco, CA 94114, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://resend.com) | +| Privacy Policy | [Link](https://resend.com/legal/privacy-policy) | +| Terms of Service | [Link](https://resend.com/legal/terms-of-service) | +| Security Page | [Link](https://resend.com/security) | +| Trust Page | [Link](https://resend.com/security) | +| Status Page | [Link](https://resend-status.com/) | +| Data Processing Agreement | [Link](https://resend.com/legal/dpa) | +| Subprocessors List | [Link](https://resend.com/legal/subprocessors) | + +**Category:** Email Delivery Platform + +### Certifications + +- SOC 2 Type 2 +- GDPR +- CCPA +- Data Privacy Framework (DPF) + +--- + +## Pylon + +Pylon provides a modern unified customer-support platform for B2B companies, combining ticketing, chat, knowledge base, AI assistance, customer portal and workflows in one tool. + +**Legal Name:** Pylon Labs, Inc. + +**Headquarters:** 188 King Street, Unit 502, San Francisco, CA 94107, USA + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://usepylon.com) | +| Privacy Policy | [Link](https://usepylon.com/privacy) | +| Terms of Service | [Link](https://usepylon.com/terms) | +| Security Page | [Link](https://usepylon.com/security) | +| Trust Page | [Link](https://trust.usepylon.com) | +| Status Page | [Link](https://status.usepylon.com) | +| Data Processing Agreement | [Link](https://usepylon.com/data-processing-agreement) | +| Subprocessors List | [Link](https://usepylon.com/subprocessors) | + +**Category:** Customer Support Platform + +### Certifications + +- SOC 2 Type 2 +- ISO/IEC 27001 +- GDPR +- HIPAA + +--- + +## Loops + +Email platform for SaaS companies that lets teams create, send and track product, marketing, and transactional emails from a single interface + +**Legal Name:** Astrodon Inc. + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://loops.so) | +| Privacy Policy | [Link](https://loops.so/privacy) | +| Terms of Service | [Link](https://loops.so/terms) | +| Status Page | [Link](https://loops.statuspage.io) | +| Data Processing Agreement | [Link](https://loops.so/dpa) | +| Subprocessors List | [Link](https://loops.so/subprocessors) | + +**Category:** Email Marketing Platform + +### Certifications + +- GDPR +- CCPA + +--- + +## Perplexity + +Generative AI answer engine that delivers real-time, source-cited answers to user questions. + +**Legal Name:** Perplexity AI, Inc. + +**Headquarters:** 115 Sansome St, San Francisco, CA 94104-3601, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.perplexity.ai) | +| Privacy Policy | [Link](https://www.perplexity.ai/hub/legal/privacy-policy) | +| Terms of Service | [Link](https://www.perplexity.ai/hub/legal/terms-of-service) | +| Security Page | [Link](https://www.perplexity.ai/hub/security) | +| Trust Page | [Link](https://trust.perplexity.ai) | +| Status Page | [Link](https://status.perplexity.ai/) | +| Data Processing Agreement | [Link](https://www.perplexity.ai/hub/legal/enterprise-terms-of-service) | +| Subprocessors List | [Link](https://trust.perplexity.ai/) | + +**Category:** AI Answer Engine + +### Certifications + +- SOC 2 Type 2 +- GDPR +- CCPA +- PCI DSS +- CAIQ Lite + +--- + +## Google Cloud Platform + +Comprehensive public cloud computing platform offering infrastructure, data analytics, AI, security, and developer tools + +**Legal Name:** Google LLC + +**Headquarters:** 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://cloud.google.com) | +| Privacy Policy | [Link](https://cloud.google.com/terms/cloud-privacy-notice) | +| Terms of Service | [Link](https://cloud.google.com/terms) | +| Service Level Agreement | [Link](https://cloud.google.com/terms/sla) | +| Security Page | [Link](https://cloud.google.com/security) | +| Trust Page | [Link](https://cloud.google.com/trust-center) | +| Status Page | [Link](https://status.cloud.google.com/) | +| Data Processing Agreement | [Link](https://cloud.google.com/terms/data-processing-terms) | +| Business Associate Agreement | [Link](https://cloud.google.com/terms/hipaa-baa) | +| Subprocessors List | [Link](https://cloud.google.com/terms/subprocessors) | + +**Category:** Cloud Computing Platform + +### Certifications + +- Cloud Computing Compliance Controls Catalog (C5) +- CSA +- GSMA SAS-SM +- Higher Education Cloud Vendor Assessment Tool (HECVAT) +- ISO 9001:2015 +- ISO 22301:2019 & BS EN ISO 22301:2019 +- ISO 50001:2018 +- ISO/IEC 27001 +- ISO/IEC 27017 +- ISO/IEC 27018 +- ISO/IEC 27701 +- ISO/IEC 42001 +- PCI 3DS Core Security Standard +- PCI DSS +- PCI PIN Security +- SOC 1 +- SOC 2 +- SOC 3 +- SWIFT on Google Cloud +- Uptime Institute's Tier Standards +- VPAT (WCAG, U.S. Section 508, EN 301 549) +- FedRAMP +- FIPS 140-2 Validated +- HITRUST CSF +- Independent Security Evaluators (ISE) Audit +- Minimum Acceptable Risk Standards for Exchanges (MARS-E) +- StateRAMP +- TruSight +- U.S. Cybersecurity Maturity Model Certification (CMMC) +- U.S. Defense Information Systems Agency Provisional Authorization +- Spain Esquema Nacional de Seguridad (ENS) +- EU Cloud Code of Conduct +- HDS +- ISAE 3000 Type 2 Report (FINMA) +- ISO 14001 +- Microfin +- NCSC - Cyber Essentials Plus (UK) +- Police Assured Secure Facilities (PASF) +- Qatar National Information Assurance (NIA) +- SWIPO Data Portability Code of Conduct +- TISAX +- Australia Hosting Certification Framework (HCF) +- Cloud Security Assurance Program (CSAP) Low Level for Group C +- Information System Security Management and Assessment Program (ISMAP) +- IRAP (Information Security Registered Assessors Program) +- JIIMA +- K-ISMS (Korea) +- MTCS (Singapore) Tier 3 +- OSPAR +- SNI 27001 +- ETDA (Thailand) +- GxP +- California Consumer Privacy Act (CCPA) +- COPPA (U.S.) +- Export Administration Regulations (EAR) +- FERPA (U.S.) +- FINRA (US) +- Google Cloud Data Processing Addendum Mapping - U.S. State Privacy Laws +- HIPAA +- IRS 1075 +- International Traffic in Arms Regulations (ITAR) +- GLBA +- OSFI (Canada) +- FG16/5 - FCA +- NERC CIP +- PHIPA (Canada) +- PIPEDA (Canada) +- US Federal Banking Agencies +- U.S. Defense Federal Acquisition Regulation Supplement (DFARS) +- ACPR (France) +- BaFin Cloud Outsourcing Guidance +- Banco de España +- Banco de Portugal +- Bank of Italy +- BRSA (Turkey) +- BSI Critical Infrastructure (KRITIS) +- BWG (Austria) +- Central Bank of Ireland (Ireland) +- CSSF (Luxembourg) +- De Nederlandsche Bank (the Netherlands) +- EU DORA +- European Union’s Digital Markets Act +- EU Solvency II +- EU Standard Contractual Clauses +- FINMA (Switzerland) +- FSA (Denmark) +- GDPR +- Google Cloud & the EU Network and Information Systems Directive (NIS2) +- Israel’s Privacy Protection Authority +- KNF (Poland) +- MaRisk AT 9 Outsourcing +- PRA (UK) +- revFADP (Switzerland) +- South Africa POPI +- SFSA (Sweden) +- Telecoms Security Act (UK) +- VAG (Austria) +- SYSC 8 Outsourcing - FCA Handbook +- UK CHECK +- PDPL (Argentina) +- BCRA (Argentina) +- Central Bank of Brazil (Brazil) +- CNBV (Mexico) +- CNSF (Mexico) +- CMF (Chile) +- Superintendencia de Banca (Peru) +- Financial Superintendence of Colombia +- Lei Geral de Proteção de Dados (LGPD) +- ASFI (Bolivia) +- Act on the Protection of Personal Information (Japan) +- APRA Prudential Standard CPS 234 +- APPs (Australia) +- APRA (Australia) +- Bank Negara (Malaysia) +- Bank of Thailand (BOT) +- BSP (Philippines) +- DSA (Bangladesh) +- FSC Insurance Outsourcing Directions +- FSC Banking Outsourcing Regulations +- GR 95/2018 guidelines +- IA (Hong Kong) +- HKMA (Hong Kong) +- MAMPU (Malaysia) +- PDPO (Hong Kong) +- Indonesia Government Regulation No. 71 (GR 71) +- IRDAI (India) +- FSC (Korea) +- Korean Financial Supervisory Service (FSS) +- MAS TRM Guidelines +- OIC (Thailand) +- OJK Circular 21 of 2017 (SEOJK 21) +- OJK Regulation No. 38 of 2016 (POJK 38) +- PDP Law (Indonesia) +- PDPA (Malaysia) +- PDPA (Philippines) +- PDPA (Taiwan) +- PDPA (Thailand) +- PDPD (Vietnam) +- PIPA (Korea) +- RBI (India) +- Reserve Bank of New Zealand (New Zealand) +- Securities and Exchange Board of India (SEBI) +- PDPA (Singapore) +- State Bank of Vietnam +- The Privacy Act (New Zealand) + +--- + +## Fly.io + +Developer-focused public cloud platform offering hardware-virtualized containers (Fly Machines) with KVM isolation, automatic scaling to zero, and integrated tools for deploying and managing applications globally + +**Legal Name:** Fly.io, Inc. + +**Headquarters:** 2045 W Grand Ave, Chicago, IL 60612, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://fly.io) | +| Privacy Policy | [Link](https://fly.io/legal/privacy-policy) | +| Terms of Service | [Link](https://fly.io/legal/terms-of-service) | +| Service Level Agreement | [Link](https://fly.io/legal/sla-uptime/) | +| Security Page | [Link](https://fly.io/security) | +| Trust Page | [Link](https://fly.io/compliance) | +| Status Page | [Link](https://status.fly.io/) | +| Data Processing Agreement | [Link](https://fly.io/documents) | +| Business Associate Agreement | [Link](https://fly.io/documents) | +| Subprocessors List | [Link](https://fly.io/legal/sub-processors/) | + +**Category:** Application Hosting + +### Certifications + +- SOC 2 Type 2 +- EU-U.S. DPF +- UK DPF +- Swiss-U.S. DPF +- HIPAA +- GDPR +- CCPA + +--- + +## Upstash + +Serverless data platform providing HTTP-based Redis, Vector, and QStash services with global low-latency, automatic scaling, and durable storage + +**Legal Name:** Upstash, Inc. + +**Headquarters:** 6202 Via De Adrianna, San Jose, CA 95120, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://upstash.com) | +| Privacy Policy | [Link](https://upstash.com/trust/privacy.pdf) | +| Terms of Service | [Link](https://upstash.com/trust/terms.pdf) | +| Service Level Agreement | [Link](https://upstash.com/docs/common/help/sla) | +| Security Page | [Link](https://upstash.com/static/trust/security-measures.pdf) | +| Trust Page | [Link](https://trust.upstash.com) | +| Status Page | [Link](https://status.upstash.com) | +| Data Processing Agreement | [Link](https://upstash.com/static/trust/dpa.pdf) | +| Subprocessors List | [Link](https://trust.upstash.com/subprocessors) | + +**Category:** Serverless Database Platform + +### Certifications + +- SOC 2 Type 2 +- GDPR +- CCPA + +--- + +## bunny.net + +Cloud-based content-delivery, edge-storage and optimization platform that accelerates and secures web content worldwide. + +**Legal Name:** BunnyWay d.o.o. + +**Headquarters:** Dunajska cesta 165, 1000 Ljubljana, Slovenia + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://bunny.net) | +| Privacy Policy | [Link](https://bunny.net/privacy/) | +| Terms of Service | [Link](https://bunny.net/tos/) | +| Service Level Agreement | [Link](https://bunny.net/sla/) | +| Security Page | [Link](https://bunny.net/shield/) | +| Status Page | [Link](https://status.bunny.net/) | +| Subprocessors List | [Link](https://bunny.net/gdpr/sub-processors/) | + +**Category:** Content Delivery Network (CDN) / Edge Cloud + +### Certifications + +- ISO 27001 +- GDPR + +--- + +## ClickUp + +All-in-one productivity platform for project management, document collaboration, and goal tracking. + +**Legal Name:** Mango Technologies, Inc. + +**Headquarters:** 350 Tenth Ave, 5th Floor, San Diego, CA 92101, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://clickup.com) | +| Privacy Policy | [Link](https://clickup.com/terms/privacy) | +| Terms of Service | [Link](https://clickup.com/terms) | +| Security Page | [Link](https://clickup.com/security) | +| Trust Page | [Link](https://security.clickup.com) | +| Status Page | [Link](https://status.clickup.com) | +| Data Processing Agreement | [Link](https://clickup.com/terms/dpa) | +| Subprocessors List | [Link](https://clickup.com/terms/dpa/subprocessors) | + +**Category:** Project Management + +### Certifications + +- SOC 2 Type 2 +- ISO/IEC 27001 +- ISO 27017 +- ISO 27018 +- PCI DSS +- GDPR +- CCPA +- CPRA +- LGPD +- VCDPA + +--- + +## Danami + +Developer of security, firewall and anti-spam extensions for the Plesk hosting control panel. + +**Legal Name:** Danami International Inc. + +**Headquarters:** 5314 56 St, Camrose, Alberta T4V 2E5, Canada + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.danami.com) | +| Privacy Policy | [Link](https://www.danami.com/legal/privacy-policy) | +| Terms of Service | [Link](https://www.danami.com/legal/terms-of-service) | + +**Category:** Web-hosting security / Plesk extensions + +--- + +## New Relic + +New Relic provides a full-stack observability platform that lets engineering teams monitor, analyze, and improve application, infrastructure, and digital-experience performance in real time. + +**Legal Name:** New Relic, Inc. + +**Headquarters:** 188 Spear St., Suite 1000, San Francisco, CA 94105, USA + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://newrelic.com) | +| Privacy Policy | [Link](https://newrelic.com/termsandconditions/privacy) | +| Terms of Service | [Link](https://newrelic.com/termsandconditions/terms) | +| Service Level Agreement | [Link](https://docs.newrelic.com/docs/licenses/license-information/referenced-policies/service-level-availability-commitment/) | +| Security Page | [Link](https://newrelic.com/security) | +| Trust Page | [Link](https://newrelic.com/security) | +| Status Page | [Link](https://status.newrelic.com/) | +| Data Processing Agreement | [Link](https://newrelic.com/sites/default/files/2023-11/New_Relic_GDPR_DPA_SCCs_Oct_2023_presigned.pdf) | +| Business Associate Agreement | [Link](https://newrelic.com/termsandconditions/hipaabaafaq) | +| Subprocessors List | [Link](https://newrelic.com/sub-processors) | + +**Category:** Observability / Application Performance Monitoring + +### Certifications + +- SOC 2 Type 2 +- ISO/IEC 27001:2022 +- FedRAMP Moderate +- PCI DSS Level 1 +- TISAX Level 2 +- HITRUST CSF +- HIPAA +- GDPR +- CCPA +- Data Privacy Framework (DPF) + +--- + +## OVHcloud global + +OVHcloud is a French cloud computing company offering public and private cloud products, shared hosting, and dedicated server solutions in 140 countries worldwide. + +**Legal Name:** OVH Groupe SAS + +**Headquarters:** 2 Rue Kellermann, 59100 Roubaix, France + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.ovhcloud.com) | +| Privacy Policy | [Link](https://www.ovhcloud.com/en/terms-and-conditions/privacy-policy/) | +| Terms of Service | [Link](https://www.ovhcloud.com/en/terms-and-conditions/contracts/) | +| Security Page | [Link](https://corporate.ovhcloud.com/en/trusted-cloud/security-certifications/) | +| Trust Page | [Link](https://corporate.ovhcloud.com/en/trusted-cloud/security-certifications/) | +| Status Page | [Link](https://www.status-ovhcloud.com/) | +| Data Processing Agreement | [Link](https://storage.gra.cloud.ovh.net/v1/AUTH_325716a587c64897acbef9a4a4726e38/contracts/4683679-OVH_Data_Protection_Agreement-IE-5.1.pdf) | +| Subprocessors List | [Link](https://www.ovh.ie/support/termsofservice/OVH%20IE%20Sub%20processors.pdf) | + +**Category:** Cloud Infrastructure Provider + +### Certifications + +- ISO/IEC 27001 +- ISO/IEC 27017 +- ISO/IEC 27018 +- ISO/IEC 27701 +- CSA STAR +- ISO/IEC 14001 +- ISO 50001 +- HDS +- ANSSI SecNum Cloud +- ACN +- BSI C5 +- ENS +- PCI DSS +- SOC 1 +- SOC 2 +- SOC 3 + +--- + +## OVHcloud US + +Global cloud-infrastructure provider delivering bare-metal servers, public and private cloud, and web-hosting services at scale. + +**Legal Name:** OVH US LLC + +**Headquarters:** 11950 Democracy Drive, Suite 300, Reston, VA 20190, USA + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://us.ovhcloud.com) | +| Privacy Policy | [Link](https://us.ovhcloud.com/legal/privacy-policy/) | +| Terms of Service | [Link](https://us.ovhcloud.com/legal/terms-of-service/) | +| Service Level Agreement | [Link](https://us.ovhcloud.com/legal/) | +| Security Page | [Link](https://us.ovhcloud.com/personal-data-protection/security/) | +| Trust Page | [Link](https://us.ovhcloud.com/compliance/) | +| Status Page | [Link](https://status.us.ovhcloud.com/) | +| Data Processing Agreement | [Link](https://us.ovhcloud.com/legal/data-processing-agreement/) | +| Subprocessors List | [Link](https://storage.gra.cloud.ovh.net/v1/AUTH_325716a587c64897acbef9a4a4726e38/contracts/30c4ab8-OVH_Sub_processors-IE-2.0.pdf) | + +**Category:** Cloud Infrastructure Provider + +### Certifications + +- ISO/IEC 27001 +- ISO/IEC 27017 +- ISO/IEC 27018 +- ISO/IEC 27701 +- SOC 1 Type 2 +- SOC 2 Type 2 +- SOC 3 +- CSA STAR +- HIPAA +- PCI DSS +- Data Privacy Framework (DPF) +- GDPR +- CCPA + +--- + +## Pipedrive + +Pipedrive is a sales-focused CRM platform designed to help small businesses manage leads, track deals, and automate sales processes. + +**Legal Name:** Pipedrive Inc. + +**Headquarters:** 530 Fifth Avenue, 8th Floor, Suite 802, New York, NY 10036, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.pipedrive.com) | +| Privacy Policy | [Link](https://www.pipedrive.com/en/privacy) | +| Terms of Service | [Link](https://www.pipedrive.com/en/terms-of-service) | +| Security Page | [Link](https://www.pipedrive.com/en/features/privacy-security) | +| Trust Page | [Link](https://www.pipedrive.com/en/trust-center) | +| Status Page | [Link](https://status.pipedrive.com/) | +| Data Processing Agreement | [Link](https://www.pipedrive.com/en/privacy/dpa) | +| Subprocessors List | [Link](https://www.pipedrive.com/en/subprocessors) | + +**Category:** CRM Software + +### Certifications + +- SOC 2 Type 2 +- SOC 3 +- ISO/IEC 27001:2013 +- ISO/IEC 27701:2019 +- GDPR +- CCPA + +--- + +## Plesk + +Web-hosting control-panel software for building, securing and running websites and cloud applications. + +**Legal Name:** WebPros International GmbH (formerly Plesk International GmbH) + +**Headquarters:** Vordergasse 59, 8200 Schaffhausen, Switzerland + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.plesk.com) | +| Privacy Policy | [Link](https://www.plesk.com/legal/#privacy-policy) | +| Terms of Service | [Link](https://www.plesk.com/legal/#terms-of-use/) | +| Security Page | [Link](https://docs.plesk.com/en-US/obsidian/administrator-guide/plesk-administration/securing-plesk.59464/) | +| Subprocessors List | [Link](https://www.plesk.com/wp-content/uploads/legal/gdpr3.pdf) | + +**Category:** Web Hosting Control Panel + +### Certifications + +- GDPR + +--- + +## Brevo + +Cloud-based CRM and multichannel marketing platform that lets businesses run email, SMS, WhatsApp and automated campaigns while managing customer relationships from one suite. + +**Legal Name:** Sendinblue SAS + +**Headquarters:** 106 boulevard Haussmann, 75008 Paris, France + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.brevo.com) | +| Privacy Policy | [Link](https://www.brevo.com/legal/privacypolicy/) | +| Terms of Service | [Link](https://www.brevo.com/legal/termsofuse/) | +| Security Page | [Link](https://www.brevo.com/features/data-security/) | +| Trust Page | [Link](https://www.brevo.com/features/data-security/) | +| Status Page | [Link](https://status.brevo.com/) | +| Data Processing Agreement | [Link](https://www.brevo.com/legal/termsofuse/#dpa) | +| Subprocessors List | [Link](https://www.brevo.com/legal/termsofuse/#sub-processors) | + +**Category:** Email Marketing & CRM + +### Certifications + +- ISO/IES 27001:2013 +- GDPR +- CCPA +- CASL + +--- + +## Better Stack + +Developer-first observability platform that unifies log management, uptime monitoring, incident response, and public status pages. + +**Legal Name:** Better Stack, Inc. + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://betterstack.com) | +| Privacy Policy | [Link](https://betterstack.com/privacy) | +| Terms of Service | [Link](https://betterstack.com/terms) | +| Security Page | [Link](https://betterstack.com/security) | +| Status Page | [Link](https://status.betterstack.com/) | +| Data Processing Agreement | [Link](https://betterstack.com/dpa) | +| Subprocessors List | [Link](https://betterstack.com/dpa/schedules) | + +**Category:** Observability / Monitoring + +### Certifications + +- SOC 2 Type 2 +- GDPR +- CCPA + +--- + +## PlanetScale + +PlanetScale provides a serverless, MySQL-compatible database-as-a-service built on Vitess that lets developers scale relational workloads without managing infrastructure. + +**Legal Name:** PlanetScale, Inc. + +**Headquarters:** 535 Mission Street, 14th Floor, San Francisco, CA 94105, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://planetscale.com) | +| Privacy Policy | [Link](https://planetscale.com/legal/privacy) | +| Terms of Service | [Link](https://planetscale.com/legal/siteterms) | +| Service Level Agreement | [Link](https://planetscale.com/legal/planetscale-service-level-agreement) | +| Security Page | [Link](https://planetscale.com/docs/concepts/security) | +| Trust Page | [Link](https://trust.planetscale.com) | +| Status Page | [Link](https://www.planetscalestatus.com/) | +| Data Processing Agreement | [Link](https://planetscale.com/legal/data-processing-addendum) | +| Subprocessors List | [Link](https://planetscale.com/legal/subprocessors) | + +**Category:** Database-as-a-Service + +### Certifications + +- SOC 2 Type 2 +- HIPAA +- PCI DSS 4.0 +- GDPR +- CCPA +- LGPD + +--- + +## Docker + +Developer platform for building, sharing, and running containerized applications. + +**Legal Name:** Docker, Inc. + +**Headquarters:** 3790 El Camino Real #1052, Palo Alto, CA 94306, USA + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.docker.com) | +| Privacy Policy | [Link](https://www.docker.com/legal/docker-privacy-policy/) | +| Terms of Service | [Link](https://www.docker.com/legal/docker-terms-service/) | +| Service Level Agreement | [Link](https://www.docker.com/legal/docker-subscription-service-agreement/) | +| Security Page | [Link](https://www.docker.com/trust/security/) | +| Trust Page | [Link](https://www.docker.com/trust/) | +| Status Page | [Link](https://www.dockerstatus.com/) | +| Data Processing Agreement | [Link](https://www.docker.com/app/uploads/2022/03/2022-Docker-EU-UK-SCC-Data-Processing-Agreement.pdf) | +| Subprocessors List | [Link](https://www.docker.com/trust/privacy/sub-processors/) | + +**Category:** Container Platform + +### Certifications + +- SOC 2 Type 2 +- ISO/IEC 27001 +- CSA Trusted Cloud +- Data Privacy Framework (DPF) +- GDPR +- CCPA +- APEC +- CPA +- CTDPA +- VCDPA +- UCPA + +--- + +## Brex + +AI-powered global spend platform offering corporate cards, expense management, business accounts and travel in one place. + +**Legal Name:** Brex Inc. + +**Headquarters:** 650 S 500W Suite 300, Salt Lake City, UT 84101, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.brex.com) | +| Privacy Policy | [Link](https://www.brex.com/legal/privacy) | +| Terms of Service | [Link](https://www.brex.com/legal/user-terms) | +| Security Page | [Link](https://www.brex.com/support/security) | +| Trust Page | [Link](https://trust-portal.brex.com) | +| Status Page | [Link](https://status.brex.com/) | +| Data Processing Agreement | [Link](https://www.brex.com/legal/dpa) | +| Subprocessors List | [Link](https://trust-portal.brex.com) | + +**Category:** Spend Management & Corporate Card + +### Certifications + +- SOC 1 Type 2 +- SOC 2 Type 2 +- PCI DSS +- GDPR +- CCPA + +--- + +## Ramp + +Corporate spend-management platform offering corporate cards, expense automation, bill pay, and vendor management for finance teams. + +**Legal Name:** Ramp Business Corporation + +**Headquarters:** 28 West 23rd Street, Floor 2, New York, NY 10010 USA + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://ramp.com) | +| Privacy Policy | [Link](https://ramp.com/legal/privacy-policy) | +| Terms of Service | [Link](https://ramp.com/legal/platform-agreement) | +| Security Page | [Link](https://ramp.com/security) | +| Trust Page | [Link](https://trust.ramp.com/) | +| Data Processing Agreement | [Link](https://ramp.com/legal/dpa) | +| Subprocessors List | [Link](https://trust.ramp.com/) | + +**Category:** Spend Management + +### Certifications + +- SOC 2 Type 2 +- SOC 1 Type 2 +- ISO/IEC 27001:2022 +- PCI DSS v4.0 +- GDPR +- CCPA +- Data Privacy Framework (DPF) + +--- + +## ClickHouse + +Open-source column-oriented database and managed cloud service for ultra-fast, real-time analytics on large-volume data. + +**Legal Name:** ClickHouse, Inc. + +**Headquarters:** 650 Castro St., Suite 120 #92426, Mountain View, CA 94041, USA + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://clickhouse.com) | +| Privacy Policy | [Link](https://clickhouse.com/legal/privacy-policy) | +| Terms of Service | [Link](https://clickhouse.com/legal/agreements/terms-of-service) | +| Service Level Agreement | [Link](https://clickhouse.com/legal/agreements/service-level-agreement) | +| Security Page | [Link](https://clickhouse.com/docs/cloud/security/security-and-compliance) | +| Trust Page | [Link](https://trust.clickhouse.com) | +| Status Page | [Link](https://status.clickhouse.com) | +| Data Processing Agreement | [Link](https://clickhouse.com/legal/agreements/data-processing-addendum) | +| Subprocessors List | [Link](https://clickhouse.com/legal/agreements/subprocessors) | + +**Category:** Real-time Analytics Database + +### Certifications + +- SOC 2 Type 2 +- ISO/IEC 27001 +- Data Privacy Framework (DPF) +- HIPAA +- PCI DSS v4.0 +- GDPR +- CCPA +- Colorado Privacy Act (CPA) +- Connecticut Data Privacy Act (CTDPA) +- Virginia Consumer Data Protection Act (VCDPA) + +--- + +## Tailscale + +Tailscale provides a zero-config mesh VPN and zero-trust networking platform that securely connects devices and services across any network. + +**Legal Name:** Tailscale Inc. + +**Headquarters:** 401-50 Lynn Williams Street, Toronto, ON M6K 3R9, Canada + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://tailscale.com) | +| Privacy Policy | [Link](https://tailscale.com/privacy-policy) | +| Terms of Service | [Link](https://tailscale.com/terms) | +| Service Level Agreement | [Link](https://tailscale.com/sla) | +| Security Page | [Link](https://tailscale.com/security) | +| Trust Page | [Link](https://tailscale.com/legal) | +| Status Page | [Link](https://status.tailscale.com/) | +| Data Processing Agreement | [Link](https://tailscale.com/dpa) | +| Subprocessors List | [Link](https://tailscale.com/dpa-subprocessors) | + +**Category:** Zero-Trust Networking / Mesh VPN + +### Certifications + +- SOC 2 Type II +- GDPR +- CCPA + +--- + +## Puzzle + +Puzzle provides modern, real-time accounting software that gives startups automated bookkeeping and instant finance metrics such as cash, burn and runway. + +**Legal Name:** Puzzle Financial Inc. + +**Headquarters:** 575 Market Street, Floor 5, San Francisco, CA 94105, USA + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://puzzle.io) | +| Privacy Policy | [Link](https://puzzle.io/legal/privacy) | +| Terms of Service | [Link](https://puzzle.io/legal/terms-of-service) | +| Security Page | [Link](https://puzzle.io/security) | +| Trust Page | [Link](https://trust.puzzle.io) | +| Status Page | [Link](https://status.puzzle.io/) | + +**Category:** Accounting Software + +### Certifications + +- SOC 2 Type 2 +- GDPR +- CCPA + +--- + +## Probo + +Probo is an open-source compliance platform that helps startups achieve SOC 2 and ISO 27001 certifications quickly and affordably, with expert guidance and no vendor lock-in. + +**Legal Name:** Probo Inc. + +**Headquarters:** 490 Post St, Suite 640,San Francisco, CA 94102, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.getprobo.com/) | +| Privacy Policy | [Link](https://www.getprobo.com/privacy) | +| Terms of Service | [Link](https://www.getprobo.com/terms) | +| Subprocessors List | [Link](https://www.getprobo.com/subprocessors) | + +**Category:** Compliance & risk management software + +--- + +## folk + +Lightweight, collaborative CRM that automates contact and relationship management for modern teams. + +**Legal Name:** FOLK SAS + +**Headquarters:** 31 Rue des Vinaigriers, 75010 Paris, France + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.folk.app) | +| Privacy Policy | [Link](https://www.folk.app/privacy-policy) | +| Terms of Service | [Link](https://www.folk.app/terms-of-use) | +| Security Page | [Link](https://help.folk.app/en/articles/5007534-security-privacy) | +| Status Page | [Link](https://status.folk.app/) | +| Subprocessors List | [Link](https://www.folk.app/privacy-policy#3-list-of-sub-processors) | + +**Category:** CRM + +### Certifications + +- SOC 2 Type 1 +- GDPR +- CCPA + +--- + +## Claap + +AI-powered meeting recorder and video workspace that automates post-meeting tasks and CRM enrichment. + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.claap.io) | +| Privacy Policy | [Link](https://www.claap.io/legal/privacy-policy) | +| Terms of Service | [Link](https://www.claap.io/legal/terms-and-conditions) | +| Status Page | [Link](https://claap.instatus.com/) | +| Subprocessors List | [Link](https://www.claap.io/legal/privacy-policy#sub-processors) | + +**Category:** Sales Enablement / AI Meeting Automation + +### Certifications + +- SOC 2 Type 2 +- GDPR +- CCPA + +--- + +## Pitch + +Cloud-based presentation platform that lets teams collaboratively create, design, and share visually engaging slide decks in real time. + +**Legal Name:** Pitch Software GmbH + +**Headquarters:** Joachimstraße 7, 10119 Berlin, Germany + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://pitch.com) | +| Privacy Policy | [Link](https://pitch.com/privacy-policy) | +| Terms of Service | [Link](https://pitch.com/terms-of-use) | +| Security Page | [Link](https://pitch.com/security-policy) | +| Trust Page | [Link](https://pitch.com/gdpr) | +| Status Page | [Link](https://status.pitch.com/) | +| Data Processing Agreement | [Link](https://pitch.com/dpa) | +| Subprocessors List | [Link](https://pitch.com/dpa#annex-7-2) | + +**Category:** Presentation Software + +### Certifications + +- GDPR + +--- + +## Spendesk + +Spendesk is a comprehensive spend management platform offering solutions like virtual and physical cards, invoice processing, and expense reimbursements to streamline company spending. + +**Legal Name:** Spendesk SAS + +**Headquarters:** 51 Rue de Londres, 75008 Paris, France + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.spendesk.com) | +| Privacy Policy | [Link](https://www.spendesk.com/legals/privacy/) | +| Terms of Service | [Link](https://www.spendesk.com/legals/terms/customers/) | +| Security Page | [Link](https://www.spendesk.com/spendesk-security/) | +| Trust Page | [Link](https://trust.spendesk.com/) | +| Status Page | [Link](https://status.spendesk.com/) | +| Data Processing Agreement | [Link](https://www.spendesk.com/legals/terms/customers/#Annex-three) | +| Subprocessors List | [Link](https://www.spendesk.com/legals/subprocessors/) | + +**Category:** Spend Management + +### Certifications + +- GDPR +- ISO/IEC 27001:2022 +- DORA + +--- + +## Lever + +Cloud-based talent-acquisition suite that combines applicant-tracking and candidate-relationship-management tools so organisations can source, engage and hire talent in one place. + +**Legal Name:** Lever, Inc. + +**Headquarters:** 1125 Mission Street, San Francisco, CA 94103, United States + +### Links + +| Resource | Link | +|----------|------| +| Website | [Link](https://www.lever.co) | +| Privacy Policy | [Link](https://www.lever.co/privacy-notice/) | +| Terms of Service | [Link](https://www.lever.co/agreements/tos) | +| Service Level Agreement | [Link](https://www.lever.co/agreements/sla/) | +| Security Page | [Link](https://www.lever.co/security/) | +| Status Page | [Link](https://status.lever.co/) | +| Data Processing Agreement | [Link](https://www.lever.co/agreements/dpa/) | +| Subprocessors List | [Link](https://www.lever.co/subprocessors-archive-june-2023/) | + +**Category:** Applicant Tracking / Talent Acquisition + +### Certifications + +- SOC 2 Type 2 +- ISO/IEC 27001 +- GDPR +- CAIQ +- CCPA +- EU-U.S. Privacy Shield + +--- + diff --git a/packages/vendors/data.d.ts b/packages/vendors/data.d.ts new file mode 100644 index 000000000..0cf6f9ce7 --- /dev/null +++ b/packages/vendors/data.d.ts @@ -0,0 +1,72 @@ +/** + * Type definitions for vendor data + */ + +/** + * Represents a software vendor or service provider with associated metadata + */ +export interface Vendor { + /** Display name of the vendor */ + name: string; + + /** Legal business name of the vendor */ + legalName?: string; + + /** Physical headquarters address */ + headquarterAddress?: string; + + /** Vendor's website URL */ + websiteUrl: string; + + /** URL to vendor's privacy policy */ + privacyPolicyUrl?: string; + + /** URL to vendor's terms of service */ + termsOfServiceUrl?: string; + + /** URL to vendor's service level agreement */ + serviceLevelAgreementUrl?: string; + + /** URL to service software agreement */ + serviceSoftwareAgreementUrl?: string; + + /** URL to vendor's data processing agreement */ + dataProcessingAgreementUrl?: string; + + /** URL to vendor's list of subprocessors */ + subprocessorsListUrl?: string; + + /** URL to vendor's business associate agreement */ + businessAssociateAgreementUrl?: string; + + /** Short description of the vendor/service */ + description?: string; + + /** Primary category for the vendor */ + category?: string; + + /** Security or compliance certifications held by the vendor */ + certifications?: string[]; + + /** URL to vendor's security page */ + securityPageUrl?: string; + + /** URL to vendor's trust page */ + trustPageUrl?: string; + + /** URL to vendor's status page */ + statusPageUrl?: string; +} + +/** + * Array of vendor data + */ +export type Vendors = Vendor[]; + + +/** + * Default export representing the entire vendor dataset + */ +declare const data: Vendors; + +export default data; diff --git a/packages/vendors/data.json b/packages/vendors/data.json new file mode 100644 index 000000000..073680f16 --- /dev/null +++ b/packages/vendors/data.json @@ -0,0 +1,2293 @@ +[ + { + "name": "Slack", + "headquarterAddress": "San Francisco, 50 Fremont Street, United States", + "legalName": "Slack Technologies, Inc.", + "websiteUrl": "https://slack.com", + "privacyPolicyUrl": "https://slack.com/intl/en-gb/trust/privacy/privacy-policy", + "serviceLevelAgreementUrl": "https://slack.com/intl/en-gb/terms/service-level-agreement", + "description": "Slack is a team communication platform that allows users to send messages, files, and images to each other.", + "statusPageUrl": "https://slack-status.com/", + "termsOfServiceUrl": "https://slack.com/intl/en-gb/main-services-agreement", + "category": "Communication", + "certifications": [ + "ISO/IEC 27001:2022", + "ISO/IEC 27017:2015", + "ISO/IEC 27018:2019", + "SOC2 Type 2", + "C5", + "GDPR" + ], + "securityPageUrl": "https://slack.com/intl/en-gb/trust/security" + }, + { + "name": "Zoom", + "headquarterAddress": "950 Page Mill Rd, Palo Alto, CA 94306", + "legalName": "Zoom Video Communications, Inc.", + "websiteUrl": "https://zoom.us", + "privacyPolicyUrl": "https://zoom.us/privacy", + "serviceLevelAgreementUrl": "https://explore.zoom.us/en/premier-support-terms/", + "description": "Zoom is a video communication platform that allows users to send messages, files, and images to each other.", + "category": "Communication", + "certifications": [ + "ISO/IEC 27001:2022", + "ISO/IEC 27017:2015", + "ISO/IEC 27018:2019", + "ISO/IEC 27701:2019", + "SOC2 Type 2", + "SOC2 HITRUST", + "CSTAR LEVEL 2", + "FedRAMP", + "StateRAMP", + "CJIS", + "UK Cyber Essentials Plus", + "iRAP", + "ENS", + "BSI C5", + "gpaNRW", + "ISMAP", + "ETDA", + "PCI DSS", + "GDPR" + ], + "securityPageUrl": "https://zoom.us/trust/security", + "statusPageUrl": "https://status.zoom.us/" + }, + { + "name": "Github", + "headquarterAddress": "88 Colin P Kelly Jr St, San Francisco, CA 94103", + "legalName": "GitHub, Inc.", + "websiteUrl": "https://github.com", + "privacyPolicyUrl": "https://github.com/site/privacy", + "serviceLevelAgreementUrl": "https://github.com/site/terms", + "subprocessorsListUrl": "https://docs.github.com/en/site-policy/privacy-policies/github-subprocessors", + "description": "Github is a code hosting platform for version control and collaboration.", + "category": "Code Hosting", + "certifications": [ + "SOC 1 Type 2", + "SOC 2 Type 2", + "CSA CAIQ Level 1", + "ISO/IEC 27001:2013", + "CSA STAR Level 2", + "GDPR" + ], + "securityPageUrl": "https://docs.github.com/en/code-security/security-overview/about-security-overview", + "statusPageUrl": "https://www.githubstatus.com/" + }, + { + "name": "Stripe", + "headquarterAddress": "101 Townsend St, San Francisco, CA 94103", + "legalName": "Stripe, Inc.", + "websiteUrl": "https://stripe.com", + "privacyPolicyUrl": "https://stripe.com/privacy", + "serviceLevelAgreementUrl": "https://stripe.com/legal/ssa", + "dataProcessingAgreementUrl": "https://stripe.com/legal/dpa", + "description": "Online payment processing platform that enables businesses to accept and manage digital payments, supporting various payment methods and currencies with integrated fraud protection and compliance features", + "category": "Payment Processing", + "certifications": [ + "PCI DSS v4.0", + "SOC 2 Type 2", + "SOC 1 Type 2", + "SOC 3", + "EMVCo Level 1", + "EMVCo Level 2", + "CBPR", + "PRP", + "EU-U.S. DPF", + "EU-U.S. DPF", + "GDPR" + ], + "securityPageUrl": "https://stripe.com/security", + "statusPageUrl": "https://status.stripe.com/" + }, + { + "name": "Cloudflare", + "headquarterAddress": "101 Townsend St, San Francisco, CA 94103", + "legalName": "Cloudflare, Inc.", + "websiteUrl": "https://cloudflare.com", + "privacyPolicyUrl": "https://cloudflare.com/privacy", + "serviceLevelAgreementUrl": "https://www.cloudflare.com/en-gb/business-sla", + "description": "Cloudflare is a cloud computing company that provides a range of services, including web hosting, domain name registration, and cloud storage.", + "category": "Web Hosting", + "certifications": [ + "ISO/IEC 27001:2013", + "ISO/IEC 27701:2019", + "ISO/IEC 27018:2019", + "FedRAMP", + "SOC 2 Type 2", + "PCI DSS 4.0", + "Global CBPR", + "Global PRP", + "EU Cloud Code of Conduct", + "Cyber Essentials", + "C5:2020", + "ENS", + "BSI Qualification", + "WCAG 2.1 AA and Section 508", + "APPI", + "LGPD", + "DPDP", + "GDPR", + "PDPA", + "PIPA", + "DORA", + "CCPA", + "CPRA" + ], + "securityPageUrl": "https://www.cloudflare.com/en-gb/security", + "statusPageUrl": "https://www.cloudflarestatus.com/" + }, + { + "name": "Sentry", + "headquarterAddress": "1 Market St, San Francisco, CA 94105", + "legalName": "Sentry, Inc.", + "websiteUrl": "https://sentry.io", + "privacyPolicyUrl": "https://sentry.io/privacy", + "serviceLevelAgreementUrl": "", + "description": "Sentry is a cloud-based platform for monitoring and analyzing application performance and user behavior.", + "category": "Monitoring", + "certifications": ["ISO/IEC 27001:2013", "SOC2 Type 2"], + "securityPageUrl": "https://sentry.io/security", + "statusPageUrl": "https://status.sentry.io/" + }, + { + "name": "Datadog", + "headquarterAddress": "1 Market St, San Francisco, CA 94105", + "legalName": "Datadog, Inc.", + "websiteUrl": "https://datadog.com", + "privacyPolicyUrl": "https://datadog.com/privacy", + "serviceLevelAgreementUrl": "https://datadog.com/terms", + "description": "Datadog is a cloud-based platform for monitoring and analyzing application performance and user behavior.", + "category": "Monitoring", + "certifications": [ + "CCPA", + "CSA STAR", + "DORA", + "EU-US DPF", + "FedRAMP", + "GDPR", + "HIPAA", + "ISO/IEC 27001:2022", + "ISO/IEC 27017:2015", + "GDPR" + ], + "securityPageUrl": "https://datadog.com/security", + "trustPageUrl": "https://datadog.com/trust", + "statusPageUrl": "https://status.datadoghq.com/" + }, + { + "name": "Vercel", + "headquarterAddress": "1 Market St, San Francisco, CA 94105", + "legalName": "Vercel, Inc.", + "websiteUrl": "https://vercel.com", + "privacyPolicyUrl": "https://vercel.com/legal/privacy-policy", + "serviceLevelAgreementUrl": "https://vercel.com/legal/sla", + "dataProcessingAgreementUrl": "https://vercel.com/legal/dpa", + "description": "Vercel is a cloud-based platform for monitoring and analyzing application performance and user behavior.", + "category": "Web Hosting", + "certifications": [ + "ISO/IEC 27001:2013", + "SOC2 Type 2", + "GDPR", + "PCI DSS", + "HIPAA", + "DPF", + "CCPA", + "PIPEDA" + ], + "securityPageUrl": "https://vercel.com/security", + "trustPageUrl": "https://security.vercel.com/", + "statusPageUrl": "https://status.vercel.com/" + }, + { + "name": "Sendgrid", + "headquarterAddress": "1801 California Street, Suite 500, Denver, CO 80202", + "legalName": "SendGrid, Inc.", + "websiteUrl": "https://sendgrid.com", + "privacyPolicyUrl": "https://www.twilio.com/en-us/legal/privacy", + "serviceLevelAgreementUrl": "https://sendgrid.com/terms", + "dataProcessingAgreementUrl": "https://sendgrid.com/dpa", + "description": "Cloud-based email delivery platform that provides transactional and marketing email services, offering reliable message delivery, analytics, and automation features for business communications.", + "category": "Email Marketing", + "certifications": [ + "CCPA", + "CPRA", + "GDPR", + "HIPAA", + "ISO/IEC 27001:2013", + "ISO/IEC 27017:2015", + "ISO/IEC 27018:2019", + "SOC2 Type 2", + "PCI DSS" + ], + "securityPageUrl": "https://sendgrid.com/en-us/policies/security", + "trustPageUrl": "https://security.twilio.com/", + "statusPageUrl": "https://status.sendgrid.com/" + }, + { + "name": "Figma", + "headquarterAddress": "760 Market St Floor 10, San Francisco, CA 94102", + "legalName": "Figma, Inc.", + "websiteUrl": "https://figma.com", + "privacyPolicyUrl": "https://www.figma.com/legal/privacy/", + "serviceSoftwareAgreementUrl": "https://www.figma.com/ssa/", + "description": "Cloud-based design and prototyping platform that enables collaborative interface design, wireframing, and mockup creation with real-time editing capabilities for teams.", + "category": "Design", + "certifications": [ + "SOC 2 Type 2", + "ISO/IEC 27001:2013", + "ISO/IEC 27001:2022", + "GDPR", + "ISO/IEC 27017:2015", + "ISO/IEC 27018:2019", + "SOC 3", + "CCPA", + "CSA", + "SIG", + "EU Cloud Code of Conduct", + "TISAX", + "VPAT" + ], + "securityPageUrl": "https://www.figma.com/security", + "trustPageUrl": "https://compliance.figma.com/", + "statusPageUrl": "https://status.figma.com/" + }, + { + "name": "Notion", + "headquarterAddress": "2300 Harrison St, San Francisco, CA 94110", + "legalName": "Notion Labs, Inc.", + "websiteUrl": "https://notion.so", + "privacyPolicyUrl": "https://www.notion.so/notion/Privacy-Policy-3468d120cf614d4c9014c09f6adc9091", + "serviceLevelAgreementUrl": "https://www.notion.so/notion/Service-Level-Terms-6f805fa1d4ca4463b805e2832ae8ff0d", + "subprocessorsListUrl": "https://www.notion.so/notion/Notion-s-List-of-Subprocessors-268fa5bcfa0f46b6bc29436b21676734", + "businessAssociateAgreementUrl": "https://www.notion.so/notion/Business-Associate-Agreement-909d9f4ccca041b1a23d0fe6e56fa111", + "description": "Cloud-based workspace and collaboration platform that offers document management, project management, and team communication features, allowing users to create, edit, and share content in a centralized environment.", + "category": "Project Management", + "certifications": [ + "SOC 2 Type 2", + "ISO/IEC 27001:2022", + "ISO/IEC 27701:2019", + "ISO/IEC 27017:2015", + "ISO/IEC 27018:2019", + "HIPAA", + "BSI C5", + "GDPR", + "CCPA" + ], + "statusPageUrl": "https://status.notion.so" + }, + { + "name": "Mintlify", + "headquarterAddress": "108 Ferris Place, Ithaca, NY 14850", + "legalName": "Mintlify, Inc.", + "websiteUrl": "https://mintlify.com", + "privacyPolicyUrl": "https://app.termly.io/policy-viewer/policy.html?policyUUID=95d79e73-9d6f-4e0a-8abd-2a608e8f5242", + "termsOfServiceUrl": "https://mintlify.com/legal/terms", + "description": "Mintlify is a cloud-based documentation platform that enables teams to create, manage, and share documentation for their projects.", + "category": "Documentation", + "certifications": ["SOC 2 Type 1"], + "subprocessorsListUrl": "https://security.mintlify.com", + "trustPageUrl": "https://security.mintlify.com/", + "statusPageUrl": "https://status.mintlify.com/" + }, + { + "name": "Supabase", + "headquarterAddress": "3500 S Dupont Hwy, United States", + "legalName": "Supabase, Inc.", + "websiteUrl": "https://supabase.com", + "privacyPolicyUrl": "https://supabase.com/privacy", + "termsOfServiceUrl": "https://supabase.com/terms", + "description": "Open-source Firebase alternative providing a backend-as-a-service platform with PostgreSQL database, authentication, storage, and API functionality for application development.", + "category": "Database", + "certifications": ["SOC2 Type 2", "HIPAA", "GDPR"], + "securityPageUrl": "https://supabase.com/security", + "serviceLevelAgreementUrl": "https://supabase.com/sla", + "trustPageUrl": "https://security.supabase.com/", + "dataProcessingAgreementUrl": "https://supabase.com/legal/dpa", + "statusPageUrl": "https://status.supabase.com/" + }, + { + "name": "Segment", + "headquarterAddress": "100 California St #700, San Francisco, CA 94111", + "legalName": "Segment, Inc.", + "websiteUrl": "https://segment.com", + "privacyPolicyUrl": "https://www.twilio.com/en-us/legal/privacy", + "termsOfServiceUrl": "https://www.twilio.com/en-us/legal/tos", + "serviceLevelAgreementUrl": "https://www.twilio.com/en-us/legal/service-level-agreement/segment-data-ingestion-api", + "description": "Segment is a cloud-based customer data platform that enables businesses to collect, clean, and analyze customer data from across their systems.", + "category": "Customer Data Platform", + "certifications": [ + "SOC 2 Type 2", + "ISO/IEC 27001:2022", + "GDPR", + "ISO/IEC 27018:2019", + "ISO/IEC 27017:2015", + "CCPA", + "HIPAA" + ], + "subprocessorsListUrl": "https://www.twilio.com/en-us/legal/sub-processors", + "securityPageUrl": "https://www.twilio.com/en-us/legal/security", + "trustPageUrl": "https://security.segment.com/", + "statusPageUrl": "https://status.segment.com/", + "dataProcessingAgreementUrl": "https://www.twilio.com/en-us/legal/data-protection-addendum" + }, + { + "name": "Auth0", + "headquarterAddress": "10900 NE 8th St. Bellevue, WA 98004, US", + "legalName": "Auth0, Inc.", + "websiteUrl": "https://auth0.com", + "privacyPolicyUrl": "https://www.okta.com/privacy-policy/", + "termsOfServiceUrl": "https://www.okta.com/terms-of-service/", + "description": "Auth0 is a cloud-based identity and access management platform that enables businesses to secure their applications and data.", + "category": "Identity and Access Management", + "certifications": [ + "SOC 2 Type 2", + "ISO/IEC 27001:2022", + "GDPR", + "CSA STAR", + "ISO/IEC 27018:2019", + "CCPA", + "HIPAA", + "HITECH", + "PCI DSS", + "PSD2", + "FAPI" + ], + "securityPageUrl": "https://www.okta.com/security-center/", + "trustPageUrl": "https://www.okta.com/trust-center/", + "statusPageUrl": "https://status.auth0.com/", + "dataProcessingAgreementUrl": "https://www.okta.com/trustandcompliance/#data-processing-addendum" + }, + { + "name": "Heroku", + "headquarterAddress": "415 Mission Street Suite 300 San Francisco, CA 94105", + "legalName": "Heroku, Inc.", + "websiteUrl": "https://heroku.com", + "privacyPolicyUrl": "https://www.salesforce.com/company/legal/privacy/", + "termsOfServiceUrl": "https://www.salesforce.com/company/legal/sfdc-website-terms-of-service/", + "dataProcessingAgreementUrl": "https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/Agreements/data-processing-addendum.pdf", + "subprocessorsListUrl": "https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/misc/salesforce-infrastructure-and-subprocessors.pdf", + "securityPageUrl": "https://www.heroku.com/policy/security", + "serviceLevelAgreementUrl": "https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/Salesforce_MSA.pdf", + "description": "Heroku is a cloud-based platform for building, deploying, and scaling applications.", + "category": "Cloud Platform", + "certifications": [ + "PCI-DSS", + "ISO/IEC 27001:2013", + "ISO/IEC 27017:2015", + "ISO/IEC 27018:2019", + "SOC 2 Type 2", + "SOC 1 Type 2", + "SOC 3", + "HIPAA" + ], + "statusPageUrl": "https://status.heroku.com/", + "trustPageUrl": "https://www.heroku.com/compliance" + }, + { + "name": "Linear", + "headquarterAddress": "San Francisco, California 94103, US", + "legalName": "Linear, Inc.", + "websiteUrl": "https://linear.app", + "privacyPolicyUrl": "https://linear.app/privacy", + "termsOfServiceUrl": "https://linear.app/terms", + "description": "Linear is a cloud-based project management platform that enables teams to manage their projects and tasks.", + "category": "Project Management", + "statusPageUrl": "https://linearstatus.com/", + "dataProcessingAgreementUrl": "https://linear.app/dpa", + "securityPageUrl": "https://linear.app/security", + "certifications": ["SOC 2 Type 2", "HIPAA", "GDPR"], + "trustPageUrl": "https://trustcenter.linear.app/", + "subprocessorsListUrl": "https://linear.app/dpa" + }, + { + "name": "Hubspot", + "legalName": "Hubspot, Inc.", + "headquarterAddress": "2 Canal Park Cambridge, MA 02141. United States", + "websiteUrl": "https://hubspot.com", + "privacyPolicyUrl": "https://legal.hubspot.com/privacy-policy", + "securityPageUrl": "https://legal.hubspot.com/security/", + "dataProcessingAgreementUrl": "https://legal.hubspot.com/dpa", + "termsOfServiceUrl": "https://legal.hubspot.com/terms-of-service", + "description": "Hubspot is a cloud-based marketing and sales platform that enables businesses to manage their marketing and sales activities.", + "category": "Marketing and Sales", + "subprocessorsListUrl": "https://legal.hubspot.com/sub-processors-page", + "certifications": ["GDPR", "SOC 3", "SOC 2 Type 2"], + "statusPageUrl": "https://status.hubspot.com/" + }, + { + "name": "Langfuse", + "legalName": "Langfuse, Inc.", + "headquarterAddress": "Berlin, Germany", + "websiteUrl": "https://langfuse.com", + "privacyPolicyUrl": "https://langfuse.com/privacy", + "termsOfServiceUrl": "https://langfuse.com/terms", + "statusPageUrl": "https://status.langfuse.com/", + "securityPageUrl": "https://langfuse.com/docs/data-security-privacy", + "description": "Langfuse is a cloud-based language model platform that enables businesses to build, test, and deploy language models.", + "dataProcessingAgreementUrl": "https://static.langfuse.com/legal/2025-02-17-Public-Langfuse%20DPA.docx.pdf", + "category": "Language Model", + "certifications": ["ISO/IEC 27001:2022", "SOC 2 Type 2", "GDPR", "HIPAA"] + }, + { + "name": "Google Workspace", + "legalName": "Google LLC", + "headquarterAddress": "1600 Amphitheatre Parkway, Mountain View, CA 94043, US", + "websiteUrl": "https://workspace.google.com", + "privacyPolicyUrl": "https://policies.google.com/privacy", + "termsOfServiceUrl": "https://policies.google.com/terms", + "description": "Google Workspace is a cloud-based productivity suite that enables businesses to manage their email, calendar, and documents.", + "subprocessorsListUrl": "https://workspace.google.com/terms/subprocessors/", + "dataProcessingAgreementUrl": "https://workspace.google.com/terms/09242021/dpa_terms/", + "statusPageUrl": "https://www.google.com/appsstatus/dashboard/", + "securityPageUrl": "https://workspace.google.com/security/", + "category": "Productivity", + "certifications": [ + "ISO/IEC 27001:2022", + "ISO/IEC 27017:2015", + "ISO/IEC 27018:2019", + "ISO/IEC 27701:2019", + "SOC 2 Type 2", + "SOC 3", + "GDPR", + "FedRAMP", + "HIPAA", + "BSI C5", + "MTCS" + ], + "trustPageUrl": "https://cloud.google.com/compliance" + }, + { + "name": "Algolia", + "legalName": "Algolia Inc.", + "headquarterAddress": "301 Howard St Suite 300, San Francisco, CA 94105", + "websiteUrl": "https://www.algolia.com", + "description": "Algolia is a search-as-a-service platform that enables businesses to deliver fast and relevant search and discovery experiences across websites and applications.", + "category": "Search-as-a-Service", + "certifications": [ + "ISO/IEC 27001:2022", + "ISO/IEC 27017:2015", + "SOC 2 Type 2", + "SOC 3", + "BSI C5", + "HIPAA", + "GDPR", + "CCPA", + "TRUSTe Certified Privacy" + ], + "securityPageUrl": "https://www.algolia.com/security", + "privacyPolicyUrl": "https://www.algolia.com/policies/privacy", + "termsOfServiceUrl": "https://www.algolia.com/policies/terms", + "dataProcessingAgreementUrl": "https://www.algolia.com/policies/data-processing", + "subprocessorsListUrl": "https://www.algolia.com/policies/infrastructure-and-sub-processors", + "trustPageUrl": "https://www.algolia.com/trust-center", + "serviceLevelAgreementUrl": "https://www.algolia.com/policies/sla", + "statusPageUrl": "https://status.algolia.com" + }, + { + "name": "PostHog", + "legalName": "PostHog, Inc.", + "headquarterAddress": "2261 Market St #4008, San Francisco HQ", + "websiteUrl": "https://posthog.com", + "description": "Open-source product analytics platform that enables teams to understand user behavior and optimize product performance.", + "category": "Product Analytics", + "certifications": ["SOC 2 Type 2", "GDPR", "CCPA"], + "securityPageUrl": "https://posthog.com/handbook/company/security", + "privacyPolicyUrl": "https://posthog.com/privacy", + "serviceLevelAgreementUrl": "https://posthog.com/terms", + "dataProcessingAgreementUrl": "https://posthog.com/dpa", + "subprocessorsListUrl": "https://posthog.com/dpa", + "statusPageUrl": "https://status.posthog.com/" + }, + { + "name": "Airtable", + "legalName": "Formagrid, Inc.", + "headquarterAddress": "1 Front St, San Francisco, CA 94111", + "websiteUrl": "https://airtable.com", + "privacyPolicyUrl": "https://www.airtable.com/privacy", + "termsOfServiceUrl": "https://www.airtable.com/company/tos", + "dataProcessingAgreementUrl": "https://www.airtable.com/company/dpa", + "serviceLevelAgreementUrl": "https://www.airtable.com/company/sla", + "subprocessorsListUrl": "https://www.airtable.com/company/subprocessors", + "statusPageUrl": "https://status.airtable.com/", + "securityPageUrl": "https://assets.ctfassets.net/wl95ljfippl8/1j9UbmmoSaoMNusVps3ib3/9e00936f3891c84c75ccd6a87cdb992c/Security_Whitepaper_Final_20210927.pdf", + "trustPageUrl": "https://www.airtable.com/company/trust-and-security", + "description": "Airtable is a no-code platform that combines the simplicity of a spreadsheet with the complexity of a database, enabling users to build custom applications without writing code.", + "category": "No-Code/Low-Code Platform", + "certifications": [ + "SOC 2 Type 2", + "ISO/IEC 27001:2022", + "ISO/IEC 27701:2019", + "TX-RAMP Level 2", + "GDPR", + "CPRA", + "CCPA", + "HIPAA" + ] + }, + { + "name": "OpenAI", + "legalName": "OpenAI, L.L.C.", + "headquarterAddress": "3180 18th St, San Francisco, CA 94110", + "websiteUrl": "https://openai.com", + "description": "OpenAI is an AI research and deployment company dedicated to ensuring that artificial general intelligence benefits all of humanity.", + "category": "Artificial Intelligence Research and Deployment", + "certifications": [ + "SOC 2 Type 2", + "CSA STAR Level 1", + "GDPR", + "CCPA", + "SOC 3", + "TX-RAMP" + ], + "securityPageUrl": "https://openai.com/security-and-privacy/", + "privacyPolicyUrl": "https://openai.com/policies/privacy-policy/", + "termsOfServiceUrl": "https://openai.com/policies/terms-of-use/", + "dataProcessingAgreementUrl": "https://openai.com/policies/data-processing-addendum/", + "subprocessorsListUrl": "https://openai.com/policies/sub-processor-list/", + "businessAssociateAgreementUrl": "https://openai.com/policies/business-terms/", + "trustPageUrl": "https://trust.openai.com/", + "statusPageUrl": "https://status.openai.com/" + }, + { + "name": "Anthropic", + "legalName": "Anthropic PBC", + "headquarterAddress": "548 Market St, San Francisco, CA 94104", + "websiteUrl": "https://www.anthropic.com", + "description": "Anthropic is an AI safety and research company developing reliable, interpretable, and steerable AI systems, including the Claude family of large language models.", + "category": "Artificial Intelligence / AI Safety", + "certifications": ["SOC 2 Type 1", "SOC 2 Type 2"], + "securityPageUrl": "https://trust.anthropic.com", + "privacyPolicyUrl": "https://www.anthropic.com/legal/privacy", + "termsOfServiceUrl": "https://www.anthropic.com/legal/commercial-terms", + "dataProcessingAgreementUrl": "https://assets-global.website-files.com/6548404a216c2e42eb79648b/65680354f8f4425cc8a8110c_Toothless-Anthropic_DPA_Sep-22-2023.pdf", + "subprocessorsListUrl": "https://trust.anthropic.com/subprocessors", + "trustPageUrl": "https://trust.anthropic.com", + "statusPageUrl": "https://status.anthropic.com" + }, + { + "name": "Gusto", + "headquarterAddress": "525 20th St, San Francisco, CA 94107", + "legalName": "Gusto, Inc.", + "websiteUrl": "https://gusto.com", + "privacyPolicyUrl": "https://gusto.com/about/privacy", + "termsOfServiceUrl": "https://gusto.com/about/terms", + "businessAssociateAgreementUrl": "https://support.gusto.com/article/152166121100000/The-Health-Insurance-Portability-and-Accountability-Act-of-1996-HIPAA", + "description": "Gusto is a cloud-based platform that provides payroll, benefits, and human resource management software for businesses. It handles payments to employees and contractors and manages compliance with tax, labor, and immigration laws.", + "category": "HR / Payroll", + "certifications": ["SOC 1 Type 2", "SOC 2 Type 2", "HIPAA"], + "securityPageUrl": "https://gusto.com/security", + "trustPageUrl": "https://trust.gusto.com/", + "statusPageUrl": "https://status.gusto.com/" + }, + { + "name": "Amazon Web Services (AWS)", + "headquarterAddress": "410 Terry Avenue North, Seattle, WA", + "legalName": "Amazon Web Services, Inc.", + "websiteUrl": "https://aws.amazon.com", + "privacyPolicyUrl": "https://aws.amazon.com/privacy/", + "termsOfServiceUrl": "https://aws.amazon.com/service-terms/", + "serviceLevelAgreementUrl": "https://aws.amazon.com/legal/service-level-agreements/", + "dataProcessingAgreementUrl": "https://docs.aws.amazon.com/whitepapers/latest/navigating-gdpr-compliance/aws-data-processing-addendum-dpa.html", + "subprocessorsListUrl": "https://aws.amazon.com/compliance/sub-processors/", + "businessAssociateAgreementUrl": "https://aws.amazon.com/compliance/hipaa-compliance/", + "description": "Amazon Web Services (AWS) is the world's most comprehensive and broadly adopted cloud platform, offering over 200 fully featured services from data centers globally. Millions of customers—including startups, enterprises, and government agencies—use AWS to lower costs, become more agile, and innovate faster.", + "category": "Cloud Infrastructure", + "certifications": [ + "CSA", + "ProcessUnity", + "CyberVadis", + "EC", + "ISO 9001", + "ISO 14001", + "ISO 20000", + "ISO 22301", + "ISO 27001", + "ISO 27017", + "ISO 27701", + "ISO 27018", + "ISO 42001", + "ISO 50001", + "PCI DSS Level 1", + "SOC 1 Type 2", + "SOC 2 Type 2", + "SOC 3", + "PBHVA", + "CCCS Medium", + "CJIS", + "CMMC", + "DFARS", + "DoD SRG", + "FedRAMP", + "FERPA", + "FIPS", + "FISMA", + "GxP", + "HIPAA", + "HITRUST CSF", + "ITAR", + "MPAA", + "NIST", + "PIPEDA", + "SEC Rule 17a-4(f)", + "VPAT / Section 508", + "CSAP", + "FinTech", + "FISC", + "IRAP", + "ISMAP", + "ISO 20000", + "K-ISMS", + "Medical Information Guidelines", + "MeitY", + "MTCS Tier 3", + "NISC", + "OSPAR", + "SNI 27001", + "BIO Thema-uitwerking Clouddiensten", + "C5", + "Data Protection Code of Conduct", + "CPSTIC", + "Cyber Essentials Plus", + "DESC CSP", + "ENS High", + "FINMA ISAE 3000 Type 2 Report", + "G-Cloud", + "GNS", + "GSMA", + "HDS", + "IAR", + "NHS DSPT", + "PASF", + "Pinakes", + "PiTuKri ISAE 3000 Type 2", + "TiSAX" + ], + "securityPageUrl": "https://aws.amazon.com/security/", + "trustPageUrl": "https://aws.amazon.com/trust-center/", + "statusPageUrl": "https://status.aws.amazon.com/" + }, + { + "name": "Calendly", + "legalName": "Calendly, LLC", + "headquarterAddress": "271 17th St NW. 10th Floor. Atlanta, Georgia 30363, US", + "websiteUrl": "https://calendly.com", + "description": "Online scheduling platform that automates appointment booking and meeting management for businesses and individuals.", + "category": "Scheduling/Appointment Management", + "certifications": [ + "SOC 2 Type 2", + "SOC 3", + "GDPR", + "PCI DSS", + "CSA STAR", + "CCPA", + "ISO/IEC 27001:2013" + ], + "securityPageUrl": "https://calendly.com/security", + "privacyPolicyUrl": "https://calendly.com/legal/privacy-notice", + "termsOfServiceUrl": "https://calendly.com/legal/customer-terms-conditions", + "dataProcessingAgreementUrl": "https://calendly.com/legal/data-processing-addendum", + "subprocessorsListUrl": "https://help.calendly.com/hc/en-us/articles/360047345493-Calendly-sub-processors-GDPR-CCPA", + "statusPageUrl": "https://status.calendly.com" + }, + { + "name": "jsDelivr", + "legalName": "Volentio JSD Limited", + "headquarterAddress": "Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB", + "websiteUrl": "https://www.jsdelivr.com", + "description": "jsDelivr is a free, open-source Content Delivery Network (CDN) for open-source files, providing fast and reliable delivery of JavaScript libraries and other web assets.", + "category": "Content Delivery Network (CDN)", + "certifications": ["GDPR", "CCPA"], + "securityPageUrl": "https://www.jsdelivr.com/documents/security-policy.pdf", + "privacyPolicyUrl": "https://www.jsdelivr.com/terms/privacy-policy", + "termsOfServiceUrl": "https://www.jsdelivr.com/terms", + "dataProcessingAgreementUrl": "https://www.jsdelivr.com/documents/data-processing-agreement.pdf", + "subprocessorsListUrl": "https://www.jsdelivr.com/terms/sub-processors", + "statusPageUrl": "https://status.jsdelivr.com/" + }, + { + "name": "npm", + "legalName": "npm, Inc.", + "headquarterAddress": "1999 Harrison St, Suite 1150, Oakland, CA 94612, United States", + "websiteUrl": "https://www.npmjs.com", + "description": "npm is the world's largest software registry, providing a platform for JavaScript developers to share and manage packages for Node.js and frontend projects.", + "category": "Package Management / Code Hosting", + "certifications": ["GDPR", "CCPA"], + "securityPageUrl": "https://docs.npmjs.com/policies/security/", + "privacyPolicyUrl": "https://www.npmjs.com/policies/privacy", + "termsOfServiceUrl": "https://www.npmjs.com/policies/terms", + "statusPageUrl": "https://status.npmjs.org/" + }, + { + "name": "Clerk", + "legalName": "Clerk, Inc.", + "headquarterAddress": "660 King Street, Unit 345, San Francisco, CA 94107, United States", + "websiteUrl": "https://clerk.com", + "description": "Clerk provides a comprehensive suite of embeddable UIs, flexible APIs, and admin dashboards to authenticate and manage users.", + "category": "Authentication and User Management", + "certifications": ["SOC 2 Type 2", "HIPAA", "GDPR", "CCPA"], + "securityPageUrl": "https://clerk.com/docs/security/overview", + "privacyPolicyUrl": "https://clerk.com/legal/privacy", + "termsOfServiceUrl": "https://clerk.com/legal/terms", + "dataProcessingAgreementUrl": "https://clerk.com/legal/dpa", + "subprocessorsListUrl": "https://clerk.com/legal/subprocessors", + "statusPageUrl": "https://status.clerk.com/" + }, + { + "name": "Plausible Analytics", + "legalName": "Plausible Insights OÜ", + "headquarterAddress": "Västriku tn 2, 50403, Tartu, Estonia", + "websiteUrl": "https://plausible.io/", + "description": "Open-source, privacy-focused web analytics platform that provides simple and lightweight tracking without cookies.", + "category": "Platform and user analytics", + "certifications": ["GDPR", "CCPA", "PECR"], + "securityPageUrl": "https://plausible.io/security", + "privacyPolicyUrl": "https://plausible.io/privacy", + "termsOfServiceUrl": "https://plausible.io/terms", + "dataProcessingAgreementUrl": "https://plausible.io/dpa", + "subprocessorsListUrl": "https://plausible.io/privacy", + "statusPageUrl": "https://status.plausible.io/" + }, + { + "name": "Latitude.sh", + "legalName": "Latitude.sh Ltda", + "headquarterAddress": "Rua Cubatão, 929, São Paulo, 04013-043, Brazil", + "websiteUrl": "https://www.latitude.sh", + "description": "Latitude.sh provides global bare metal cloud infrastructure, enabling developers to deploy and manage physical servers with low latency and high automation.", + "category": "Bare Metal Cloud Infrastructure", + "certifications": ["CCPA"], + "securityPageUrl": "https://www.latitude.sh/legal/security", + "privacyPolicyUrl": "https://www.latitude.sh/legal/privacy", + "termsOfServiceUrl": "https://www.latitude.sh/legal/terms", + "dataProcessingAgreementUrl": "https://www.latitude.sh/legal/dpa", + "statusPageUrl": "https://status.latitude.sh/" + }, + { + "name": "Together AI", + "legalName": "Together Computer, Inc.", + "headquarterAddress": "251 Rhode Island Street, Suite 205, San Francisco, CA 94103, United States", + "websiteUrl": "https://www.together.ai", + "description": "Together AI provides a full-stack cloud platform for developers to train, fine-tune, and deploy open-source generative AI models with high-performance infrastructure.", + "category": "AI Infrastructure / Model Hosting", + "certifications": ["SOC 2 Type 1", "HIPAA", "GDPR", "CCPA"], + "privacyPolicyUrl": "https://www.together.ai/privacy", + "termsOfServiceUrl": "https://www.together.ai/terms-of-service", + "trustPageUrl": "https://trust.together.ai", + "statusPageUrl": "https://status.together.ai/" + }, + { + "name": "Mercury", + "legalName": "Mercury Technologies Inc.", + "headquarterAddress": "660 Mission Street, San Francisco, CA 94103, United States", + "websiteUrl": "https://www.mercury.com", + "description": "Fintech company that provides banking services to early stage start-up companies. The company is not a bank, but works with banking service providers to provide bank accounts and other financial services.", + "category": "Banking Services", + "certifications": ["SOC 2 Type 1", "SOC 2 Type 2", "PCI DSS"], + "securityPageUrl": "https://mercury.com/security", + "privacyPolicyUrl": "https://www.datocms-assets.com/115132/1741892788-v5-mercury-privacy-policy-2025-03-13.pdf", + "termsOfServiceUrl": "https://www.datocms-assets.com/115132/1741383503-v7-mercury-terms-of-use-2025-03-07.pdf", + "statusPageUrl": "https://status.mercury.com/", + "trustPageUrl": "https://trust.mercury.com/" + }, + { + "name": "Signal", + "legalName": "Signal Messenger LLC", + "headquarterAddress": "650 Castro St 120 223Mountain View, CA 94041, United States", + "websiteUrl": "https://signal.org", + "description": "Signal is a secure messaging app that provides end-to-end encryption for text, voice, and video communications.", + "category": "Messaging", + "securityPageUrl": "https://signal.org/security", + "privacyPolicyUrl": "https://signal.org/legal/#privacy-policy", + "termsOfServiceUrl": "https://signal.org/legal/#terms-of-service", + "statusPageUrl": "https://status.signal.org/" + }, + { + "name": "monday.com", + "legalName": "Monday.com Ltd.", + "headquarterAddress": "Tel Aviv, Israel", + "websiteUrl": "https://monday.com", + "description": "monday.com is a work management platform that helps teams plan, track, and manage work.", + "category": "Work Management", + "certifications": [ + "ISO/IEC 27001:2022", + "ISO/IEC 27018:2014", + "ISO/IEC 27017:2015", + "ISO/IEC 27032:2023", + "ISO/IEC 27701:2019", + "HIPAA", + "GDPR", + "CCPA", + "SOC 1 Type 2", + "SOC 2 Type 2", + "SOC 3", + "TX RAMP", + "CSA" + ], + "securityPageUrl": "https://monday.com/trustcenter/datasecure/", + "privacyPolicyUrl": "https://monday.com/l/privacy/privacy-policy", + "termsOfServiceUrl": "https://monday.com/l/legal/tos", + "dataProcessingAgreementUrl": "https://monday.com/l/privacy/dpa", + "subprocessorsListUrl": "https://monday.com/l/privacy/sub-processors-subsidiaries-support", + "businessAssociateAgreementUrl": "https://monday.com/l/privacy/hipaa-baa", + "statusPageUrl": "https://status.monday.com", + "trustPageUrl": "https://monday.com/trustcenter" + }, + { + "name": "Carta", + "legalName": "eShares, Inc.", + "headquarterAddress": "333 Bush Street, San Francisco, California 94104, United States", + "websiteUrl": "https://carta.com", + "description": "Carta is a financial technology company that provides a platform for managing employee equity compensation.", + "category": "Employee Equity Compensation", + "certifications": [ + "SOC 1 Type 2", + "SOC 2 Type 2", + "ISO/IEC 27001:2022", + "GDPR", + "CCPA" + ], + "securityPageUrl": "https://carta.com/security", + "privacyPolicyUrl": "https://carta.com/privacy/", + "termsOfServiceUrl": "https://carta.com/terms-of-service/", + "dataProcessingAgreementUrl": "https://carta.com/legal/carta-europe/data-processor-agreement/", + "subprocessorsListUrl": "https://carta.com/legal/carta-europe/data-processor-agreement/", + "trustPageUrl": "https://app.conveyor.com/profile/carta" + }, + { + "name": "Apollo.io", + "legalName": "ZenLeads Inc.", + "headquarterAddress": "440 N Barranca Ave #4750, Covina, CA 91723-1722, United States", + "websiteUrl": "https://www.apollo.io/", + "description": "Apollo.io is an AI-powered sales intelligence and engagement platform that helps B2B teams find, contact, and close ideal buyers through a comprehensive database and automation tools.", + "category": "Sales Intelligence & Engagement", + "certifications": [ + "ISO 27001", + "SOC 2 Type 2", + "GDPR", + "CCPA", + "EU-U.S. DPF", + "PCI DSS v4.0.0", + "CPRA" + ], + "securityPageUrl": "https://www.apollo.io/product/security", + "privacyPolicyUrl": "https://www.apollo.io/privacy-policy", + "termsOfServiceUrl": "https://www.apollo.io/terms", + "dataProcessingAgreementUrl": "https://www.apollo.io/dpa", + "subprocessorsListUrl": "https://trust.apollo.io/", + "trustPageUrl": "https://trust.apollo.io/", + "statusPageUrl": "https://status.apollo.io/" + }, + { + "name": "Atlassian", + "legalName": "Atlassian Corporation Plc", + "headquarterAddress": "Level 6, 341 George Street, Sydney, NSW 2000, Australia", + "websiteUrl": "https://www.atlassian.com", + "description": "Atlassian provides collaboration and productivity software for teams, including products like Jira, Confluence, and Trello.", + "category": "Collaboration and Productivity Software", + "certifications": [ + "HIPAA", + "ISO/IEC 27001:2013", + "CSA STAR Level 1", + "FedRAMP", + "GDPR", + "CCPA", + "SOC 2", + "PCI-DSS", + "TISAX Level 2", + "EBA", + "ENISA", + "FINMA", + "Good Clinical, Laboratory, and Manufacturing Practices (GxP)", + "HECVAT", + "HKMA", + "Lei Geral de Proteção de Dados (LGPD)", + "MAS", + "NCSC", + "nFADP", + "Section 889", + "UKPRA", + "VPAT", + "WCAG 2.1 AA", + "ACSC - Cloud Computing Security", + "ACSC - Essential 8 Maturity Model", + "Australia Privacy Act", + "BaFin" + ], + "securityPageUrl": "https://www.atlassian.com/trust/security/security-practices", + "privacyPolicyUrl": "https://www.atlassian.com/legal/privacy-policy", + "termsOfServiceUrl": "https://www.atlassian.com/legal/atlassian-customer-agreement", + "dataProcessingAgreementUrl": "https://www.atlassian.com/legal/data-processing-addendum", + "subprocessorsListUrl": "https://www.atlassian.com/legal/sub-processors", + "businessAssociateAgreementUrl": "https://www.atlassian.com/legal/business-associate-agreement", + "trustPageUrl": "https://www.atlassian.com/trust", + "statusPageUrl": "https://status.atlassian.com/" + }, + { + "name": "Webflow", + "legalName": "Webflow, Inc.", + "headquarterAddress": "398 11th Street, 2nd Floor, San Francisco, CA 94103, United States", + "websiteUrl": "https://webflow.com", + "description": "Webflow is a no-code visual development platform that allows users to design, build, and launch responsive websites without writing code.", + "category": "Website Builder / No-Code Platform", + "certifications": [ + "PCI DSS v4.0 SAQ-D", + "ISO/IEC 27001:2022", + "ISO/IEC 27018:2019", + "ISO/IEC 27017:2015", + "SOC 2 Type 2" + ], + "privacyPolicyUrl": "https://webflow.com/legal/privacy", + "termsOfServiceUrl": "https://webflow.com/legal/terms", + "dataProcessingAgreementUrl": "https://webflow.com/legal/dpa", + "subprocessorsListUrl": "https://uploads-ssl.webflow.com/5d80c03f1edd7bd68fcdb623/657c411c020d1ee5f047f6ab_20231207%20-%20List%20of%20approved%20Sub-processors.pdf", + "trustPageUrl": "https://trust.webflow.com/", + "statusPageUrl": "https://status.webflow.com/" + }, + { + "name": "1Password", + "legalName": "AgileBits Inc.", + "headquarterAddress": "4711 Yonge Street, 10th Floor, Toronto, Ontario, M2N 6K8, Canada", + "websiteUrl": "https://1password.com", + "description": "1Password is a secure password manager that helps individuals and businesses store and manage passwords, credentials, and sensitive information across devices.", + "category": "Password Management", + "certifications": [ + "SOC 2 Type 2", + "ISO/IEC 27001", + "ISO/IEC 27017", + "ISO/IEC 27018", + "ISO/IEC 27701", + "GDPR", + "HIPAA", + "DORA" + ], + "securityPageUrl": "https://1password.com/security", + "privacyPolicyUrl": "https://1password.com/legal/privacy", + "termsOfServiceUrl": "https://1password.com/legal/terms-of-service", + "dataProcessingAgreementUrl": "https://1passwordstatic.com/files/legal-center/1Password_Online_DPA_v202504.pdf", + "subprocessorsListUrl": "https://1passwordstatic.com/files/legal-center/notice-of-updates-to-the-1password-subprocessor-list.pdf", + "statusPageUrl": "https://status.1password.com/" + }, + { + "name": "Checkr", + "legalName": "Checkr, Inc.", + "headquarterAddress": "1 Montgomery St, Suite 2400, San Francisco, CA 94104, United States", + "websiteUrl": "https://checkr.com", + "description": "Checkr provides AI-powered background check and screening services to help businesses make informed hiring decisions quickly and fairly.", + "category": "Employment Screening", + "certifications": [ + "SOC 2 Type 2", + "SOC 3", + "ISO 27001", + "GDPR", + "CCPA", + "CPRA", + "PIPEDA", + "Privacy Shield" + ], + "securityPageUrl": "https://checkr.com/trust-and-security", + "privacyPolicyUrl": "https://checkr.com/privacy-policy", + "termsOfServiceUrl": "https://checkr.com/terms-of-service", + "dataProcessingAgreementUrl": "https://checkr.com/legal/dpa", + "subprocessorsListUrl": "https://checkr.com/sub-processor-list", + "trustPageUrl": "https://security.checkr.com/", + "statusPageUrl": "https://checkrstatus.com/" + }, + { + "name": "Rippling", + "legalName": "Rippling People Center, Inc.", + "headquarterAddress": "430 California Street, 11th Floor, San Francisco, CA 94104, United States", + "websiteUrl": "https://www.rippling.com", + "description": "Rippling is an all-in-one workforce management platform that unifies HR, IT, payroll, and finance operations into a single system.", + "category": "Workforce Management", + "certifications": [ + "SOC 1 Type 1", + "SOC 2 Type 2", + "ISO 27001", + "ISO 27018", + "CSA STAR Level 2" + ], + "securityPageUrl": "https://www.rippling.com/security", + "privacyPolicyUrl": "https://app.rippling.com/legal/privacy", + "termsOfServiceUrl": "https://app.rippling.com/legal", + "dataProcessingAgreementUrl": "https://app.rippling.com/legal/dpa", + "subprocessorsListUrl": "https://app.rippling.com/legal/subprocessors" + }, + { + "name": "Vouch", + "legalName": "Vouch, Inc.", + "headquarterAddress": "250 Montgomery St, San Francisco, CA 94104", + "websiteUrl": "https://www.vouch.us", + "description": "Vouch is a digital-first insurance platform providing tailored coverage solutions for startups and high-growth companies.", + "category": "Business Insurance", + "certifications": ["CPRA"], + "privacyPolicyUrl": "https://www.vouch.us/legal/privacy-notice", + "termsOfServiceUrl": "https://www.vouch.us/legal/terms-of-use", + "dataProcessingAgreementUrl": "https://help.vouchfor.com/docs/support/security/data-processing-addendum/" + }, + { + "name": "Twilio", + "legalName": "Twilio, Inc.", + "headquarterAddress": "101 Spear Street, Fifth Floor, San Francisco, CA 94105", + "websiteUrl": "https://www.twilio.com/", + "description": "Twilio is a cloud communications platform that provides APIs for developers to add messaging, voice, video, and email capabilities to applications.", + "category": "Cloud Communications Platform", + "certifications": [ + "SOC 2 Type 2", + "GDPR", + "CCPA", + "CPRA", + "HIPAA", + "ISO 27001", + "ISO 27017", + "ISO 27018", + "PCI DSS", + "PCI DSS v4.0.0" + ], + "securityPageUrl": "https://www.twilio.com/en-us/security", + "privacyPolicyUrl": "https://www.twilio.com/en-us/legal/privacy", + "termsOfServiceUrl": "https://www.twilio.com/en-us/legal/tos", + "dataProcessingAgreementUrl": "https://www.twilio.com/en-us/legal/data-protection-addendum", + "subprocessorsListUrl": "https://www.twilio.com/en-us/legal/sub-processors", + "trustPageUrl": "https://security.twilio.com/", + "statusPageUrl": "https://status.twilio.com/" + }, + { + "name": "Qonto", + "legalName": "Olinda SAS", + "headquarterAddress": "18 rue de Navarin, 75009 Paris, France", + "websiteUrl": "https://qonto.com", + "description": "Qonto is a European business finance solution offering online banking, invoicing, expense management, and financial tools for SMEs and freelancers.", + "category": "Business Banking / Financial Services", + "certifications": ["ISO 27001", "PCI DSS", "GDPR", "DSP2", "DORA"], + "securityPageUrl": "https://qonto.com/en/security", + "privacyPolicyUrl": "https://legal.qonto.com/en?_gl=1*eyxi0u*_gcl_au*NDEzMTYzMTE2LjE3NDQ5OTkzOTA.#template-6uiwuhdde", + "termsOfServiceUrl": "https://legal.qonto.com/en", + "trustPageUrl": "https://qonto.com/en/trust" + }, + { + "name": "Cursor", + "legalName": "Anysphere Inc.", + "headquarterAddress": "403 Francisco Street, San Francisco", + "websiteUrl": "https://www.cursor.com", + "description": "AI-powered integrated development environment enhancing developer productivity with advanced AI features.", + "category": "AI Code Editor", + "certifications": ["SOC 2 Type 2", "SOC 2 Type 1"], + "securityPageUrl": "https://www.cursor.com/security", + "privacyPolicyUrl": "https://www.cursor.com/privacy", + "termsOfServiceUrl": "https://www.cursor.com/terms-of-service", + "subprocessorsListUrl": "https://trust.cursor.com/subprocessors", + "trustPageUrl": "https://trust.cursor.com", + "statusPageUrl": "https://status.cursor.com/" + }, + { + "name": "Pulley", + "legalName": "PROLIFIC LABS Incorporated", + "headquarterAddress": "6114 La Salle Ave, Suite 459, Oakland, CA 94611, United States", + "websiteUrl": "https://pulley.com", + "description": "Pulley is an equity management platform that helps startups manage cap tables, issue equity, and ensure compliance with tools for fundraising modeling, 409A valuations, and more.", + "category": "Equity Management / Cap Table Software", + "certifications": ["SOC 2 Type 2", "GDPR", "CCPA"], + "securityPageUrl": "https://pulley.com/security", + "privacyPolicyUrl": "https://pulley.com/privacy", + "termsOfServiceUrl": "https://pulley.com/terms", + "subprocessorsListUrl": "https://large-walk-bd5.notion.site/6449d3ecd2854af0a313b6e8679b5795?v=d61abc36355842bb939d49544f18dc95" + }, + { + "name": "Microsoft Azure", + "legalName": "Microsoft Corporation", + "headquarterAddress": "One Microsoft Way, Redmond, WA 98052-6399, United States", + "websiteUrl": "https://azure.microsoft.com", + "description": "Microsoft Azure is a comprehensive cloud computing platform offering a wide range of services including computing, analytics, storage, and networking.", + "category": "Cloud Computing Platform", + "certifications": [ + "CIS Benchmark", + "CSA-STAR", + "CyberGRX", + "ISO 20000-1:2011", + "ISO 22301", + "ISO 27001", + "ISO 27017", + "ISO 27018", + "ISO 27701", + "ISO 9001", + "SOC 1", + "SOC 2", + "SOC 3", + "WCAG", + "CJIS", + "CNSSI 1253", + "DFARS", + "DoD IL2", + "DoD IL5", + "DoE 10 CFR Part 810", + "EAR (US Export Administration Regulations)", + "FedRAMP", + "FIPS 140-2", + "IRS 1075", + "ITAR", + "NIST 800-171", + "NIST CSF", + "Section 508 VPATS", + "23 NYCRR Part 500", + "AFM + DNB (Netherlands)", + "APRA (Australia)", + "AMF and ACPR (France)", + "CDSA", + "DPP (UK)", + "EBA (EU)", + "FACT (UK)", + "FCA + PRA (UK)", + "FDA CFR Title 21 Part 11", + "FERPA", + "FFIEC (US)", + "FINMA (Switzerland)", + "FISC (Japan)", + "FSA (Denmark)", + "GLBA (US)", + "GSMA", + "GxP", + "HDS (France)", + "HIPAA / HITECH", + "HITRUST", + "KNF (Poland)", + "Know Your Third Party (KY3P)", + "MARS-E (US)", + "MAS + ABS (Singapore)", + "MPA", + "NBB + FSMA (Belgium)", + "NEN-7510 (Netherlands)", + "NERC", + "OSFI (Canada)", + "PCI-3DS", + "PCI-DSS", + "RBI + IRDAI (India)", + "SEC 17a-4", + "SEC 18a-6", + "FINRA 4511", + "CFTC 1.31", + "SEC Regulation SCI (US)", + "Shared Assessments", + "SOX", + "TISAX", + "ABS OSPAR (Singapore)", + "BIR 2012 (Netherlands)", + "C5 (Germany)", + "Canada Controlled Goods", + "Canadian Privacy Laws", + "CCCS Medium (Canada)", + "Cyber Essentials Plus (UK)", + "IRAP (Australia)", + "DJCP (China)", + "DORA (EU)", + "EN 301 549 (EU)", + "ENISA IAF (EU)", + "ENS (Spain)", + "EU Model Clauses", + "GB 18030 (China)", + "GDPR", + "G-Cloud (UK)", + "IDW PS 951 (Germany)", + "ISMAP (Japan)", + "ISMS (Korea)", + "IT-Grundschutz Workbook (Germany)", + "LOPD (Spain)", + "MeitY (India)", + "MTCS (Singapore)", + "My Number (Japan)", + "National Information Assurance (Qatar)", + "NZ CC Framework (New Zealand)", + "PASF (UK)", + "PDPA (Argentina)", + "Personal Data Localization (Russia)", + "TRUCS (China)" + ], + "securityPageUrl": "https://www.microsoft.com/en-us/trust-center/security/secure-future-initiative", + "privacyPolicyUrl": "https://azure.microsoft.com/en-us/explore/trusted-cloud/privacy", + "termsOfServiceUrl": "https://azure.microsoft.com/en-us/support/legal/", + "dataProcessingAgreementUrl": "https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA", + "subprocessorsListUrl": "https://www.microsoft.com/en-us/download/details.aspx?id=50426", + "businessAssociateAgreementUrl": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech", + "trustPageUrl": "https://www.microsoft.com/en-us/trust-center/product-overview", + "statusPageUrl": "https://azure.status.microsoft/" + }, + { + "name": "Microsoft 365", + "legalName": "Microsoft Corporation", + "headquarterAddress": "One Microsoft Way, Redmond, WA 98052-6399, United States", + "websiteUrl": "https://www.microsoft.com/microsoft-365", + "description": "Microsoft 365 is a cloud-based productivity suite offering applications like Word, Excel, Teams, and OneDrive, integrated with AI-powered features and enterprise-grade security.", + "category": "Productivity & Collaboration Software", + "certifications": [ + "CIS Benchmark", + "CSA-STAR", + "CyberGRX", + "ISO 20000-1:2011", + "ISO 22301", + "ISO 27001", + "ISO 27017", + "ISO 27018", + "ISO 27701", + "ISO 9001", + "SOC 1", + "SOC 2", + "SOC 3", + "WCAG", + "CJIS", + "CNSSI 1253", + "DFARS", + "DoD IL2", + "DoD IL5", + "DoE 10 CFR Part 810", + "EAR (US Export Administration Regulations)", + "FedRAMP", + "FIPS 140-2", + "IRS 1075", + "ITAR", + "NIST 800-171", + "NIST CSF", + "Section 508 VPATS", + "23 NYCRR Part 500", + "AFM + DNB (Netherlands)", + "APRA (Australia)", + "AMF and ACPR (France)", + "CDSA", + "DPP (UK)", + "EBA (EU)", + "FACT (UK)", + "FCA + PRA (UK)", + "FDA CFR Title 21 Part 11", + "FERPA", + "FFIEC (US)", + "FINMA (Switzerland)", + "FISC (Japan)", + "FSA (Denmark)", + "GLBA (US)", + "GSMA", + "GxP", + "HDS (France)", + "HIPAA / HITECH", + "HITRUST", + "KNF (Poland)", + "Know Your Third Party (KY3P)", + "MARS-E (US)", + "MAS + ABS (Singapore)", + "MPA", + "NBB + FSMA (Belgium)", + "NEN-7510 (Netherlands)", + "NERC", + "OSFI (Canada)", + "PCI-3DS", + "PCI-DSS", + "RBI + IRDAI (India)", + "SEC 17a-4", + "SEC 18a-6", + "FINRA 4511", + "CFTC 1.31", + "SEC Regulation SCI (US)", + "Shared Assessments", + "SOX", + "TISAX", + "ABS OSPAR (Singapore)", + "BIR 2012 (Netherlands)", + "C5 (Germany)", + "Canada Controlled Goods", + "Canadian Privacy Laws", + "CCCS Medium (Canada)", + "Cyber Essentials Plus (UK)", + "IRAP (Australia)", + "DJCP (China)", + "DORA (EU)", + "EN 301 549 (EU)", + "ENISA IAF (EU)", + "ENS (Spain)", + "EU Model Clauses", + "GB 18030 (China)", + "GDPR", + "G-Cloud (UK)", + "IDW PS 951 (Germany)", + "ISMAP (Japan)", + "ISMS (Korea)", + "IT-Grundschutz Workbook (Germany)", + "LOPD (Spain)", + "MeitY (India)", + "MTCS (Singapore)", + "My Number (Japan)", + "National Information Assurance (Qatar)", + "NZ CC Framework (New Zealand)", + "PASF (UK)", + "PDPA (Argentina)", + "Personal Data Localization (Russia)", + "TRUCS (China)" + ], + "securityPageUrl": "https://www.microsoft.com/en-us/trust-center/security/secure-future-initiative", + "privacyPolicyUrl": "https://www.microsoft.com/en-us/privacy/privacystatement", + "termsOfServiceUrl": "https://www.microsoft.com/en-us/servicesagreement", + "dataProcessingAgreementUrl": "https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA", + "subprocessorsListUrl": "https://www.microsoft.com/en-us/download/details.aspx?id=50426", + "businessAssociateAgreementUrl": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech", + "trustPageUrl": "https://www.microsoft.com/en-us/trust-center/product-overview", + "statusPageUrl": "https://portal.office.com/servicestatus" + }, + { + "name": "Google", + "legalName": "Google LLC", + "headquarterAddress": "1600 Amphitheatre Parkway, Mountain View, CA 94043, US", + "websiteUrl": "https://google.com", + "description": "Google is a multinational technology company specializing in internet-related services and products, including search, advertising, cloud computing, software, and hardware.", + "category": "Technology & Internet Services", + "certifications": [ + "ISO 27001", + "ISO 27017", + "ISO 27018", + "ISO 27701", + "FedRAMP", + "PCI DSS", + "SOC 2", + "SOC 3", + "GDPR" + ], + "securityPageUrl": "https://business.safety.google/", + "privacyPolicyUrl": "https://policies.google.com/privacy", + "termsOfServiceUrl": "https://policies.google.com/terms", + "trustPageUrl": "https://business.safety.google/", + "statusPageUrl": "https://ads.google.com/status/publisher/" + }, + { + "name": "Namecheap", + "legalName": "Namecheap, Inc.", + "headquarterAddress": "4600 East Washington Street, Suite 305, Phoenix, AZ 85034, United States", + "websiteUrl": "https://www.namecheap.com", + "description": "Namecheap is an ICANN-accredited domain registrar and web hosting company offering domain registration, hosting, VPN, and other web services.", + "category": "Domain Registration and Web Hosting", + "certifications": [ + "CCPA", + "GDPR" + ], + "privacyPolicyUrl": "https://www.namecheap.com/legal/general/privacy-policy/", + "termsOfServiceUrl": "https://www.namecheap.com/legal/", + "dataProcessingAgreementUrl": "https://www.namecheap.com/legal/universal/data-processing-addendum/", + "statusPageUrl": "https://www.namecheap.com/status-updates/" + }, + { + "name": "Porter", + "legalName": "Porter Technologies Inc.", + "headquarterAddress": "New York City, NY, United States", + "websiteUrl": "https://www.porter.run", + "description": "Porter is a platform-as-a-service (PaaS) that enables developers to deploy and manage applications in their own AWS, GCP, or Azure cloud accounts with minimal DevOps overhead.", + "category": "Platform as a Service (PaaS)", + "certifications": [ + "SOC 2 Type 2", + "GDPR", + "CCPA" + ], + "securityPageUrl": "https://docs.porter.run/security-and-compliance/soc2-hipaa", + "privacyPolicyUrl": "https://docs.porter.run/terms-and-privacy/privacy-policy", + "termsOfServiceUrl": "https://docs.porter.run/terms-and-privacy/terms-of-service", + "statusPageUrl": "https://status.porter.run/" + }, + { + "name": "Bitwarden", + "legalName": "Bitwarden, Inc.", + "headquarterAddress": "1 North Calle Cesar Chavez, Suite 102, Santa Barbara, CA 93103", + "websiteUrl": "https://bitwarden.com", + "description": "Bitwarden is a secure, open-source password manager that enables individuals and organizations to store, manage, and share sensitive data across devices.", + "category": "Password Management", + "certifications": [ + "ISO/IEC 27001:2022", + "SOC 2 Type 2", + "SOC 3", + "HIPAA", + "GDPR", + "CCPA", + "CPRA", + "Data Privacy Framework (DPF)" + ], + "securityPageUrl": "https://bitwarden.com/help/security-faqs/", + "privacyPolicyUrl": "https://bitwarden.com/privacy/", + "termsOfServiceUrl": "https://bitwarden.com/terms/", + "subprocessorsListUrl": "https://bitwarden.com/help/subprocessors/", + "trustPageUrl": "https://bitwarden.com/compliance/", + "statusPageUrl": "https://status.bitwarden.com/" + }, + { + "name": "Framer", + "legalName": "Framer B.V.", + "headquarterAddress": "Rozengracht 207B, 1016 LZ Amsterdam, Netherlands", + "websiteUrl": "https://www.framer.com", + "description": "Framer is a no-code website builder that enables designers and teams to create and publish professional, responsive websites with built-in CMS, animations, and real-time collaboration tools.", + "category": "Website Builder / No-Code Platform", + "certifications": [ + "SOC 2 Type 2", + "ISO/IEC 27001:2022", + "GDPR", + "CCPA", + "Privacy Shield" + ], + "securityPageUrl": "https://www.framer.com/legal/security/", + "privacyPolicyUrl": "https://www.framer.com/legal/privacy-statement/", + "termsOfServiceUrl": "https://www.framer.com/legal/terms-of-service/", + "dataProcessingAgreementUrl": "https://www.framer.com/legal/data-processing-addendum/", + "subprocessorsListUrl": "https://www.framer.com/legal/sub-processors/", + "statusPageUrl": "https://www.framerstatus.com/" + }, + { + "name": "Cal.com", + "legalName": "Cal.com, Inc.", + "headquarterAddress": "2261 Market Street #4382, San Francisco, CA 94114, USA", + "websiteUrl": "https://cal.com", + "description": "Cal.com is an open-source scheduling platform that lets individuals and organizations create customizable booking experiences and integrate scheduling into their products.", + "category": "Scheduling / Productivity", + "certifications": [ + "SOC 2 Type 2", + "ISO/IEC 27001:2022", + "HIPAA", + "GDPR", + "CCPA" + ], + "securityPageUrl": "https://cal.com/security", + "privacyPolicyUrl": "https://cal.com/privacy", + "termsOfServiceUrl": "https://cal.com/terms", + "dataProcessingAgreementUrl": "https://security.cal.com/?itemUid=c4223a81-5840-4e11-ac9f-2b812794a67e", + "subprocessorsListUrl": "https://security.cal.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57", + "businessAssociateAgreementUrl": "https://app.cal.com/apps/baa-for-hipaa", + "trustPageUrl": "https://security.cal.com", + "statusPageUrl": "https://status.cal.com" + }, + { + "name": "Mailchimp", + "legalName": "The Rocket Science Group LLC", + "headquarterAddress": "2 Sun Court Suite 400 Peachtree Corners, GA 30092", + "websiteUrl": "https://mailchimp.com", + "description": "All-in-one marketing automation platform that lets organizations create, send, and analyze email campaigns and other customer-engagement content.", + "category": "Marketing Automation", + "certifications": [ + "SOC 2 Type 2", + "ISO 27001", + "Data Privacy Framework (DPF)", + "GDPR", + "CCPA", + "VPAT", + "PCI DSS" + ], + "securityPageUrl": "https://mailchimp.com/about/security/", + "privacyPolicyUrl": "https://www.intuit.com/privacy/statement/", + "termsOfServiceUrl": "https://mailchimp.com/legal/terms/", + "dataProcessingAgreementUrl": "https://mailchimp.com/legal/data-processing-addendum/", + "subprocessorsListUrl": "https://mailchimp.com/legal/subprocessors/", + "trustPageUrl": "https://www.intuit.com/compliance/", + "statusPageUrl": "https://status.mailchimp.com/" + }, + { + "name": "Otter.ai", + "legalName": "Otter.ai, Inc.", + "headquarterAddress": "800 W El Camino Real, Suite 170, Mountain View, CA 94040", + "websiteUrl": "https://otter.ai", + "description": "AI-powered meeting assistant that captures, transcribes, and summarizes conversations in real time to make information from meetings searchable and shareable.", + "category": "AI Transcription & Meeting Intelligence", + "certifications": [ + "SOC 2 Type 2", + "ISO/IEC 27001:2022", + "GDPR", + "CCPA", + "Data Privacy Framework (DPF)" + ], + "securityPageUrl": "https://otter.ai/privacy-security", + "privacyPolicyUrl": "https://otter.ai/privacy-policy", + "termsOfServiceUrl": "https://otter.ai/terms-of-service", + "dataProcessingAgreementUrl": "https://otter.ai/terms-of-service#data-processing-agreement", + "subprocessorsListUrl": "https://otter.ai/subprocessors", + "trustPageUrl": "https://otter.ai/privacy-security", + "statusPageUrl": "https://status.otter.ai/" + }, + { + "name": "Resend", + "legalName": "Plus Five Five, Inc.", + "headquarterAddress": "2261 Market Street #5039, San Francisco, CA 94114, United States", + "websiteUrl": "https://resend.com", + "description": "Developer‑focused email delivery platform offering a modern API and tooling to build, test and send transactional and marketing emails at scale.", + "category": "Email Delivery Platform", + "certifications": [ + "SOC 2 Type 2", + "GDPR", + "CCPA", + "Data Privacy Framework (DPF)" + ], + "securityPageUrl": "https://resend.com/security", + "privacyPolicyUrl": "https://resend.com/legal/privacy-policy", + "termsOfServiceUrl": "https://resend.com/legal/terms-of-service", + "dataProcessingAgreementUrl": "https://resend.com/legal/dpa", + "subprocessorsListUrl": "https://resend.com/legal/subprocessors", + "trustPageUrl": "https://resend.com/security", + "statusPageUrl": "https://resend-status.com/" + }, + { + "name": "Pylon", + "legalName": "Pylon Labs, Inc.", + "headquarterAddress": "188 King Street, Unit 502, San Francisco, CA 94107, USA", + "websiteUrl": "https://usepylon.com", + "description": "Pylon provides a modern unified customer-support platform for B2B companies, combining ticketing, chat, knowledge base, AI assistance, customer portal and workflows in one tool.", + "category": "Customer Support Platform", + "certifications": [ + "SOC 2 Type 2", + "ISO/IEC 27001", + "GDPR", + "HIPAA" + ], + "securityPageUrl": "https://usepylon.com/security", + "privacyPolicyUrl": "https://usepylon.com/privacy", + "termsOfServiceUrl": "https://usepylon.com/terms", + "dataProcessingAgreementUrl": "https://usepylon.com/data-processing-agreement", + "subprocessorsListUrl": "https://usepylon.com/subprocessors", + "trustPageUrl": "https://trust.usepylon.com", + "statusPageUrl": "https://status.usepylon.com" + }, + { + "name": "Loops", + "legalName": "Astrodon Inc.", + "websiteUrl": "https://loops.so", + "description": "Email platform for SaaS companies that lets teams create, send and track product, marketing, and transactional emails from a single interface", + "category": "Email Marketing Platform", + "certifications": [ + "GDPR", + "CCPA" + ], + "privacyPolicyUrl": "https://loops.so/privacy", + "termsOfServiceUrl": "https://loops.so/terms", + "dataProcessingAgreementUrl": "https://loops.so/dpa", + "subprocessorsListUrl": "https://loops.so/subprocessors", + "statusPageUrl": "https://loops.statuspage.io" + }, + { + "name": "Perplexity", + "legalName": "Perplexity AI, Inc.", + "headquarterAddress": "115 Sansome St, San Francisco, CA 94104-3601, United States", + "websiteUrl": "https://www.perplexity.ai", + "description": "Generative AI answer engine that delivers real-time, source-cited answers to user questions.", + "category": "AI Answer Engine", + "certifications": [ + "SOC 2 Type 2", + "GDPR", + "CCPA", + "PCI DSS", + "CAIQ Lite" + ], + "securityPageUrl": "https://www.perplexity.ai/hub/security", + "privacyPolicyUrl": "https://www.perplexity.ai/hub/legal/privacy-policy", + "termsOfServiceUrl": "https://www.perplexity.ai/hub/legal/terms-of-service", + "dataProcessingAgreementUrl": "https://www.perplexity.ai/hub/legal/enterprise-terms-of-service", + "subprocessorsListUrl": "https://trust.perplexity.ai/", + "trustPageUrl": "https://trust.perplexity.ai", + "statusPageUrl": "https://status.perplexity.ai/" + }, + { + "name": "Google Cloud Platform", + "legalName": "Google LLC", + "headquarterAddress": "1600 Amphitheatre Parkway, Mountain View, CA 94043, USA", + "websiteUrl": "https://cloud.google.com", + "description": "Comprehensive public cloud computing platform offering infrastructure, data analytics, AI, security, and developer tools", + "category": "Cloud Computing Platform", + "certifications": [ + "Cloud Computing Compliance Controls Catalog (C5)", + "CSA", + "GSMA SAS-SM", + "Higher Education Cloud Vendor Assessment Tool (HECVAT)", + "ISO 9001:2015", + "ISO 22301:2019 & BS EN ISO 22301:2019", + "ISO 50001:2018", + "ISO/IEC 27001", + "ISO/IEC 27017", + "ISO/IEC 27018", + "ISO/IEC 27701", + "ISO/IEC 42001", + "PCI 3DS Core Security Standard", + "PCI DSS", + "PCI PIN Security", + "SOC 1", + "SOC 2", + "SOC 3", + "SWIFT on Google Cloud", + "Uptime Institute's Tier Standards", + "VPAT (WCAG, U.S. Section 508, EN 301 549)", + "FedRAMP", + "FIPS 140-2 Validated", + "HITRUST CSF", + "Independent Security Evaluators (ISE) Audit", + "Minimum Acceptable Risk Standards for Exchanges (MARS-E)", + "StateRAMP", + "TruSight", + "U.S. Cybersecurity Maturity Model Certification (CMMC)", + "U.S. Defense Information Systems Agency Provisional Authorization", + "Spain Esquema Nacional de Seguridad (ENS)", + "EU Cloud Code of Conduct", + "HDS", + "ISAE 3000 Type 2 Report (FINMA)", + "ISO 14001", + "Microfin", + "NCSC - Cyber Essentials Plus (UK)", + "Police Assured Secure Facilities (PASF)", + "Qatar National Information Assurance (NIA)", + "SWIPO Data Portability Code of Conduct", + "TISAX", + "Australia Hosting Certification Framework (HCF)", + "Cloud Security Assurance Program (CSAP) Low Level for Group C", + "Information System Security Management and Assessment Program (ISMAP)", + "IRAP (Information Security Registered Assessors Program)", + "JIIMA", + "K-ISMS (Korea)", + "MTCS (Singapore) Tier 3", + "OSPAR", + "SNI 27001", + "ETDA (Thailand)", + "GxP", + "California Consumer Privacy Act (CCPA)", + "COPPA (U.S.)", + "Export Administration Regulations (EAR)", + "FERPA (U.S.)", + "FINRA (US)", + "Google Cloud Data Processing Addendum Mapping - U.S. State Privacy Laws", + "HIPAA", + "IRS 1075", + "International Traffic in Arms Regulations (ITAR)", + "GLBA", + "OSFI (Canada)", + "FG16/5 - FCA", + "NERC CIP", + "PHIPA (Canada)", + "PIPEDA (Canada)", + "US Federal Banking Agencies", + "U.S. Defense Federal Acquisition Regulation Supplement (DFARS)", + "ACPR (France)", + "BaFin Cloud Outsourcing Guidance", + "Banco de España", + "Banco de Portugal", + "Bank of Italy", + "BRSA (Turkey)", + "BSI Critical Infrastructure (KRITIS)", + "BWG (Austria)", + "Central Bank of Ireland (Ireland)", + "CSSF (Luxembourg)", + "De Nederlandsche Bank (the Netherlands)", + "EU DORA", + "European Union’s Digital Markets Act", + "EU Solvency II", + "EU Standard Contractual Clauses", + "FINMA (Switzerland)", + "FSA (Denmark)", + "GDPR", + "Google Cloud & the EU Network and Information Systems Directive (NIS2)", + "Israel’s Privacy Protection Authority", + "KNF (Poland)", + "MaRisk AT 9 Outsourcing", + "PRA (UK)", + "revFADP (Switzerland)", + "South Africa POPI", + "SFSA (Sweden)", + "Telecoms Security Act (UK)", + "VAG (Austria)", + "SYSC 8 Outsourcing - FCA Handbook", + "UK CHECK", + "PDPL (Argentina)", + "BCRA (Argentina)", + "Central Bank of Brazil (Brazil)", + "CNBV (Mexico)", + "CNSF (Mexico)", + "CMF (Chile)", + "Superintendencia de Banca (Peru)", + "Financial Superintendence of Colombia", + "Lei Geral de Proteção de Dados (LGPD)", + "ASFI (Bolivia)", + "Act on the Protection of Personal Information (Japan)", + "APRA Prudential Standard CPS 234", + "APPs (Australia)", + "APRA (Australia)", + "Bank Negara (Malaysia)", + "Bank of Thailand (BOT)", + "BSP (Philippines)", + "DSA (Bangladesh)", + "FSC Insurance Outsourcing Directions", + "FSC Banking Outsourcing Regulations", + "GR 95/2018 guidelines", + "IA (Hong Kong)", + "HKMA (Hong Kong)", + "MAMPU (Malaysia)", + "PDPO (Hong Kong)", + "Indonesia Government Regulation No. 71 (GR 71)", + "IRDAI (India)", + "FSC (Korea)", + "Korean Financial Supervisory Service (FSS)", + "MAS TRM Guidelines", + "OIC (Thailand)", + "OJK Circular 21 of 2017 (SEOJK 21)", + "OJK Regulation No. 38 of 2016 (POJK 38)", + "PDP Law (Indonesia)", + "PDPA (Malaysia)", + "PDPA (Philippines)", + "PDPA (Taiwan)", + "PDPA (Thailand)", + "PDPD (Vietnam)", + "PIPA (Korea)", + "RBI (India)", + "Reserve Bank of New Zealand (New Zealand)", + "Securities and Exchange Board of India (SEBI)", + "PDPA (Singapore)", + "State Bank of Vietnam", + "The Privacy Act (New Zealand)" + ], + "securityPageUrl": "https://cloud.google.com/security", + "privacyPolicyUrl": "https://cloud.google.com/terms/cloud-privacy-notice", + "termsOfServiceUrl": "https://cloud.google.com/terms", + "serviceLevelAgreementUrl": "https://cloud.google.com/terms/sla", + "dataProcessingAgreementUrl": "https://cloud.google.com/terms/data-processing-terms", + "subprocessorsListUrl": "https://cloud.google.com/terms/subprocessors", + "businessAssociateAgreementUrl": "https://cloud.google.com/terms/hipaa-baa", + "trustPageUrl": "https://cloud.google.com/trust-center", + "statusPageUrl": "https://status.cloud.google.com/" + }, + { + "name": "Fly.io", + "legalName": "Fly.io, Inc.", + "headquarterAddress": "2045 W Grand Ave, Chicago, IL 60612, United States", + "websiteUrl": "https://fly.io", + "description": "Developer-focused public cloud platform offering hardware-virtualized containers (Fly Machines) with KVM isolation, automatic scaling to zero, and integrated tools for deploying and managing applications globally", + "category": "Application Hosting", + "certifications": [ + "SOC 2 Type 2", + "EU-U.S. DPF", + "UK DPF", + "Swiss-U.S. DPF", + "HIPAA", + "GDPR", + "CCPA" + ], + "securityPageUrl": "https://fly.io/security", + "privacyPolicyUrl": "https://fly.io/legal/privacy-policy", + "termsOfServiceUrl": "https://fly.io/legal/terms-of-service", + "serviceLevelAgreementUrl": "https://fly.io/legal/sla-uptime/", + "dataProcessingAgreementUrl": "https://fly.io/documents", + "subprocessorsListUrl": "https://fly.io/legal/sub-processors/", + "businessAssociateAgreementUrl": "https://fly.io/documents", + "trustPageUrl": "https://fly.io/compliance", + "statusPageUrl": "https://status.fly.io/" + }, + { + "name": "Upstash", + "legalName": "Upstash, Inc.", + "headquarterAddress": "6202 Via De Adrianna, San Jose, CA 95120, United States", + "websiteUrl": "https://upstash.com", + "description": "Serverless data platform providing HTTP-based Redis, Vector, and QStash services with global low-latency, automatic scaling, and durable storage", + "category": "Serverless Database Platform", + "certifications": [ + "SOC 2 Type 2", + "GDPR", + "CCPA" + ], + "securityPageUrl": "https://upstash.com/static/trust/security-measures.pdf", + "privacyPolicyUrl": "https://upstash.com/trust/privacy.pdf", + "termsOfServiceUrl": "https://upstash.com/trust/terms.pdf", + "serviceLevelAgreementUrl": "https://upstash.com/docs/common/help/sla", + "dataProcessingAgreementUrl": "https://upstash.com/static/trust/dpa.pdf", + "subprocessorsListUrl": "https://trust.upstash.com/subprocessors", + "trustPageUrl": "https://trust.upstash.com", + "statusPageUrl": "https://status.upstash.com" + }, + { + "name": "bunny.net", + "legalName": "BunnyWay d.o.o.", + "headquarterAddress": "Dunajska cesta 165, 1000 Ljubljana, Slovenia", + "websiteUrl": "https://bunny.net", + "description": "Cloud-based content-delivery, edge-storage and optimization platform that accelerates and secures web content worldwide.", + "category": "Content Delivery Network (CDN) / Edge Cloud", + "certifications": [ + "ISO 27001", + "GDPR" + ], + "securityPageUrl": "https://bunny.net/shield/", + "privacyPolicyUrl": "https://bunny.net/privacy/", + "termsOfServiceUrl": "https://bunny.net/tos/", + "serviceLevelAgreementUrl": "https://bunny.net/sla/", + "subprocessorsListUrl": "https://bunny.net/gdpr/sub-processors/", + "statusPageUrl": "https://status.bunny.net/" + }, + { + "name": "ClickUp", + "legalName": "Mango Technologies, Inc.", + "headquarterAddress": "350 Tenth Ave, 5th Floor, San Diego, CA 92101, United States", + "websiteUrl": "https://clickup.com", + "description": "All-in-one productivity platform for project management, document collaboration, and goal tracking.", + "category": "Project Management", + "certifications": [ + "SOC 2 Type 2", + "ISO/IEC 27001", + "ISO 27017", + "ISO 27018", + "PCI DSS", + "GDPR", + "CCPA", + "CPRA", + "LGPD", + "VCDPA" + ], + "securityPageUrl": "https://clickup.com/security", + "privacyPolicyUrl": "https://clickup.com/terms/privacy", + "termsOfServiceUrl": "https://clickup.com/terms", + "dataProcessingAgreementUrl": "https://clickup.com/terms/dpa", + "subprocessorsListUrl": "https://clickup.com/terms/dpa/subprocessors", + "trustPageUrl": "https://security.clickup.com", + "statusPageUrl": "https://status.clickup.com" + }, + { + "name": "Danami", + "legalName": "Danami International Inc.", + "headquarterAddress": "5314 56 St, Camrose, Alberta T4V 2E5, Canada", + "websiteUrl": "https://www.danami.com", + "description": "Developer of security, firewall and anti-spam extensions for the Plesk hosting control panel.", + "category": "Web-hosting security / Plesk extensions", + "privacyPolicyUrl": "https://www.danami.com/legal/privacy-policy", + "termsOfServiceUrl": "https://www.danami.com/legal/terms-of-service" + }, + { + "name": "New Relic", + "legalName": "New Relic, Inc.", + "headquarterAddress": "188 Spear St., Suite 1000, San Francisco, CA 94105, USA", + "websiteUrl": "https://newrelic.com", + "description": "New Relic provides a full-stack observability platform that lets engineering teams monitor, analyze, and improve application, infrastructure, and digital-experience performance in real time.", + "category": "Observability / Application Performance Monitoring", + "certifications": [ + "SOC 2 Type 2", + "ISO/IEC 27001:2022", + "FedRAMP Moderate", + "PCI DSS Level 1", + "TISAX Level 2", + "HITRUST CSF", + "HIPAA", + "GDPR", + "CCPA", + "Data Privacy Framework (DPF)" + ], + "securityPageUrl": "https://newrelic.com/security", + "privacyPolicyUrl": "https://newrelic.com/termsandconditions/privacy", + "termsOfServiceUrl": "https://newrelic.com/termsandconditions/terms", + "serviceLevelAgreementUrl": "https://docs.newrelic.com/docs/licenses/license-information/referenced-policies/service-level-availability-commitment/", + "dataProcessingAgreementUrl": "https://newrelic.com/sites/default/files/2023-11/New_Relic_GDPR_DPA_SCCs_Oct_2023_presigned.pdf", + "subprocessorsListUrl": "https://newrelic.com/sub-processors", + "businessAssociateAgreementUrl": "https://newrelic.com/termsandconditions/hipaabaafaq", + "trustPageUrl": "https://newrelic.com/security", + "statusPageUrl": "https://status.newrelic.com/" + }, + { + "name": "OVHcloud global", + "legalName": "OVH Groupe SAS", + "headquarterAddress": "2 Rue Kellermann, 59100 Roubaix, France", + "websiteUrl": "https://www.ovhcloud.com", + "description": "OVHcloud is a French cloud computing company offering public and private cloud products, shared hosting, and dedicated server solutions in 140 countries worldwide.", + "category": "Cloud Infrastructure Provider", + "certifications": [ + "ISO/IEC 27001", + "ISO/IEC 27017", + "ISO/IEC 27018", + "ISO/IEC 27701", + "CSA STAR", + "ISO/IEC 14001", + "ISO 50001", + "HDS", + "ANSSI SecNum Cloud", + "ACN", + "BSI C5", + "ENS", + "PCI DSS", + "SOC 1", + "SOC 2", + "SOC 3" + ], + "securityPageUrl": "https://corporate.ovhcloud.com/en/trusted-cloud/security-certifications/", + "privacyPolicyUrl": "https://www.ovhcloud.com/en/terms-and-conditions/privacy-policy/", + "termsOfServiceUrl": "https://www.ovhcloud.com/en/terms-and-conditions/contracts/", + "dataProcessingAgreementUrl": "https://storage.gra.cloud.ovh.net/v1/AUTH_325716a587c64897acbef9a4a4726e38/contracts/4683679-OVH_Data_Protection_Agreement-IE-5.1.pdf", + "subprocessorsListUrl": "https://www.ovh.ie/support/termsofservice/OVH%20IE%20Sub%20processors.pdf", + "trustPageUrl": "https://corporate.ovhcloud.com/en/trusted-cloud/security-certifications/", + "statusPageUrl": "https://www.status-ovhcloud.com/" + }, + { + "name": "OVHcloud US", + "legalName": "OVH US LLC", + "headquarterAddress": "11950 Democracy Drive, Suite 300, Reston, VA 20190, USA", + "websiteUrl": "https://us.ovhcloud.com", + "description": "Global cloud-infrastructure provider delivering bare-metal servers, public and private cloud, and web-hosting services at scale.", + "category": "Cloud Infrastructure Provider", + "certifications": [ + "ISO/IEC 27001", + "ISO/IEC 27017", + "ISO/IEC 27018", + "ISO/IEC 27701", + "SOC 1 Type 2", + "SOC 2 Type 2", + "SOC 3", + "CSA STAR", + "HIPAA", + "PCI DSS", + "Data Privacy Framework (DPF)", + "GDPR", + "CCPA" + ], + "securityPageUrl": "https://us.ovhcloud.com/personal-data-protection/security/", + "privacyPolicyUrl": "https://us.ovhcloud.com/legal/privacy-policy/", + "termsOfServiceUrl": "https://us.ovhcloud.com/legal/terms-of-service/", + "serviceLevelAgreementUrl": "https://us.ovhcloud.com/legal/", + "dataProcessingAgreementUrl": "https://us.ovhcloud.com/legal/data-processing-agreement/", + "subprocessorsListUrl": "https://storage.gra.cloud.ovh.net/v1/AUTH_325716a587c64897acbef9a4a4726e38/contracts/30c4ab8-OVH_Sub_processors-IE-2.0.pdf", + "trustPageUrl": "https://us.ovhcloud.com/compliance/", + "statusPageUrl": "https://status.us.ovhcloud.com/" + }, + { + "name": "Pipedrive", + "legalName": "Pipedrive Inc.", + "headquarterAddress": "530 Fifth Avenue, 8th Floor, Suite 802, New York, NY 10036, United States", + "websiteUrl": "https://www.pipedrive.com", + "description": "Pipedrive is a sales-focused CRM platform designed to help small businesses manage leads, track deals, and automate sales processes.", + "category": "CRM Software", + "certifications": [ + "SOC 2 Type 2", + "SOC 3", + "ISO/IEC 27001:2013", + "ISO/IEC 27701:2019", + "GDPR", + "CCPA" + ], + "securityPageUrl": "https://www.pipedrive.com/en/features/privacy-security", + "privacyPolicyUrl": "https://www.pipedrive.com/en/privacy", + "termsOfServiceUrl": "https://www.pipedrive.com/en/terms-of-service", + "dataProcessingAgreementUrl": "https://www.pipedrive.com/en/privacy/dpa", + "subprocessorsListUrl": "https://www.pipedrive.com/en/subprocessors", + "trustPageUrl": "https://www.pipedrive.com/en/trust-center", + "statusPageUrl": "https://status.pipedrive.com/" + }, + { + "name": "Plesk", + "legalName": "WebPros International GmbH (formerly Plesk International GmbH)", + "headquarterAddress": "Vordergasse 59, 8200 Schaffhausen, Switzerland", + "websiteUrl": "https://www.plesk.com", + "description": "Web-hosting control-panel software for building, securing and running websites and cloud applications.", + "category": "Web Hosting Control Panel", + "certifications": [ + "GDPR" + ], + + "securityPageUrl": "https://docs.plesk.com/en-US/obsidian/administrator-guide/plesk-administration/securing-plesk.59464/", + "privacyPolicyUrl": "https://www.plesk.com/legal/#privacy-policy", + "termsOfServiceUrl": "https://www.plesk.com/legal/#terms-of-use/", + "subprocessorsListUrl": "https://www.plesk.com/wp-content/uploads/legal/gdpr3.pdf" + }, + { + "name": "Brevo", + "legalName": "Sendinblue SAS", + "headquarterAddress": "106 boulevard Haussmann, 75008 Paris, France", + "websiteUrl": "https://www.brevo.com", + "description": "Cloud-based CRM and multichannel marketing platform that lets businesses run email, SMS, WhatsApp and automated campaigns while managing customer relationships from one suite.", + "category": "Email Marketing & CRM", + "certifications": [ + "ISO/IES 27001:2013", + "GDPR", + "CCPA", + "CASL" + ], + "securityPageUrl": "https://www.brevo.com/features/data-security/", + "privacyPolicyUrl": "https://www.brevo.com/legal/privacypolicy/", + "termsOfServiceUrl": "https://www.brevo.com/legal/termsofuse/", + "dataProcessingAgreementUrl": "https://www.brevo.com/legal/termsofuse/#dpa", + "subprocessorsListUrl": "https://www.brevo.com/legal/termsofuse/#sub-processors", + "trustPageUrl": "https://www.brevo.com/features/data-security/", + "statusPageUrl": "https://status.brevo.com/" + }, + { + "name": "Better Stack", + "legalName": "Better Stack, Inc.", + "websiteUrl": "https://betterstack.com", + "description": "Developer-first observability platform that unifies log management, uptime monitoring, incident response, and public status pages.", + "category": "Observability / Monitoring", + + "certifications": [ + "SOC 2 Type 2", + "GDPR", + "CCPA" + ], + + "securityPageUrl": "https://betterstack.com/security", + "privacyPolicyUrl": "https://betterstack.com/privacy", + "termsOfServiceUrl": "https://betterstack.com/terms", + "dataProcessingAgreementUrl": "https://betterstack.com/dpa", + "subprocessorsListUrl": "https://betterstack.com/dpa/schedules", + "statusPageUrl": "https://status.betterstack.com/" + }, + { + "name": "PlanetScale", + "legalName": "PlanetScale, Inc.", + "headquarterAddress": "535 Mission Street, 14th Floor, San Francisco, CA 94105, United States", + "websiteUrl": "https://planetscale.com", + "description": "PlanetScale provides a serverless, MySQL-compatible database-as-a-service built on Vitess that lets developers scale relational workloads without managing infrastructure.", + "category": "Database-as-a-Service", + + "certifications": [ + "SOC 2 Type 2", + "HIPAA", + "PCI DSS 4.0", + "GDPR", + "CCPA", + "LGPD" + ], + "securityPageUrl": "https://planetscale.com/docs/concepts/security", + "privacyPolicyUrl": "https://planetscale.com/legal/privacy", + "termsOfServiceUrl": "https://planetscale.com/legal/siteterms", + "serviceLevelAgreementUrl": "https://planetscale.com/legal/planetscale-service-level-agreement", + "dataProcessingAgreementUrl": "https://planetscale.com/legal/data-processing-addendum", + "subprocessorsListUrl": "https://planetscale.com/legal/subprocessors", + "trustPageUrl": "https://trust.planetscale.com", + "statusPageUrl": "https://www.planetscalestatus.com/" + }, + { + "name": "Docker", + "legalName": "Docker, Inc.", + "headquarterAddress": "3790 El Camino Real #1052, Palo Alto, CA 94306, USA", + "websiteUrl": "https://www.docker.com", + "description": "Developer platform for building, sharing, and running containerized applications.", + "category": "Container Platform", + "certifications": [ + "SOC 2 Type 2", + "ISO/IEC 27001", + "CSA Trusted Cloud", + "Data Privacy Framework (DPF)", + "GDPR", + "CCPA", + "APEC", + "CPA", + "CTDPA", + "VCDPA", + "UCPA" + ], + "securityPageUrl": "https://www.docker.com/trust/security/", + "privacyPolicyUrl": "https://www.docker.com/legal/docker-privacy-policy/", + "termsOfServiceUrl": "https://www.docker.com/legal/docker-terms-service/", + "serviceLevelAgreementUrl": "https://www.docker.com/legal/docker-subscription-service-agreement/", + "dataProcessingAgreementUrl": "https://www.docker.com/app/uploads/2022/03/2022-Docker-EU-UK-SCC-Data-Processing-Agreement.pdf", + "subprocessorsListUrl": "https://www.docker.com/trust/privacy/sub-processors/", + "trustPageUrl": "https://www.docker.com/trust/", + "statusPageUrl": "https://www.dockerstatus.com/" + }, + { + "name": "Brex", + "legalName": "Brex Inc.", + "headquarterAddress": "650 S 500W Suite 300, Salt Lake City, UT 84101, United States", + "websiteUrl": "https://www.brex.com", + "description": "AI-powered global spend platform offering corporate cards, expense management, business accounts and travel in one place.", + "category": "Spend Management & Corporate Card", + "certifications": [ + "SOC 1 Type 2", + "SOC 2 Type 2", + "PCI DSS", + "GDPR", + "CCPA" + ], + "securityPageUrl": "https://www.brex.com/support/security", + "privacyPolicyUrl": "https://www.brex.com/legal/privacy", + "termsOfServiceUrl": "https://www.brex.com/legal/user-terms", + "dataProcessingAgreementUrl": "https://www.brex.com/legal/dpa", + "subprocessorsListUrl": "https://trust-portal.brex.com", + "trustPageUrl": "https://trust-portal.brex.com", + "statusPageUrl": "https://status.brex.com/" + }, + { + "name": "Ramp", + "legalName": "Ramp Business Corporation", + "headquarterAddress": "28 West 23rd Street, Floor 2, New York, NY 10010 USA", + "websiteUrl": "https://ramp.com", + "description": "Corporate spend-management platform offering corporate cards, expense automation, bill pay, and vendor management for finance teams.", + "category": "Spend Management", + "certifications": [ + "SOC 2 Type 2", + "SOC 1 Type 2", + "ISO/IEC 27001:2022", + "PCI DSS v4.0", + "GDPR", + "CCPA", + "Data Privacy Framework (DPF)" + ], + "securityPageUrl": "https://ramp.com/security", + "privacyPolicyUrl": "https://ramp.com/legal/privacy-policy", + "termsOfServiceUrl": "https://ramp.com/legal/platform-agreement", + "dataProcessingAgreementUrl": "https://ramp.com/legal/dpa", + "subprocessorsListUrl": "https://trust.ramp.com/", + "trustPageUrl": "https://trust.ramp.com/" + }, + { + "name": "ClickHouse", + "legalName": "ClickHouse, Inc.", + "headquarterAddress": "650 Castro St., Suite 120 #92426, Mountain View, CA 94041, USA", + "websiteUrl": "https://clickhouse.com", + "description": "Open-source column-oriented database and managed cloud service for ultra-fast, real-time analytics on large-volume data.", + "category": "Real-time Analytics Database", + "certifications": [ + "SOC 2 Type 2", + "ISO/IEC 27001", + "Data Privacy Framework (DPF)", + "HIPAA", + "PCI DSS v4.0", + "GDPR", + "CCPA", + "Colorado Privacy Act (CPA)", + "Connecticut Data Privacy Act (CTDPA)", + "Virginia Consumer Data Protection Act (VCDPA)" + ], + "securityPageUrl": "https://clickhouse.com/docs/cloud/security/security-and-compliance", + "privacyPolicyUrl": "https://clickhouse.com/legal/privacy-policy", + "termsOfServiceUrl": "https://clickhouse.com/legal/agreements/terms-of-service", + "serviceLevelAgreementUrl": "https://clickhouse.com/legal/agreements/service-level-agreement", + "dataProcessingAgreementUrl": "https://clickhouse.com/legal/agreements/data-processing-addendum", + "subprocessorsListUrl": "https://clickhouse.com/legal/agreements/subprocessors", + "trustPageUrl": "https://trust.clickhouse.com", + "statusPageUrl": "https://status.clickhouse.com" + }, + { + "name": "Tailscale", + "legalName": "Tailscale Inc.", + "headquarterAddress": "401-50 Lynn Williams Street, Toronto, ON M6K 3R9, Canada", + "websiteUrl": "https://tailscale.com", + "description": "Tailscale provides a zero-config mesh VPN and zero-trust networking platform that securely connects devices and services across any network.", + "category": "Zero-Trust Networking / Mesh VPN", + "certifications": [ + "SOC 2 Type II", + "GDPR", + "CCPA" + ], + "securityPageUrl": "https://tailscale.com/security", + "privacyPolicyUrl": "https://tailscale.com/privacy-policy", + "termsOfServiceUrl": "https://tailscale.com/terms", + "serviceLevelAgreementUrl": "https://tailscale.com/sla", + "dataProcessingAgreementUrl": "https://tailscale.com/dpa", + "subprocessorsListUrl": "https://tailscale.com/dpa-subprocessors", + "trustPageUrl": "https://tailscale.com/legal", + "statusPageUrl": "https://status.tailscale.com/" + }, + { + "name": "Puzzle", + "legalName": "Puzzle Financial Inc.", + "headquarterAddress": "575 Market Street, Floor 5, San Francisco, CA 94105, USA", + "websiteUrl": "https://puzzle.io", + "description": "Puzzle provides modern, real-time accounting software that gives startups automated bookkeeping and instant finance metrics such as cash, burn and runway.", + "category": "Accounting Software", + "certifications": [ + "SOC 2 Type 2", + "GDPR", + "CCPA" + ], + "securityPageUrl": "https://puzzle.io/security", + "privacyPolicyUrl": "https://puzzle.io/legal/privacy", + "termsOfServiceUrl": "https://puzzle.io/legal/terms-of-service", + "trustPageUrl": "https://trust.puzzle.io", + "statusPageUrl": "https://status.puzzle.io/" + }, + { + "name": "Probo", + "legalName": "Probo Inc.", + "headquarterAddress": "490 Post St, Suite 640,San Francisco, CA 94102, United States", + "websiteUrl": "https://www.getprobo.com/", + "description": "Probo is an open-source compliance platform that helps startups achieve SOC 2 and ISO 27001 certifications quickly and affordably, with expert guidance and no vendor lock-in.", + "category": "Compliance & risk management software", + "privacyPolicyUrl": "https://www.getprobo.com/privacy", + "termsOfServiceUrl": "https://www.getprobo.com/terms", + "subprocessorsListUrl": "https://www.getprobo.com/subprocessors" + }, + { + "name": "folk", + "legalName": "FOLK SAS", + "headquarterAddress": "31 Rue des Vinaigriers, 75010 Paris, France", + "websiteUrl": "https://www.folk.app", + "description": "Lightweight, collaborative CRM that automates contact and relationship management for modern teams.", + "category": "CRM", + "certifications": [ + "SOC 2 Type 1", + "GDPR", + "CCPA" + ], + "securityPageUrl": "https://help.folk.app/en/articles/5007534-security-privacy", + "privacyPolicyUrl": "https://www.folk.app/privacy-policy", + "termsOfServiceUrl": "https://www.folk.app/terms-of-use", + "subprocessorsListUrl": "https://www.folk.app/privacy-policy#3-list-of-sub-processors", + "statusPageUrl": "https://status.folk.app/" + }, + { + "name": "Claap", + "websiteUrl": "https://www.claap.io", + "description": "AI-powered meeting recorder and video workspace that automates post-meeting tasks and CRM enrichment.", + "category": "Sales Enablement / AI Meeting Automation", + "certifications": [ + "SOC 2 Type 2", + "GDPR", + "CCPA" + ], + "privacyPolicyUrl": "https://www.claap.io/legal/privacy-policy", + "termsOfServiceUrl": "https://www.claap.io/legal/terms-and-conditions", + "subprocessorsListUrl": "https://www.claap.io/legal/privacy-policy#sub-processors", + "statusPageUrl": "https://claap.instatus.com/" + }, + { + "name": "Pitch", + "legalName": "Pitch Software GmbH", + "headquarterAddress": "Joachimstraße 7, 10119 Berlin, Germany", + "websiteUrl": "https://pitch.com", + "description": "Cloud-based presentation platform that lets teams collaboratively create, design, and share visually engaging slide decks in real time.", + "category": "Presentation Software", + "certifications": [ + "GDPR" + ], + "securityPageUrl": "https://pitch.com/security-policy", + "privacyPolicyUrl": "https://pitch.com/privacy-policy", + "termsOfServiceUrl": "https://pitch.com/terms-of-use", + "dataProcessingAgreementUrl": "https://pitch.com/dpa", + "subprocessorsListUrl": "https://pitch.com/dpa#annex-7-2", + "trustPageUrl": "https://pitch.com/gdpr", + "statusPageUrl": "https://status.pitch.com/" + }, + { + "name": "Spendesk", + "legalName": "Spendesk SAS", + "headquarterAddress": "51 Rue de Londres, 75008 Paris, France", + "websiteUrl": "https://www.spendesk.com", + "description": "Spendesk is a comprehensive spend management platform offering solutions like virtual and physical cards, invoice processing, and expense reimbursements to streamline company spending.", + "category": "Spend Management", + "certifications": [ + "GDPR", + "ISO/IEC 27001:2022", + "DORA" + ], + "securityPageUrl": "https://www.spendesk.com/spendesk-security/", + "privacyPolicyUrl": "https://www.spendesk.com/legals/privacy/", + "termsOfServiceUrl": "https://www.spendesk.com/legals/terms/customers/", + "dataProcessingAgreementUrl": "https://www.spendesk.com/legals/terms/customers/#Annex-three", + "subprocessorsListUrl": "https://www.spendesk.com/legals/subprocessors/", + "trustPageUrl": "https://trust.spendesk.com/", + "statusPageUrl": "https://status.spendesk.com/" + }, + { + "name": "Lever", + "legalName": "Lever, Inc.", + "headquarterAddress": "1125 Mission Street, San Francisco, CA 94103, United States", + "websiteUrl": "https://www.lever.co", + "description": "Cloud-based talent-acquisition suite that combines applicant-tracking and candidate-relationship-management tools so organisations can source, engage and hire talent in one place.", + "category": "Applicant Tracking / Talent Acquisition", + "certifications": [ + "SOC 2 Type 2", + "ISO/IEC 27001", + "GDPR", + "CAIQ", + "CCPA", + "EU-U.S. Privacy Shield" + ], + "securityPageUrl": "https://www.lever.co/security/", + "privacyPolicyUrl": "https://www.lever.co/privacy-notice/", + "termsOfServiceUrl": "https://www.lever.co/agreements/tos", + "serviceLevelAgreementUrl": "https://www.lever.co/agreements/sla/", + "dataProcessingAgreementUrl": "https://www.lever.co/agreements/dpa/", + "subprocessorsListUrl": "https://www.lever.co/subprocessors-archive-june-2023/", + "statusPageUrl": "https://status.lever.co/" + } + ] + \ No newline at end of file diff --git a/packages/vendors/package.json b/packages/vendors/package.json new file mode 100644 index 000000000..c5a4b1d18 --- /dev/null +++ b/packages/vendors/package.json @@ -0,0 +1,21 @@ +{ + "name": "@probo/vendors", + "version": "0.0.1", + "publishConfig": { + "access": "public" + }, + "files": [ + "data.json", + "LICENSE.md" + ], + "scripts": { + "build:md": "node scripts/build-md.mjs" + }, + "exports": { + ".": { + "types": "./data.d.ts", + "default": "./data.json" + } + }, + "license": "CC BY-SA 4.0" +} diff --git a/packages/vendors/scripts/build-md.mjs b/packages/vendors/scripts/build-md.mjs new file mode 100644 index 000000000..c30e346f2 --- /dev/null +++ b/packages/vendors/scripts/build-md.mjs @@ -0,0 +1,107 @@ +import { readFile, writeFile } from "node:fs/promises"; +import { createWriteStream } from "node:fs"; +import path from "node:path"; + +const data = await readFile(path.join(import.meta.dirname, '../data.json'), 'utf8'); +const vendors = JSON.parse(data); + +const output = path.join(import.meta.dirname, '../VENDORS.md') +const file = createWriteStream(output); + +const formatAsList = (array) => { + if (!array || array.length === 0) return ''; + if (typeof array === 'string') { + return array.split(',').map(item => `- ${item.trim()}`).join('\n'); + } + return array.map(item => `- ${item}`).join('\n'); +}; + +file.write('# Vendors\n\n'); + +for (const vendor of vendors) { + // Vendor name and description + file.write(`## ${vendor.name}\n\n`); + if (vendor.description) { + file.write(`${vendor.description}\n\n`); + } + + if (vendor.legalName) { + file.write(`**Legal Name:** ${vendor.legalName}\n\n`); + } + + if (vendor.headquarterAddress) { + file.write(`**Headquarters:** ${vendor.headquarterAddress}\n\n`); + } + + file.write('### Links\n\n'); + file.write('| Resource | Link |\n'); + file.write('|----------|------|\n'); + + if (vendor.websiteUrl) { + file.write(`| Website | [Link](${vendor.websiteUrl}) |\n`); + } + + if (vendor.privacyPolicyUrl) { + file.write(`| Privacy Policy | [Link](${vendor.privacyPolicyUrl}) |\n`); + } + + if (vendor.termsOfServiceUrl && vendor.termsOfServiceUrl !== 'undefined') { + file.write(`| Terms of Service | [Link](${vendor.termsOfServiceUrl}) |\n`); + } + + if (vendor.serviceLevelAgreementUrl && vendor.serviceLevelAgreementUrl !== 'undefined') { + file.write(`| Service Level Agreement | [Link](${vendor.serviceLevelAgreementUrl}) |\n`); + } + + if (vendor.securityPageUrl && vendor.securityPageUrl !== 'undefined') { + file.write(`| Security Page | [Link](${vendor.securityPageUrl}) |\n`); + } + + if (vendor.trustPageUrl && vendor.trustPageUrl !== 'undefined') { + file.write(`| Trust Page | [Link](${vendor.trustPageUrl}) |\n`); + } + + if (vendor.statusPageUrl && vendor.statusPageUrl !== 'undefined') { + file.write(`| Status Page | [Link](${vendor.statusPageUrl}) |\n`); + } + + if (vendor.dataProcessingAgreementUrl && vendor.dataProcessingAgreementUrl !== 'undefined') { + file.write(`| Data Processing Agreement | [Link](${vendor.dataProcessingAgreementUrl}) |\n`); + } + + if (vendor.businessAssociateAgreementUrl && vendor.businessAssociateAgreementUrl !== 'undefined') { + file.write(`| Business Associate Agreement | [Link](${vendor.businessAssociateAgreementUrl}) |\n`); + } + + if (vendor.serviceSoftwareAgreementUrl && vendor.serviceSoftwareAgreementUrl !== 'undefined') { + file.write(`| Service Software Agreement | [Link](${vendor.serviceSoftwareAgreementUrl}) |\n`); + } + + if (vendor.subprocessorsListUrl && vendor.subprocessorsListUrl !== 'undefined') { + file.write(`| Subprocessors List | [Link](${vendor.subprocessorsListUrl}) |\n`); + } + + file.write('\n'); + + if (vendor.categories && vendor.categories !== 'undefined') { + file.write(`**Categories:** ${vendor.categories}\n\n`); + } else if (vendor.category && vendor.category !== 'undefined') { + file.write(`**Category:** ${vendor.category}\n\n`); + } + + if (vendor.certifications && vendor.certifications !== 'undefined') { + file.write('### Certifications\n\n'); + file.write(formatAsList(vendor.certifications)); + file.write('\n\n'); + } + + if (vendor.subprocessors && vendor.subprocessors !== 'undefined') { + file.write('### Subprocessors\n\n'); + file.write(formatAsList(vendor.subprocessors)); + file.write('\n\n'); + } + + file.write('---\n\n'); +} + +file.end();