Update vendors.json

•	Appolo
	•	Atlassian
	•	Webflow
	•	1Password
	•	Checker
	•	Reppling
	•	Vouch
	•	Slack
	•	Pulley
	•	Sendgrid
	•	Twilio (bonus)
	•	Qonto
	•	Cursor
	•	Microsoft 365 (same as Microsoft Team)
	•	Microsoft Azure
	•	Google (for analytics and tag manager)

Signed-off-by: Rod44 <43315459+Rod44@users.noreply.github.com>
This commit is contained in:
Rod44
2025-04-18 15:37:37 -07:00
committed by Bryan Frimin
parent e9189e9d02
commit a2e7aa5de2

View File

@@ -846,5 +846,546 @@
"dataProcessingAgreementUrl": "https://carta.com/legal/carta-europe/data-processor-agreement/",
"subprocessorsListUrl": "https://carta.com/legal/carta-europe/data-processor-agreement/",
"trustPageUrl": "https://app.conveyor.com/profile/carta"
},
{
"name": "Apollo.io",
"legalName": "ZenLeads Inc.",
"headquarterAddress": "440 N Barranca Ave #4750, Covina, CA 91723-1722, United States",
"websiteUrl": "https://www.apollo.io/",
"description": "Apollo.io is an AI-powered sales intelligence and engagement platform that helps B2B teams find, contact, and close ideal buyers through a comprehensive database and automation tools.",
"category": "Sales Intelligence & Engagement",
"certifications": [
"ISO 27001",
"SOC 2 Type II",
"GDPR",
"CCPA",
"EU-U.S. DPF",
"PCI DSS v4.0.0",
"CPRA"
],
"securityPageUrl": "https://www.apollo.io/product/security",
"privacyPolicyUrl": "https://www.apollo.io/privacy-policy",
"termsOfServiceUrl": "https://www.apollo.io/terms",
"dataProcessingAgreementUrl": "https://www.apollo.io/dpa",
"subprocessorsListUrl": "https://trust.apollo.io/",
"trustPageUrl": "https://trust.apollo.io/",
"statusPageUrl": "https://status.apollo.io/"
},
{
"name": "Atlassian",
"legalName": "Atlassian Corporation Plc",
"headquarterAddress": "Level 6, 341 George Street, Sydney, NSW 2000, Australia",
"websiteUrl": "https://www.atlassian.com",
"description": "Atlassian provides collaboration and productivity software for teams, including products like Jira, Confluence, and Trello.",
"category": "Collaboration and Productivity Software",
"certifications": [
"HIPAA",
"ISO/IEC 27001:2013",
"CSA STAR Level 1",
"FedRAMP",
"GDPR",
"CCPA",
"SOC 2",
"PCI-DSS",
"TISAX Level 2",
"EBA",
"ENISA",
"FINMA",
"Good Clinical, Laboratory, and Manufacturing Practices (GxP)",
"HECVAT",
"HKMA",
"Lei Geral de Proteção de Dados (LGPD)",
"MAS",
"NCSC",
"nFADP",
"Section 889",
"UKPRA",
"VPAT",
"WCAG 2.1 AA",
"ACSC - Cloud Computing Security",
"ACSC - Essential 8 Maturity Model",
"Australia Privacy Act",
"BaFin"
],
"securityPageUrl": "https://www.atlassian.com/trust/security/security-practices",
"privacyPolicyUrl": "https://www.atlassian.com/legal/privacy-policy",
"termsOfServiceUrl": "https://www.atlassian.com/legal/atlassian-customer-agreement",
"dataProcessingAgreementUrl": "https://www.atlassian.com/legal/data-processing-addendum",
"subprocessorsListUrl": "https://www.atlassian.com/legal/sub-processors",
"businessAssociateAgreementUrl": "https://www.atlassian.com/legal/business-associate-agreement",
"trustPageUrl": "https://www.atlassian.com/trust",
"statusPageUrl": "https://status.atlassian.com/"
},
{
"name": "Webflow",
"legalName": "Webflow, Inc.",
"headquarterAddress": "398 11th Street, 2nd Floor, San Francisco, CA 94103, United States",
"websiteUrl": "https://webflow.com",
"description": "Webflow is a no-code visual development platform that allows users to design, build, and launch responsive websites without writing code.",
"category": "Website Builder / No-Code Platform",
"certifications": [
"PCI DSS v4.0 SAQ-D",
"ISO/IEC 27001:2022",
"ISO/IEC 27018:2019",
"ISO/IEC 27017:2015",
"SOC 2 Type 2"
],
"privacyPolicyUrl": "https://webflow.com/legal/privacy",
"termsOfServiceUrl": "https://webflow.com/legal/terms",
"dataProcessingAgreementUrl": "https://webflow.com/legal/dpa",
"subprocessorsListUrl": "https://uploads-ssl.webflow.com/5d80c03f1edd7bd68fcdb623/657c411c020d1ee5f047f6ab_20231207%20-%20List%20of%20approved%20Sub-processors.pdf",
"trustPageUrl": "https://trust.webflow.com/",
"statusPageUrl": "https://status.webflow.com/"
},
{
"name": "1Password",
"legalName": "AgileBits Inc.",
"headquarterAddress": "4711 Yonge Street, 10th Floor, Toronto, Ontario, M2N 6K8, Canada",
"websiteUrl": "https://1password.com",
"description": "1Password is a secure password manager that helps individuals and businesses store and manage passwords, credentials, and sensitive information across devices.",
"category": "Password Management",
"certifications": [
"SOC 2 Type 2",
"ISO/IEC 27001",
"ISO/IEC 27017",
"ISO/IEC 27018",
"ISO/IEC 27701",
"GDPR",
"HIPAA",
"DORA"
],
"securityPageUrl": "https://1password.com/security",
"privacyPolicyUrl": "https://1password.com/legal/privacy",
"termsOfServiceUrl": "https://1password.com/legal/terms-of-service",
"dataProcessingAgreementUrl": "https://1passwordstatic.com/files/legal-center/1Password_Online_DPA_v202504.pdf",
"subprocessorsListUrl": "https://1passwordstatic.com/files/legal-center/notice-of-updates-to-the-1password-subprocessor-list.pdf",
"statusPageUrl": "https://status.1password.com/"
},
{
"name": "Checkr",
"legalName": "Checkr, Inc.",
"headquarterAddress": "1 Montgomery St, Suite 2400, San Francisco, CA 94104, United States",
"websiteUrl": "https://checkr.com",
"description": "Checkr provides AI-powered background check and screening services to help businesses make informed hiring decisions quickly and fairly.",
"category": "Employment Screening",
"certifications": [
"SOC 2 Type II",
"SOC 3",
"ISO 27001",
"GDPR",
"CCPA",
"CPRA",
"PIPEDA",
"Privacy Shield"
],
"securityPageUrl": "https://checkr.com/trust-and-security",
"privacyPolicyUrl": "https://checkr.com/privacy-policy",
"termsOfServiceUrl": "https://checkr.com/terms-of-service",
"dataProcessingAgreementUrl": "https://checkr.com/legal/dpa",
"subprocessorsListUrl": "https://checkr.com/sub-processor-list",
"trustPageUrl": "https://security.checkr.com/",
"statusPageUrl": "https://checkrstatus.com/"
},
{
"name": "Rippling",
"legalName": "Rippling People Center, Inc.",
"headquarterAddress": "430 California Street, 11th Floor, San Francisco, CA 94104, United States",
"websiteUrl": "https://www.rippling.com",
"description": "Rippling is an all-in-one workforce management platform that unifies HR, IT, payroll, and finance operations into a single system.",
"category": "Workforce Management",
"certifications": [
"SOC 1 Type I",
"SOC 2 Type II",
"ISO 27001",
"ISO 27018",
"CSA STAR Level 2"
],
"securityPageUrl": "https://www.rippling.com/security",
"privacyPolicyUrl": "https://app.rippling.com/legal/privacy",
"termsOfServiceUrl": "https://app.rippling.com/legal",
"dataProcessingAgreementUrl": "https://app.rippling.com/legal/dpa",
"subprocessorsListUrl": "https://app.rippling.com/legal/subprocessors",
},
{
"name": "Vouch",
"legalName": "Vouch, Inc.",
"headquarterAddress": "250 Montgomery St, San Francisco, CA 94104",
"websiteUrl": "https://www.vouch.us",
"description": "Vouch is a digital-first insurance platform providing tailored coverage solutions for startups and high-growth companies.",
"category": "Business Insurance",
"certifications": [
"CPRA"
],
"privacyPolicyUrl": "https://www.vouch.us/legal/privacy-notice",
"termsOfServiceUrl": "https://www.vouch.us/legal/terms-of-use",
"dataProcessingAgreementUrl": "https://help.vouchfor.com/docs/support/security/data-processing-addendum/"
},
{
"name": "SendGrid",
"legalName": "Twilio, Inc.",
"headquarterAddress": "101 Spear Street, Fifth Floor, San Francisco, CA 94105",
"websiteUrl": "https://sendgrid.com",
"description": "SendGrid is a cloud-based email delivery platform that enables businesses to send transactional and marketing emails at scale with high deliverability.",
"category": "Email Delivery & Marketing",
"certifications": [
"SOC 2 Type II",
"GDPR",
"CCPA",
"CPRA",
"HIPAA",
"ISO 27001",
"ISO 27017",
"ISO 27018",
"PCI DSS",
"PCI DSS v4.0.0"
],
"securityPageUrl": "https://sendgrid.com/en-us/policies/security",
"privacyPolicyUrl": "https://www.twilio.com/en-us/legal/privacy",
"termsOfServiceUrl": "https://www.twilio.com/en-us/legal/tos",
"dataProcessingAgreementUrl": "https://www.twilio.com/en-us/legal/data-protection-addendum",
"subprocessorsListUrl": "https://www.twilio.com/en-us/legal/sub-processors",
"trustPageUrl": "https://www.twilio.com/en-us/trust-center",
"statusPageUrl": "https://status.sendgrid.com/"
},
{
"name": "Twilio",
"legalName": "Twilio, Inc.",
"headquarterAddress": "101 Spear Street, Fifth Floor, San Francisco, CA 94105",
"websiteUrl": "https://www.twilio.com/",
"description": "SendGrid is a cloud-based email delivery platform that enables businesses to send transactional and marketing emails at scale with high deliverability.",
"category": "Email Delivery & Marketing",
"certifications": [
"SOC 2 Type II",
"GDPR",
"CCPA",
"CPRA",
"HIPAA",
"ISO 27001",
"ISO 27017",
"ISO 27018",
"PCI DSS",
"PCI DSS v4.0.0"
],
"securityPageUrl": "https://www.twilio.com/en-us/security",
"privacyPolicyUrl": "https://www.twilio.com/en-us/legal/privacy",
"termsOfServiceUrl": "https://www.twilio.com/en-us/legal/tos",
"dataProcessingAgreementUrl": "https://www.twilio.com/en-us/legal/data-protection-addendum",
"subprocessorsListUrl": "https://www.twilio.com/en-us/legal/sub-processors",
"trustPageUrl": "https://security.twilio.com/",
"statusPageUrl": "https://status.twilio.com/"
},
{
"name": "Qonto",
"legalName": "Olinda SAS",
"headquarterAddress": "18 rue de Navarin, 75009 Paris, France",
"websiteUrl": "https://qonto.com",
"description": "Qonto is a European business finance solution offering online banking, invoicing, expense management, and financial tools for SMEs and freelancers.",
"category": "Business Banking / Financial Services",
"certifications": [
"ISO 27001",
"PCI DSS",
"GDPR",
"DSP2",
"DORA"
],
"securityPageUrl": "https://qonto.com/en/security",
"privacyPolicyUrl": "https://legal.qonto.com/en?_gl=1*eyxi0u*_gcl_au*NDEzMTYzMTE2LjE3NDQ5OTkzOTA.#template-6uiwuhdde",
"termsOfServiceUrl": "https://legal.qonto.com/en",
"trustPageUrl": "https://qonto.com/en/trust"
},
{
"name": "Cursor",
"legalName": "Anysphere Inc.",
"headquarterAddress": "403 Francisco Street, San Francisco",
"websiteUrl": "https://www.cursor.com",
"description": "AI-powered integrated development environment enhancing developer productivity with advanced AI features.",
"category": "AI Code Editor",
"certifications": [
"SOC 2 Type 2",
"SOC 2 TYPE 1"
],
"securityPageUrl": "https://www.cursor.com/security",
"privacyPolicyUrl": "https://www.cursor.com/privacy",
"termsOfServiceUrl": "https://www.cursor.com/terms-of-service",
"subprocessorsListUrl": "https://trust.cursor.com/subprocessors",
"trustPageUrl": "https://trust.cursor.com",
"statusPageUrl": "https://status.cursor.com/"
},
{
"name": "Pulley",
"legalName": "PROLIFIC LABS Incorporated",
"headquarterAddress": "6114 La Salle Ave, Suite 459, Oakland, CA 94611, United States",
"websiteUrl": "https://pulley.com",
"description": "Pulley is an equity management platform that helps startups manage cap tables, issue equity, and ensure compliance with tools for fundraising modeling, 409A valuations, and more.",
"category": "Equity Management / Cap Table Software",
"certifications": [
"SOC 2 Type 2",
"GDPR",
"CCPA"
],
"securityPageUrl": "https://pulley.com/security",
"privacyPolicyUrl": "https://pulley.com/privacy",
"termsOfServiceUrl": "https://pulley.com/terms",
"subprocessorsListUrl": "https://large-walk-bd5.notion.site/6449d3ecd2854af0a313b6e8679b5795?v=d61abc36355842bb939d49544f18dc95",
},
{
"name": "Microsoft Azure",
"legalName": "Microsoft Corporation",
"headquarterAddress": "One Microsoft Way, Redmond, WA 98052-6399, United States",
"websiteUrl": "https://azure.microsoft.com",
"description": "Microsoft Azure is a comprehensive cloud computing platform offering a wide range of services including computing, analytics, storage, and networking.",
"category": "Cloud Computing Platform",
"certifications": [
"CIS Benchmark",
"CSA-STAR",
"CyberGRX",
"ISO 20000-1:2011",
"ISO 22301",
"ISO 27001",
"ISO 27017",
"ISO 27018",
"ISO 27701",
"ISO 9001",
"SOC 1",
"SOC 2",
"SOC 3",
"WCAG",
"CJIS",
"CNSSI 1253",
"DFARS",
"DoD IL2",
"DoD IL5",
"DoE 10 CFR Part 810",
"EAR (US Export Administration Regulations)",
"FedRAMP",
"FIPS 140-2",
"IRS 1075",
"ITAR",
"NIST 800-171",
"NIST CSF",
"Section 508 VPATS",
"23 NYCRR Part 500",
"AFM + DNB (Netherlands)",
"APRA (Australia)",
"AMF and ACPR (France)",
"CDSA",
"DPP (UK)",
"EBA (EU)",
"FACT (UK)",
"FCA + PRA (UK)",
"FDA CFR Title 21 Part 11",
"FERPA",
"FFIEC (US)",
"FINMA (Switzerland)",
"FISC (Japan)",
"FSA (Denmark)",
"GLBA (US)",
"GSMA",
"GxP",
"HDS (France)",
"HIPAA / HITECH",
"HITRUST",
"KNF (Poland)",
"Know Your Third Party (KY3P)",
"MARS-E (US)",
"MAS + ABS (Singapore)",
"MPA",
"NBB + FSMA (Belgium)",
"NEN-7510 (Netherlands)",
"NERC",
"OSFI (Canada)",
"PCI-3DS",
"PCI-DSS",
"RBI + IRDAI (India)",
"SEC 17a-4",
"SEC 18a-6",
"FINRA 4511",
"CFTC 1.31",
"SEC Regulation SCI (US)",
"Shared Assessments",
"SOX",
"TISAX",
"ABS OSPAR (Singapore)",
"BIR 2012 (Netherlands)",
"C5 (Germany)",
"Canada Controlled Goods",
"Canadian Privacy Laws",
"CCCS Medium (Canada)",
"Cyber Essentials Plus (UK)",
"IRAP (Australia)",
"DJCP (China)",
"DORA (EU)",
"EN 301 549 (EU)",
"ENISA IAF (EU)",
"ENS (Spain)",
"EU Model Clauses",
"GB 18030 (China)",
"GDPR",
"G-Cloud (UK)",
"IDW PS 951 (Germany)",
"ISMAP (Japan)",
"ISMS (Korea)",
"IT-Grundschutz Workbook (Germany)",
"LOPD (Spain)",
"MeitY (India)",
"MTCS (Singapore)",
"My Number (Japan)",
"National Information Assurance (Qatar)",
"NZ CC Framework (New Zealand)",
"PASF (UK)",
"PDPA (Argentina)",
"Personal Data Localization (Russia)",
"TRUCS (China)"
],
"securityPageUrl": "https://www.microsoft.com/en-us/trust-center/security/secure-future-initiative",
"privacyPolicyUrl": "https://azure.microsoft.com/en-us/explore/trusted-cloud/privacy",
"termsOfServiceUrl": "https://azure.microsoft.com/en-us/support/legal/",
"dataProcessingAgreementUrl": "https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA",
"subprocessorsListUrl": "https://www.microsoft.com/en-us/download/details.aspx?id=50426",
"businessAssociateAgreementUrl": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech",
"trustPageUrl": "https://www.microsoft.com/en-us/trust-center/product-overview",
"statusPageUrl": "https://azure.status.microsoft/"
},
{
"name": "Microsoft 365",
"legalName": "Microsoft Corporation",
"headquarterAddress": "One Microsoft Way, Redmond, WA 98052-6399, United States",
"websiteUrl": "https://www.microsoft.com/microsoft-365",
"description": "Microsoft 365 is a cloud-based productivity suite offering applications like Word, Excel, Teams, and OneDrive, integrated with AI-powered features and enterprise-grade security.",
"category": "Productivity & Collaboration Software",
"certifications": [
"CIS Benchmark",
"CSA-STAR"
"CyberGRX",
"ISO 20000-1:2011",
"ISO 22301",
"ISO 27001",
"ISO 27017",
"ISO 27018",
"ISO 27701",
"ISO 9001",
"SOC 1",
"SOC 2",
"SOC 3",
"WCAG",
"CJIS",
"CNSSI 1253",
"DFARS",
"DoD IL2",
"DoD IL5",
"DoE 10 CFR Part 810",
"EAR (US Export Administration Regulations)",
"FedRAMP",
"FIPS 140-2",
"IRS 1075",
"ITAR",
"NIST 800-171",
"NIST CSF",
"Section 508 VPATS",
"23 NYCRR Part 500",
"AFM + DNB (Netherlands)",
"APRA (Australia)",
"AMF and ACPR (France)",
"CDSA",
"DPP (UK)",
"EBA (EU)",
"FACT (UK)",
"FCA + PRA (UK)",
"FDA CFR Title 21 Part 11",
"FERPA",
"FFIEC (US)",
"FINMA (Switzerland)",
"FISC (Japan)",
"FSA (Denmark)",
"GLBA (US)",
"GSMA",
"GxP",
"HDS (France)",
"HIPAA / HITECH",
"HITRUST",
"KNF (Poland)",
"Know Your Third Party (KY3P)",
"MARS-E (US)",
"MAS + ABS (Singapore)",
"MPA",
"NBB + FSMA (Belgium)",
"NEN-7510 (Netherlands)",
"NERC",
"OSFI (Canada)",
"PCI-3DS",
"PCI-DSS",
"RBI + IRDAI (India)",
"SEC 17a-4",
"SEC 18a-6",
"FINRA 4511",
"CFTC 1.31",
"SEC Regulation SCI (US)",
"Shared Assessments",
"SOX",
"TISAX",
"ABS OSPAR (Singapore)",
"BIR 2012 (Netherlands)",
"C5 (Germany)",
"Canada Controlled Goods",
"Canadian Privacy Laws",
"CCCS Medium (Canada)",
"Cyber Essentials Plus (UK)",
"IRAP (Australia)",
"DJCP (China)",
"DORA (EU)",
"EN 301 549 (EU)",
"ENISA IAF (EU)",
"ENS (Spain)",
"EU Model Clauses",
"GB 18030 (China)",
"GDPR",
"G-Cloud (UK)",
"IDW PS 951 (Germany)",
"ISMAP (Japan)",
"ISMS (Korea)",
"IT-Grundschutz Workbook (Germany)",
"LOPD (Spain)",
"MeitY (India)",
"MTCS (Singapore)",
"My Number (Japan)",
"National Information Assurance (Qatar)",
"NZ CC Framework (New Zealand)",
"PASF (UK)",
"PDPA (Argentina)",
"Personal Data Localization (Russia)",
"TRUCS (China)"
],
"securityPageUrl": "https://www.microsoft.com/en-us/trust-center/security/secure-future-initiative",
"privacyPolicyUrl": "https://www.microsoft.com/en-us/privacy/privacystatement",
"termsOfServiceUrl": "https://www.microsoft.com/en-us/servicesagreement",
"dataProcessingAgreementUrl": "https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA",
"subprocessorsListUrl": "https://www.microsoft.com/en-us/download/details.aspx?id=50426",
"businessAssociateAgreementUrl": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech",
"trustPageUrl": "https://www.microsoft.com/en-us/trust-center/product-overview",
"statusPageUrl": "https://portal.office.com/servicestatus"
},
{
"name": "Google",
"legalName": "Google LLC",
"headquarterAddress": "1600 Amphitheatre Parkway, Mountain View, CA 94043, US",
"websiteUrl": "https://google.com",
"description": "Google is a multinational technology company specializing in internet-related services and products, including search, advertising, cloud computing, software, and hardware.",
"category": "Technology & Internet Services",
"certifications": [
"ISO 27001",
"ISO 27017",
"ISO 27018",
"ISO 27701",
"FedRAMP",
"PCI DSS",
"SOC 2",
"SOC 3",
"GDPR"
],
"securityPageUrl": "https://business.safety.google/",
"privacyPolicyUrl": "https://policies.google.com/privacy",
"termsOfServiceUrl": "https://policies.google.com/terms",
"trustPageUrl": "https://business.safety.google/",
"statusPageUrl": "https://ads.google.com/status/publisher/"
}
]