probo/packages/vendors/VENDORS.md

Vendors

Slack

Slack is a team communication platform that allows users to send messages, files, and images to each other.

Legal Name: Slack Technologies, Inc.

Headquarters: San Francisco, 50 Fremont Street, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Status Page	Link

Category: Communication

Certifications

• ISO/IEC 27001:2022
• ISO/IEC 27017:2015
• ISO/IEC 27018:2019
• SOC2 Type 2
• C5
• GDPR

---

Zoom

Zoom is a video communication platform that allows users to send messages, files, and images to each other.

Legal Name: Zoom Video Communications, Inc.

Headquarters: 950 Page Mill Rd, Palo Alto, CA 94306

Links

Resource	Link
Website	Link
Privacy Policy	Link
Service Level Agreement	Link
Security Page	Link
Status Page	Link

Category: Communication

Certifications

• ISO/IEC 27001:2022
• ISO/IEC 27017:2015
• ISO/IEC 27018:2019
• ISO/IEC 27701:2019
• SOC2 Type 2
• SOC2 HITRUST
• CSTAR LEVEL 2
• FedRAMP
• StateRAMP
• CJIS
• UK Cyber Essentials Plus
• iRAP
• ENS
• BSI C5
• gpaNRW
• ISMAP
• ETDA
• PCI DSS
• GDPR

---

Github

Github is a code hosting platform for version control and collaboration.

Legal Name: GitHub, Inc.

Headquarters: 88 Colin P Kelly Jr St, San Francisco, CA 94103

Links

Resource	Link
Website	Link
Privacy Policy	Link
Service Level Agreement	Link
Security Page	Link
Status Page	Link
Subprocessors List	Link

Category: Code Hosting

Certifications

• SOC 1 Type 2
• SOC 2 Type 2
• CSA CAIQ Level 1
• ISO/IEC 27001:2013
• CSA STAR Level 2
• GDPR

---

Stripe

Online payment processing platform that enables businesses to accept and manage digital payments, supporting various payment methods and currencies with integrated fraud protection and compliance features

Legal Name: Stripe, Inc.

Headquarters: 101 Townsend St, San Francisco, CA 94103

Links

Resource	Link
Website	Link
Privacy Policy	Link
Service Level Agreement	Link
Security Page	Link
Status Page	Link
Data Processing Agreement	Link

Category: Payment Processing

Certifications

• PCI DSS v4.0
• SOC 2 Type 2
• SOC 1 Type 2
• SOC 3
• EMVCo Level 1
• EMVCo Level 2
• CBPR
• PRP
• EU-U.S. DPF
• EU-U.S. DPF
• GDPR

---

Cloudflare

Cloudflare is a cloud computing company that provides a range of services, including web hosting, domain name registration, and cloud storage.

Legal Name: Cloudflare, Inc.

Headquarters: 101 Townsend St, San Francisco, CA 94103

Links

Resource	Link
Website	Link
Privacy Policy	Link
Service Level Agreement	Link
Security Page	Link
Status Page	Link

Category: Web Hosting

Certifications

• ISO/IEC 27001:2013
• ISO/IEC 27701:2019
• ISO/IEC 27018:2019
• FedRAMP
• SOC 2 Type 2
• PCI DSS 4.0
• Global CBPR
• Global PRP
• EU Cloud Code of Conduct
• Cyber Essentials
• C5:2020
• ENS
• BSI Qualification
• WCAG 2.1 AA and Section 508
• APPI
• LGPD
• DPDP
• GDPR
• PDPA
• PIPA
• DORA
• CCPA
• CPRA

---

Sentry

Sentry is a cloud-based platform for monitoring and analyzing application performance and user behavior.

Legal Name: Sentry, Inc.

Headquarters: 1 Market St, San Francisco, CA 94105

Links

Resource	Link
Website	Link
Privacy Policy	Link
Security Page	Link
Status Page	Link

Category: Monitoring

Certifications

• ISO/IEC 27001:2013
• SOC2 Type 2

---

Datadog

Datadog is a cloud-based platform for monitoring and analyzing application performance and user behavior.

Legal Name: Datadog, Inc.

Headquarters: 1 Market St, San Francisco, CA 94105

Links

Resource	Link
Website	Link
Privacy Policy	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link

Category: Monitoring

Certifications

• CCPA
• CSA STAR
• DORA
• EU-US DPF
• FedRAMP
• GDPR
• HIPAA
• ISO/IEC 27001:2022
• ISO/IEC 27017:2015
• GDPR

---

Vercel

Vercel is a cloud-based platform for monitoring and analyzing application performance and user behavior.

Legal Name: Vercel, Inc.

Headquarters: 1 Market St, San Francisco, CA 94105

Links

Resource	Link
Website	Link
Privacy Policy	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link

Category: Web Hosting

Certifications

• ISO/IEC 27001:2013
• SOC2 Type 2
• GDPR
• PCI DSS
• HIPAA
• DPF
• CCPA
• PIPEDA

---

Sendgrid

Cloud-based email delivery platform that provides transactional and marketing email services, offering reliable message delivery, analytics, and automation features for business communications.

Legal Name: SendGrid, Inc.

Headquarters: 1801 California Street, Suite 500, Denver, CO 80202

Links

Resource	Link
Website	Link
Privacy Policy	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link

Category: Email Marketing

Certifications

• CCPA
• CPRA
• GDPR
• HIPAA
• ISO/IEC 27001:2013
• ISO/IEC 27017:2015
• ISO/IEC 27018:2019
• SOC2 Type 2
• PCI DSS

---

Figma

Cloud-based design and prototyping platform that enables collaborative interface design, wireframing, and mockup creation with real-time editing capabilities for teams.

Legal Name: Figma, Inc.

Headquarters: 760 Market St Floor 10, San Francisco, CA 94102

Links

Resource	Link
Website	Link
Privacy Policy	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Service Software Agreement	Link

Category: Design

Certifications

• SOC 2 Type 2
• ISO/IEC 27001:2013
• ISO/IEC 27001:2022
• GDPR
• ISO/IEC 27017:2015
• ISO/IEC 27018:2019
• SOC 3
• CCPA
• CSA
• SIG
• EU Cloud Code of Conduct
• TISAX
• VPAT

---

Notion

Cloud-based workspace and collaboration platform that offers document management, project management, and team communication features, allowing users to create, edit, and share content in a centralized environment.

Legal Name: Notion Labs, Inc.

Headquarters: 2300 Harrison St, San Francisco, CA 94110

Links

Resource	Link
Website	Link
Privacy Policy	Link
Service Level Agreement	Link
Status Page	Link
Business Associate Agreement	Link
Subprocessors List	Link

Category: Project Management

Certifications

• SOC 2 Type 2
• ISO/IEC 27001:2022
• ISO/IEC 27701:2019
• ISO/IEC 27017:2015
• ISO/IEC 27018:2019
• HIPAA
• BSI C5
• GDPR
• CCPA

---

Mintlify

Mintlify is a cloud-based documentation platform that enables teams to create, manage, and share documentation for their projects.

Legal Name: Mintlify, Inc.

Headquarters: 108 Ferris Place, Ithaca, NY 14850

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Trust Page	Link
Status Page	Link
Subprocessors List	Link

Category: Documentation

Certifications

• SOC 2 Type 1

---

Supabase

Open-source Firebase alternative providing a backend-as-a-service platform with PostgreSQL database, authentication, storage, and API functionality for application development.

Legal Name: Supabase, Inc.

Headquarters: 3500 S Dupont Hwy, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link

Category: Database

Certifications

• SOC2 Type 2
• HIPAA
• GDPR

---

Segment

Segment is a cloud-based customer data platform that enables businesses to collect, clean, and analyze customer data from across their systems.

Legal Name: Segment, Inc.

Headquarters: 100 California St #700, San Francisco, CA 94111

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Customer Data Platform

Certifications

• SOC 2 Type 2
• ISO/IEC 27001:2022
• GDPR
• ISO/IEC 27018:2019
• ISO/IEC 27017:2015
• CCPA
• HIPAA

---

Auth0

Auth0 is a cloud-based identity and access management platform that enables businesses to secure their applications and data.

Legal Name: Auth0, Inc.

Headquarters: 10900 NE 8th St. Bellevue, WA 98004, US

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link

Category: Identity and Access Management

Certifications

• SOC 2 Type 2
• ISO/IEC 27001:2022
• GDPR
• CSA STAR
• ISO/IEC 27018:2019
• CCPA
• HIPAA
• HITECH
• PCI DSS
• PSD2
• FAPI

---

Heroku

Heroku is a cloud-based platform for building, deploying, and scaling applications.

Legal Name: Heroku, Inc.

Headquarters: 415 Mission Street Suite 300 San Francisco, CA 94105

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Cloud Platform

Certifications

• PCI-DSS
• ISO/IEC 27001:2013
• ISO/IEC 27017:2015
• ISO/IEC 27018:2019
• SOC 2 Type 2
• SOC 1 Type 2
• SOC 3
• HIPAA

---

Linear

Linear is a cloud-based project management platform that enables teams to manage their projects and tasks.

Legal Name: Linear, Inc.

Headquarters: San Francisco, California 94103, US

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Project Management

Certifications

• SOC 2 Type 2
• HIPAA
• GDPR

---

Hubspot

Hubspot is a cloud-based marketing and sales platform that enables businesses to manage their marketing and sales activities.

Legal Name: Hubspot, Inc.

Headquarters: 2 Canal Park Cambridge, MA 02141. United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Marketing and Sales

Certifications

• GDPR
• SOC 3
• SOC 2 Type 2

---

Langfuse

Langfuse is a cloud-based language model platform that enables businesses to build, test, and deploy language models.

Legal Name: Langfuse, Inc.

Headquarters: Berlin, Germany

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Status Page	Link
Data Processing Agreement	Link

Category: Language Model

Certifications

• ISO/IEC 27001:2022
• SOC 2 Type 2
• GDPR
• HIPAA

---

Google Workspace

Google Workspace is a cloud-based productivity suite that enables businesses to manage their email, calendar, and documents.

Legal Name: Google LLC

Headquarters: 1600 Amphitheatre Parkway, Mountain View, CA 94043, US

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Productivity

Certifications

• ISO/IEC 27001:2022
• ISO/IEC 27017:2015
• ISO/IEC 27018:2019
• ISO/IEC 27701:2019
• SOC 2 Type 2
• SOC 3
• GDPR
• FedRAMP
• HIPAA
• BSI C5
• MTCS

---

Algolia

Algolia is a search-as-a-service platform that enables businesses to deliver fast and relevant search and discovery experiences across websites and applications.

Legal Name: Algolia Inc.

Headquarters: 301 Howard St Suite 300, San Francisco, CA 94105

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Search-as-a-Service

Certifications

• ISO/IEC 27001:2022
• ISO/IEC 27017:2015
• SOC 2 Type 2
• SOC 3
• BSI C5
• HIPAA
• GDPR
• CCPA
• TRUSTe Certified Privacy

---

PostHog

Open-source product analytics platform that enables teams to understand user behavior and optimize product performance.

Legal Name: PostHog, Inc.

Headquarters: 2261 Market St #4008, San Francisco HQ

Links

Resource	Link
Website	Link
Privacy Policy	Link
Service Level Agreement	Link
Security Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Product Analytics

Certifications

• SOC 2 Type 2
• GDPR
• CCPA

---

Airtable

Airtable is a no-code platform that combines the simplicity of a spreadsheet with the complexity of a database, enabling users to build custom applications without writing code.

Legal Name: Formagrid, Inc.

Headquarters: 1 Front St, San Francisco, CA 94111

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: No-Code/Low-Code Platform

Certifications

• SOC 2 Type 2
• ISO/IEC 27001:2022
• ISO/IEC 27701:2019
• TX-RAMP Level 2
• GDPR
• CPRA
• CCPA
• HIPAA

---

OpenAI

OpenAI is an AI research and deployment company dedicated to ensuring that artificial general intelligence benefits all of humanity.

Legal Name: OpenAI, L.L.C.

Headquarters: 3180 18th St, San Francisco, CA 94110

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Business Associate Agreement	Link
Subprocessors List	Link

Category: Artificial Intelligence Research and Deployment

Certifications

• SOC 2 Type 2
• CSA STAR Level 1
• GDPR
• CCPA
• SOC 3
• TX-RAMP

---

Anthropic

Anthropic is an AI safety and research company developing reliable, interpretable, and steerable AI systems, including the Claude family of large language models.

Legal Name: Anthropic PBC

Headquarters: 548 Market St, San Francisco, CA 94104

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Artificial Intelligence / AI Safety

Certifications

• SOC 2 Type 1
• SOC 2 Type 2

---

Gusto

Gusto is a cloud-based platform that provides payroll, benefits, and human resource management software for businesses. It handles payments to employees and contractors and manages compliance with tax, labor, and immigration laws.

Legal Name: Gusto, Inc.

Headquarters: 525 20th St, San Francisco, CA 94107

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Business Associate Agreement	Link

Category: HR / Payroll

Certifications

• SOC 1 Type 2
• SOC 2 Type 2
• HIPAA

---

Amazon Web Services (AWS)

Amazon Web Services (AWS) is the world's most comprehensive and broadly adopted cloud platform, offering over 200 fully featured services from data centers globally. Millions of customers—including startups, enterprises, and government agencies—use AWS to lower costs, become more agile, and innovate faster.

Legal Name: Amazon Web Services, Inc.

Headquarters: 410 Terry Avenue North, Seattle, WA

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Business Associate Agreement	Link
Subprocessors List	Link

Category: Cloud Infrastructure

Certifications

• CSA
• ProcessUnity
• CyberVadis
• EC
• ISO 9001
• ISO 14001
• ISO 20000
• ISO 22301
• ISO 27001
• ISO 27017
• ISO 27701
• ISO 27018
• ISO 42001
• ISO 50001
• PCI DSS Level 1
• SOC 1 Type 2
• SOC 2 Type 2
• SOC 3
• PBHVA
• CCCS Medium
• CJIS
• CMMC
• DFARS
• DoD SRG
• FedRAMP
• FERPA
• FIPS
• FISMA
• GxP
• HIPAA
• HITRUST CSF
• ITAR
• MPAA
• NIST
• PIPEDA
• SEC Rule 17a-4(f)
• VPAT / Section 508
• CSAP
• FinTech
• FISC
• IRAP
• ISMAP
• ISO 20000
• K-ISMS
• Medical Information Guidelines
• MeitY
• MTCS Tier 3
• NISC
• OSPAR
• SNI 27001
• BIO Thema-uitwerking Clouddiensten
• C5
• Data Protection Code of Conduct
• CPSTIC
• Cyber Essentials Plus
• DESC CSP
• ENS High
• FINMA ISAE 3000 Type 2 Report
• G-Cloud
• GNS
• GSMA
• HDS
• IAR
• NHS DSPT
• PASF
• Pinakes
• PiTuKri ISAE 3000 Type 2
• TiSAX

---

Calendly

Online scheduling platform that automates appointment booking and meeting management for businesses and individuals.

Legal Name: Calendly, LLC

Headquarters: 271 17th St NW. 10th Floor. Atlanta, Georgia 30363, US

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Scheduling/Appointment Management

Certifications

• SOC 2 Type 2
• SOC 3
• GDPR
• PCI DSS
• CSA STAR
• CCPA
• ISO/IEC 27001:2013

---

jsDelivr

jsDelivr is a free, open-source Content Delivery Network (CDN) for open-source files, providing fast and reliable delivery of JavaScript libraries and other web assets.

Legal Name: Volentio JSD Limited

Headquarters: Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Content Delivery Network (CDN)

Certifications

• GDPR
• CCPA

---

npm

npm is the world's largest software registry, providing a platform for JavaScript developers to share and manage packages for Node.js and frontend projects.

Legal Name: npm, Inc.

Headquarters: 1999 Harrison St, Suite 1150, Oakland, CA 94612, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Status Page	Link

Category: Package Management / Code Hosting

Certifications

• GDPR
• CCPA

---

Clerk

Clerk provides a comprehensive suite of embeddable UIs, flexible APIs, and admin dashboards to authenticate and manage users.

Legal Name: Clerk, Inc.

Headquarters: 660 King Street, Unit 345, San Francisco, CA 94107, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Authentication and User Management

Certifications

• SOC 2 Type 2
• HIPAA
• GDPR
• CCPA

---

Plausible Analytics

Open-source, privacy-focused web analytics platform that provides simple and lightweight tracking without cookies.

Legal Name: Plausible Insights OÜ

Headquarters: Västriku tn 2, 50403, Tartu, Estonia

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Platform and user analytics

Certifications

• GDPR
• CCPA
• PECR

---

Latitude.sh

Latitude.sh provides global bare metal cloud infrastructure, enabling developers to deploy and manage physical servers with low latency and high automation.

Legal Name: Latitude.sh Ltda

Headquarters: Rua Cubatão, 929, São Paulo, 04013-043, Brazil

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Status Page	Link
Data Processing Agreement	Link

Category: Bare Metal Cloud Infrastructure

Certifications

• CCPA

---

Together AI

Together AI provides a full-stack cloud platform for developers to train, fine-tune, and deploy open-source generative AI models with high-performance infrastructure.

Legal Name: Together Computer, Inc.

Headquarters: 251 Rhode Island Street, Suite 205, San Francisco, CA 94103, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Trust Page	Link
Status Page	Link

Category: AI Infrastructure / Model Hosting

Certifications

• SOC 2 Type 1
• HIPAA
• GDPR
• CCPA

---

Mercury

Fintech company that provides banking services to early stage start-up companies. The company is not a bank, but works with banking service providers to provide bank accounts and other financial services.

Legal Name: Mercury Technologies Inc.

Headquarters: 660 Mission Street, San Francisco, CA 94103, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link

Category: Banking Services

Certifications

• SOC 2 Type 1
• SOC 2 Type 2
• PCI DSS

---

Signal

Signal is a secure messaging app that provides end-to-end encryption for text, voice, and video communications.

Legal Name: Signal Messenger LLC

Headquarters: 650 Castro St 120 223Mountain View, CA 94041, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Status Page	Link

Category: Messaging

---

monday.com

monday.com is a work management platform that helps teams plan, track, and manage work.

Legal Name: Monday.com Ltd.

Headquarters: Tel Aviv, Israel

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Business Associate Agreement	Link
Subprocessors List	Link

Category: Work Management

Certifications

• ISO/IEC 27001:2022
• ISO/IEC 27018:2014
• ISO/IEC 27017:2015
• ISO/IEC 27032:2023
• ISO/IEC 27701:2019
• HIPAA
• GDPR
• CCPA
• SOC 1 Type 2
• SOC 2 Type 2
• SOC 3
• TX RAMP
• CSA

---

Carta

Carta is a financial technology company that provides a platform for managing employee equity compensation.

Legal Name: eShares, Inc.

Headquarters: 333 Bush Street, San Francisco, California 94104, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Employee Equity Compensation

Certifications

• SOC 1 Type 2
• SOC 2 Type 2
• ISO/IEC 27001:2022
• GDPR
• CCPA

---

Apollo.io

Apollo.io is an AI-powered sales intelligence and engagement platform that helps B2B teams find, contact, and close ideal buyers through a comprehensive database and automation tools.

Legal Name: ZenLeads Inc.

Headquarters: 440 N Barranca Ave #4750, Covina, CA 91723-1722, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Sales Intelligence & Engagement

Certifications

• ISO 27001
• SOC 2 Type 2
• GDPR
• CCPA
• EU-U.S. DPF
• PCI DSS v4.0.0
• CPRA

---

Atlassian

Atlassian provides collaboration and productivity software for teams, including products like Jira, Confluence, and Trello.

Legal Name: Atlassian Corporation Plc

Headquarters: Level 6, 341 George Street, Sydney, NSW 2000, Australia

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Business Associate Agreement	Link
Subprocessors List	Link

Category: Collaboration and Productivity Software

Certifications

• HIPAA
• ISO/IEC 27001:2013
• CSA STAR Level 1
• FedRAMP
• GDPR
• CCPA
• SOC 2
• PCI-DSS
• TISAX Level 2
• EBA
• ENISA
• FINMA
• Good Clinical, Laboratory, and Manufacturing Practices (GxP)
• HECVAT
• HKMA
• Lei Geral de Proteção de Dados (LGPD)
• MAS
• NCSC
• nFADP
• Section 889
• UKPRA
• VPAT
• WCAG 2.1 AA
• ACSC - Cloud Computing Security
• ACSC - Essential 8 Maturity Model
• Australia Privacy Act
• BaFin

---

Webflow

Webflow is a no-code visual development platform that allows users to design, build, and launch responsive websites without writing code.

Legal Name: Webflow, Inc.

Headquarters: 398 11th Street, 2nd Floor, San Francisco, CA 94103, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Website Builder / No-Code Platform

Certifications

• PCI DSS v4.0 SAQ-D
• ISO/IEC 27001:2022
• ISO/IEC 27018:2019
• ISO/IEC 27017:2015
• SOC 2 Type 2

---

1Password

1Password is a secure password manager that helps individuals and businesses store and manage passwords, credentials, and sensitive information across devices.

Legal Name: AgileBits Inc.

Headquarters: 4711 Yonge Street, 10th Floor, Toronto, Ontario, M2N 6K8, Canada

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Password Management

Certifications

• SOC 2 Type 2
• ISO/IEC 27001
• ISO/IEC 27017
• ISO/IEC 27018
• ISO/IEC 27701
• GDPR
• HIPAA
• DORA

---

Checkr

Checkr provides AI-powered background check and screening services to help businesses make informed hiring decisions quickly and fairly.

Legal Name: Checkr, Inc.

Headquarters: 1 Montgomery St, Suite 2400, San Francisco, CA 94104, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Employment Screening

Certifications

• SOC 2 Type 2
• SOC 3
• ISO 27001
• GDPR
• CCPA
• CPRA
• PIPEDA
• Privacy Shield

---

Rippling

Rippling is an all-in-one workforce management platform that unifies HR, IT, payroll, and finance operations into a single system.

Legal Name: Rippling People Center, Inc.

Headquarters: 430 California Street, 11th Floor, San Francisco, CA 94104, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Workforce Management

Certifications

• SOC 1 Type 1
• SOC 2 Type 2
• ISO 27001
• ISO 27018
• CSA STAR Level 2

---

Vouch

Vouch is a digital-first insurance platform providing tailored coverage solutions for startups and high-growth companies.

Legal Name: Vouch, Inc.

Headquarters: 250 Montgomery St, San Francisco, CA 94104

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Data Processing Agreement	Link

Category: Business Insurance

Certifications

• CPRA

---

Twilio

Twilio is a cloud communications platform that provides APIs for developers to add messaging, voice, video, and email capabilities to applications.

Legal Name: Twilio, Inc.

Headquarters: 101 Spear Street, Fifth Floor, San Francisco, CA 94105

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Cloud Communications Platform

Certifications

• SOC 2 Type 2
• GDPR
• CCPA
• CPRA
• HIPAA
• ISO 27001
• ISO 27017
• ISO 27018
• PCI DSS
• PCI DSS v4.0.0

---

Qonto

Qonto is a European business finance solution offering online banking, invoicing, expense management, and financial tools for SMEs and freelancers.

Legal Name: Olinda SAS

Headquarters: 18 rue de Navarin, 75009 Paris, France

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link

Category: Business Banking / Financial Services

Certifications

• ISO 27001
• PCI DSS
• GDPR
• DSP2
• DORA

---

Cursor

AI-powered integrated development environment enhancing developer productivity with advanced AI features.

Legal Name: Anysphere Inc.

Headquarters: 403 Francisco Street, San Francisco

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Subprocessors List	Link

Category: AI Code Editor

Certifications

• SOC 2 Type 2
• SOC 2 Type 1

---

Pulley

Pulley is an equity management platform that helps startups manage cap tables, issue equity, and ensure compliance with tools for fundraising modeling, 409A valuations, and more.

Legal Name: PROLIFIC LABS Incorporated

Headquarters: 6114 La Salle Ave, Suite 459, Oakland, CA 94611, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Subprocessors List	Link

Category: Equity Management / Cap Table Software

Certifications

• SOC 2 Type 2
• GDPR
• CCPA

---

Microsoft Azure

Microsoft Azure is a comprehensive cloud computing platform offering a wide range of services including computing, analytics, storage, and networking.

Legal Name: Microsoft Corporation

Headquarters: One Microsoft Way, Redmond, WA 98052-6399, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Business Associate Agreement	Link
Subprocessors List	Link

Category: Cloud Computing Platform

Certifications

• CIS Benchmark
• CSA-STAR
• CyberGRX
• ISO 20000-1:2011
• ISO 22301
• ISO 27001
• ISO 27017
• ISO 27018
• ISO 27701
• ISO 9001
• SOC 1
• SOC 2
• SOC 3
• WCAG
• CJIS
• CNSSI 1253
• DFARS
• DoD IL2
• DoD IL5
• DoE 10 CFR Part 810
• EAR (US Export Administration Regulations)
• FedRAMP
• FIPS 140-2
• IRS 1075
• ITAR
• NIST 800-171
• NIST CSF
• Section 508 VPATS
• 23 NYCRR Part 500
• AFM + DNB (Netherlands)
• APRA (Australia)
• AMF and ACPR (France)
• CDSA
• DPP (UK)
• EBA (EU)
• FACT (UK)
• FCA + PRA (UK)
• FDA CFR Title 21 Part 11
• FERPA
• FFIEC (US)
• FINMA (Switzerland)
• FISC (Japan)
• FSA (Denmark)
• GLBA (US)
• GSMA
• GxP
• HDS (France)
• HIPAA / HITECH
• HITRUST
• KNF (Poland)
• Know Your Third Party (KY3P)
• MARS-E (US)
• MAS + ABS (Singapore)
• MPA
• NBB + FSMA (Belgium)
• NEN-7510 (Netherlands)
• NERC
• OSFI (Canada)
• PCI-3DS
• PCI-DSS
• RBI + IRDAI (India)
• SEC 17a-4
• SEC 18a-6
• FINRA 4511
• CFTC 1.31
• SEC Regulation SCI (US)
• Shared Assessments
• SOX
• TISAX
• ABS OSPAR (Singapore)
• BIR 2012 (Netherlands)
• C5 (Germany)
• Canada Controlled Goods
• Canadian Privacy Laws
• CCCS Medium (Canada)
• Cyber Essentials Plus (UK)
• IRAP (Australia)
• DJCP (China)
• DORA (EU)
• EN 301 549 (EU)
• ENISA IAF (EU)
• ENS (Spain)
• EU Model Clauses
• GB 18030 (China)
• GDPR
• G-Cloud (UK)
• IDW PS 951 (Germany)
• ISMAP (Japan)
• ISMS (Korea)
• IT-Grundschutz Workbook (Germany)
• LOPD (Spain)
• MeitY (India)
• MTCS (Singapore)
• My Number (Japan)
• National Information Assurance (Qatar)
• NZ CC Framework (New Zealand)
• PASF (UK)
• PDPA (Argentina)
• Personal Data Localization (Russia)
• TRUCS (China)

---

Microsoft 365

Microsoft 365 is a cloud-based productivity suite offering applications like Word, Excel, Teams, and OneDrive, integrated with AI-powered features and enterprise-grade security.

Legal Name: Microsoft Corporation

Headquarters: One Microsoft Way, Redmond, WA 98052-6399, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Business Associate Agreement	Link
Subprocessors List	Link

Category: Productivity & Collaboration Software

Certifications

• CIS Benchmark
• CSA-STAR
• CyberGRX
• ISO 20000-1:2011
• ISO 22301
• ISO 27001
• ISO 27017
• ISO 27018
• ISO 27701
• ISO 9001
• SOC 1
• SOC 2
• SOC 3
• WCAG
• CJIS
• CNSSI 1253
• DFARS
• DoD IL2
• DoD IL5
• DoE 10 CFR Part 810
• EAR (US Export Administration Regulations)
• FedRAMP
• FIPS 140-2
• IRS 1075
• ITAR
• NIST 800-171
• NIST CSF
• Section 508 VPATS
• 23 NYCRR Part 500
• AFM + DNB (Netherlands)
• APRA (Australia)
• AMF and ACPR (France)
• CDSA
• DPP (UK)
• EBA (EU)
• FACT (UK)
• FCA + PRA (UK)
• FDA CFR Title 21 Part 11
• FERPA
• FFIEC (US)
• FINMA (Switzerland)
• FISC (Japan)
• FSA (Denmark)
• GLBA (US)
• GSMA
• GxP
• HDS (France)
• HIPAA / HITECH
• HITRUST
• KNF (Poland)
• Know Your Third Party (KY3P)
• MARS-E (US)
• MAS + ABS (Singapore)
• MPA
• NBB + FSMA (Belgium)
• NEN-7510 (Netherlands)
• NERC
• OSFI (Canada)
• PCI-3DS
• PCI-DSS
• RBI + IRDAI (India)
• SEC 17a-4
• SEC 18a-6
• FINRA 4511
• CFTC 1.31
• SEC Regulation SCI (US)
• Shared Assessments
• SOX
• TISAX
• ABS OSPAR (Singapore)
• BIR 2012 (Netherlands)
• C5 (Germany)
• Canada Controlled Goods
• Canadian Privacy Laws
• CCCS Medium (Canada)
• Cyber Essentials Plus (UK)
• IRAP (Australia)
• DJCP (China)
• DORA (EU)
• EN 301 549 (EU)
• ENISA IAF (EU)
• ENS (Spain)
• EU Model Clauses
• GB 18030 (China)
• GDPR
• G-Cloud (UK)
• IDW PS 951 (Germany)
• ISMAP (Japan)
• ISMS (Korea)
• IT-Grundschutz Workbook (Germany)
• LOPD (Spain)
• MeitY (India)
• MTCS (Singapore)
• My Number (Japan)
• National Information Assurance (Qatar)
• NZ CC Framework (New Zealand)
• PASF (UK)
• PDPA (Argentina)
• Personal Data Localization (Russia)
• TRUCS (China)

---

Google

Google is a multinational technology company specializing in internet-related services and products, including search, advertising, cloud computing, software, and hardware.

Legal Name: Google LLC

Headquarters: 1600 Amphitheatre Parkway, Mountain View, CA 94043, US

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link

Category: Technology & Internet Services

Certifications

• ISO 27001
• ISO 27017
• ISO 27018
• ISO 27701
• FedRAMP
• PCI DSS
• SOC 2
• SOC 3
• GDPR

---

Namecheap

Namecheap is an ICANN-accredited domain registrar and web hosting company offering domain registration, hosting, VPN, and other web services.

Legal Name: Namecheap, Inc.

Headquarters: 4600 East Washington Street, Suite 305, Phoenix, AZ 85034, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Status Page	Link
Data Processing Agreement	Link

Category: Domain Registration and Web Hosting

Certifications

• CCPA
• GDPR

---

Porter

Porter is a platform-as-a-service (PaaS) that enables developers to deploy and manage applications in their own AWS, GCP, or Azure cloud accounts with minimal DevOps overhead.

Legal Name: Porter Technologies Inc.

Headquarters: New York City, NY, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Status Page	Link

Category: Platform as a Service (PaaS)

Certifications

• SOC 2 Type 2
• GDPR
• CCPA

---

Bitwarden

Bitwarden is a secure, open-source password manager that enables individuals and organizations to store, manage, and share sensitive data across devices.

Legal Name: Bitwarden, Inc.

Headquarters: 1 North Calle Cesar Chavez, Suite 102, Santa Barbara, CA 93103

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Subprocessors List	Link

Category: Password Management

Certifications

• ISO/IEC 27001:2022
• SOC 2 Type 2
• SOC 3
• HIPAA
• GDPR
• CCPA
• CPRA
• Data Privacy Framework (DPF)

---

Framer

Framer is a no-code website builder that enables designers and teams to create and publish professional, responsive websites with built-in CMS, animations, and real-time collaboration tools.

Legal Name: Framer B.V.

Headquarters: Rozengracht 207B, 1016 LZ Amsterdam, Netherlands

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Website Builder / No-Code Platform

Certifications

• SOC 2 Type 2
• ISO/IEC 27001:2022
• GDPR
• CCPA
• Privacy Shield

---

Cal.com

Cal.com is an open-source scheduling platform that lets individuals and organizations create customizable booking experiences and integrate scheduling into their products.

Legal Name: Cal.com, Inc.

Headquarters: 2261 Market Street #4382, San Francisco, CA 94114, USA

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Business Associate Agreement	Link
Subprocessors List	Link

Category: Scheduling / Productivity

Certifications

• SOC 2 Type 2
• ISO/IEC 27001:2022
• HIPAA
• GDPR
• CCPA

---

Mailchimp

All-in-one marketing automation platform that lets organizations create, send, and analyze email campaigns and other customer-engagement content.

Legal Name: The Rocket Science Group LLC

Headquarters: 2 Sun Court Suite 400 Peachtree Corners, GA 30092

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Marketing Automation

Certifications

• SOC 2 Type 2
• ISO 27001
• Data Privacy Framework (DPF)
• GDPR
• CCPA
• VPAT
• PCI DSS

---

Otter.ai

AI-powered meeting assistant that captures, transcribes, and summarizes conversations in real time to make information from meetings searchable and shareable.

Legal Name: Otter.ai, Inc.

Headquarters: 800 W El Camino Real, Suite 170, Mountain View, CA 94040

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: AI Transcription & Meeting Intelligence

Certifications

• SOC 2 Type 2
• ISO/IEC 27001:2022
• GDPR
• CCPA
• Data Privacy Framework (DPF)

---

Resend

Developer‑focused email delivery platform offering a modern API and tooling to build, test and send transactional and marketing emails at scale.

Legal Name: Plus Five Five, Inc.

Headquarters: 2261 Market Street #5039, San Francisco, CA 94114, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Email Delivery Platform

Certifications

• SOC 2 Type 2
• GDPR
• CCPA
• Data Privacy Framework (DPF)

---

Pylon

Pylon provides a modern unified customer-support platform for B2B companies, combining ticketing, chat, knowledge base, AI assistance, customer portal and workflows in one tool.

Legal Name: Pylon Labs, Inc.

Headquarters: 188 King Street, Unit 502, San Francisco, CA 94107, USA

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Customer Support Platform

Certifications

• SOC 2 Type 2
• ISO/IEC 27001
• GDPR
• HIPAA

---

Loops

Email platform for SaaS companies that lets teams create, send and track product, marketing, and transactional emails from a single interface

Legal Name: Astrodon Inc.

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Email Marketing Platform

Certifications

• GDPR
• CCPA

---

Perplexity

Generative AI answer engine that delivers real-time, source-cited answers to user questions.

Legal Name: Perplexity AI, Inc.

Headquarters: 115 Sansome St, San Francisco, CA 94104-3601, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: AI Answer Engine

Certifications

• SOC 2 Type 2
• GDPR
• CCPA
• PCI DSS
• CAIQ Lite

---

Google Cloud Platform

Comprehensive public cloud computing platform offering infrastructure, data analytics, AI, security, and developer tools

Legal Name: Google LLC

Headquarters: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Business Associate Agreement	Link
Subprocessors List	Link

Category: Cloud Computing Platform

Certifications

• Cloud Computing Compliance Controls Catalog (C5)
• CSA
• GSMA SAS-SM
• Higher Education Cloud Vendor Assessment Tool (HECVAT)
• ISO 9001:2015
• ISO 22301:2019 & BS EN ISO 22301:2019
• ISO 50001:2018
• ISO/IEC 27001
• ISO/IEC 27017
• ISO/IEC 27018
• ISO/IEC 27701
• ISO/IEC 42001
• PCI 3DS Core Security Standard
• PCI DSS
• PCI PIN Security
• SOC 1
• SOC 2
• SOC 3
• SWIFT on Google Cloud
• Uptime Institute's Tier Standards
• VPAT (WCAG, U.S. Section 508, EN 301 549)
• FedRAMP
• FIPS 140-2 Validated
• HITRUST CSF
• Independent Security Evaluators (ISE) Audit
• Minimum Acceptable Risk Standards for Exchanges (MARS-E)
• StateRAMP
• TruSight
• U.S. Cybersecurity Maturity Model Certification (CMMC)
• U.S. Defense Information Systems Agency Provisional Authorization
• Spain Esquema Nacional de Seguridad (ENS)
• EU Cloud Code of Conduct
• HDS
• ISAE 3000 Type 2 Report (FINMA)
• ISO 14001
• Microfin
• NCSC - Cyber Essentials Plus (UK)
• Police Assured Secure Facilities (PASF)
• Qatar National Information Assurance (NIA)
• SWIPO Data Portability Code of Conduct
• TISAX
• Australia Hosting Certification Framework (HCF)
• Cloud Security Assurance Program (CSAP) Low Level for Group C
• Information System Security Management and Assessment Program (ISMAP)
• IRAP (Information Security Registered Assessors Program)
• JIIMA
• K-ISMS (Korea)
• MTCS (Singapore) Tier 3
• OSPAR
• SNI 27001
• ETDA (Thailand)
• GxP
• California Consumer Privacy Act (CCPA)
• COPPA (U.S.)
• Export Administration Regulations (EAR)
• FERPA (U.S.)
• FINRA (US)
• Google Cloud Data Processing Addendum Mapping - U.S. State Privacy Laws
• HIPAA
• IRS 1075
• International Traffic in Arms Regulations (ITAR)
• GLBA
• OSFI (Canada)
• FG16/5 - FCA
• NERC CIP
• PHIPA (Canada)
• PIPEDA (Canada)
• US Federal Banking Agencies
• U.S. Defense Federal Acquisition Regulation Supplement (DFARS)
• ACPR (France)
• BaFin Cloud Outsourcing Guidance
• Banco de España
• Banco de Portugal
• Bank of Italy
• BRSA (Turkey)
• BSI Critical Infrastructure (KRITIS)
• BWG (Austria)
• Central Bank of Ireland (Ireland)
• CSSF (Luxembourg)
• De Nederlandsche Bank (the Netherlands)
• EU DORA
• European Union’s Digital Markets Act
• EU Solvency II
• EU Standard Contractual Clauses
• FINMA (Switzerland)
• FSA (Denmark)
• GDPR
• Google Cloud & the EU Network and Information Systems Directive (NIS2)
• Israel’s Privacy Protection Authority
• KNF (Poland)
• MaRisk AT 9 Outsourcing
• PRA (UK)
• revFADP (Switzerland)
• South Africa POPI
• SFSA (Sweden)
• Telecoms Security Act (UK)
• VAG (Austria)
• SYSC 8 Outsourcing - FCA Handbook
• UK CHECK
• PDPL (Argentina)
• BCRA (Argentina)
• Central Bank of Brazil (Brazil)
• CNBV (Mexico)
• CNSF (Mexico)
• CMF (Chile)
• Superintendencia de Banca (Peru)
• Financial Superintendence of Colombia
• Lei Geral de Proteção de Dados (LGPD)
• ASFI (Bolivia)
• Act on the Protection of Personal Information (Japan)
• APRA Prudential Standard CPS 234
• APPs (Australia)
• APRA (Australia)
• Bank Negara (Malaysia)
• Bank of Thailand (BOT)
• BSP (Philippines)
• DSA (Bangladesh)
• FSC Insurance Outsourcing Directions
• FSC Banking Outsourcing Regulations
• GR 95/2018 guidelines
• IA (Hong Kong)
• HKMA (Hong Kong)
• MAMPU (Malaysia)
• PDPO (Hong Kong)
• Indonesia Government Regulation No. 71 (GR 71)
• IRDAI (India)
• FSC (Korea)
• Korean Financial Supervisory Service (FSS)
• MAS TRM Guidelines
• OIC (Thailand)
• OJK Circular 21 of 2017 (SEOJK 21)
• OJK Regulation No. 38 of 2016 (POJK 38)
• PDP Law (Indonesia)
• PDPA (Malaysia)
• PDPA (Philippines)
• PDPA (Taiwan)
• PDPA (Thailand)
• PDPD (Vietnam)
• PIPA (Korea)
• RBI (India)
• Reserve Bank of New Zealand (New Zealand)
• Securities and Exchange Board of India (SEBI)
• PDPA (Singapore)
• State Bank of Vietnam
• The Privacy Act (New Zealand)

---

Fly.io

Developer-focused public cloud platform offering hardware-virtualized containers (Fly Machines) with KVM isolation, automatic scaling to zero, and integrated tools for deploying and managing applications globally

Legal Name: Fly.io, Inc.

Headquarters: 2045 W Grand Ave, Chicago, IL 60612, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Business Associate Agreement	Link
Subprocessors List	Link

Category: Application Hosting

Certifications

• SOC 2 Type 2
• EU-U.S. DPF
• UK DPF
• Swiss-U.S. DPF
• HIPAA
• GDPR
• CCPA

---

Upstash

Serverless data platform providing HTTP-based Redis, Vector, and QStash services with global low-latency, automatic scaling, and durable storage

Legal Name: Upstash, Inc.

Headquarters: 6202 Via De Adrianna, San Jose, CA 95120, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Serverless Database Platform

Certifications

• SOC 2 Type 2
• GDPR
• CCPA

---

bunny.net

Cloud-based content-delivery, edge-storage and optimization platform that accelerates and secures web content worldwide.

Legal Name: BunnyWay d.o.o.

Headquarters: Dunajska cesta 165, 1000 Ljubljana, Slovenia

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Status Page	Link
Subprocessors List	Link

Category: Content Delivery Network (CDN) / Edge Cloud

Certifications

• ISO 27001
• GDPR

---

ClickUp

All-in-one productivity platform for project management, document collaboration, and goal tracking.

Legal Name: Mango Technologies, Inc.

Headquarters: 350 Tenth Ave, 5th Floor, San Diego, CA 92101, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Project Management

Certifications

• SOC 2 Type 2
• ISO/IEC 27001
• ISO 27017
• ISO 27018
• PCI DSS
• GDPR
• CCPA
• CPRA
• LGPD
• VCDPA

---

Danami

Developer of security, firewall and anti-spam extensions for the Plesk hosting control panel.

Legal Name: Danami International Inc.

Headquarters: 5314 56 St, Camrose, Alberta T4V 2E5, Canada

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link

Category: Web-hosting security / Plesk extensions

---

New Relic

New Relic provides a full-stack observability platform that lets engineering teams monitor, analyze, and improve application, infrastructure, and digital-experience performance in real time.

Legal Name: New Relic, Inc.

Headquarters: 188 Spear St., Suite 1000, San Francisco, CA 94105, USA

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Business Associate Agreement	Link
Subprocessors List	Link

Category: Observability / Application Performance Monitoring

Certifications

• SOC 2 Type 2
• ISO/IEC 27001:2022
• FedRAMP Moderate
• PCI DSS Level 1
• TISAX Level 2
• HITRUST CSF
• HIPAA
• GDPR
• CCPA
• Data Privacy Framework (DPF)

---

OVHcloud global

OVHcloud is a French cloud computing company offering public and private cloud products, shared hosting, and dedicated server solutions in 140 countries worldwide.

Legal Name: OVH Groupe SAS

Headquarters: 2 Rue Kellermann, 59100 Roubaix, France

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Cloud Infrastructure Provider

Certifications

• ISO/IEC 27001
• ISO/IEC 27017
• ISO/IEC 27018
• ISO/IEC 27701
• CSA STAR
• ISO/IEC 14001
• ISO 50001
• HDS
• ANSSI SecNum Cloud
• ACN
• BSI C5
• ENS
• PCI DSS
• SOC 1
• SOC 2
• SOC 3

---

OVHcloud US

Global cloud-infrastructure provider delivering bare-metal servers, public and private cloud, and web-hosting services at scale.

Legal Name: OVH US LLC

Headquarters: 11950 Democracy Drive, Suite 300, Reston, VA 20190, USA

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Cloud Infrastructure Provider

Certifications

• ISO/IEC 27001
• ISO/IEC 27017
• ISO/IEC 27018
• ISO/IEC 27701
• SOC 1 Type 2
• SOC 2 Type 2
• SOC 3
• CSA STAR
• HIPAA
• PCI DSS
• Data Privacy Framework (DPF)
• GDPR
• CCPA

---

Pipedrive

Pipedrive is a sales-focused CRM platform designed to help small businesses manage leads, track deals, and automate sales processes.

Legal Name: Pipedrive Inc.

Headquarters: 530 Fifth Avenue, 8th Floor, Suite 802, New York, NY 10036, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: CRM Software

Certifications

• SOC 2 Type 2
• SOC 3
• ISO/IEC 27001:2013
• ISO/IEC 27701:2019
• GDPR
• CCPA

---

Plesk

Web-hosting control-panel software for building, securing and running websites and cloud applications.

Legal Name: WebPros International GmbH (formerly Plesk International GmbH)

Headquarters: Vordergasse 59, 8200 Schaffhausen, Switzerland

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Subprocessors List	Link

Category: Web Hosting Control Panel

Certifications

• GDPR

---

Brevo

Cloud-based CRM and multichannel marketing platform that lets businesses run email, SMS, WhatsApp and automated campaigns while managing customer relationships from one suite.

Legal Name: Sendinblue SAS

Headquarters: 106 boulevard Haussmann, 75008 Paris, France

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Email Marketing & CRM

Certifications

• ISO/IES 27001:2013
• GDPR
• CCPA
• CASL

---

Better Stack

Developer-first observability platform that unifies log management, uptime monitoring, incident response, and public status pages.

Legal Name: Better Stack, Inc.

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Observability / Monitoring

Certifications

• SOC 2 Type 2
• GDPR
• CCPA

---

PlanetScale

PlanetScale provides a serverless, MySQL-compatible database-as-a-service built on Vitess that lets developers scale relational workloads without managing infrastructure.

Legal Name: PlanetScale, Inc.

Headquarters: 535 Mission Street, 14th Floor, San Francisco, CA 94105, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Database-as-a-Service

Certifications

• SOC 2 Type 2
• HIPAA
• PCI DSS 4.0
• GDPR
• CCPA
• LGPD

---

Docker

Developer platform for building, sharing, and running containerized applications.

Legal Name: Docker, Inc.

Headquarters: 3790 El Camino Real #1052, Palo Alto, CA 94306, USA

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Container Platform

Certifications

• SOC 2 Type 2
• ISO/IEC 27001
• CSA Trusted Cloud
• Data Privacy Framework (DPF)
• GDPR
• CCPA
• APEC
• CPA
• CTDPA
• VCDPA
• UCPA

---

Brex

AI-powered global spend platform offering corporate cards, expense management, business accounts and travel in one place.

Legal Name: Brex Inc.

Headquarters: 650 S 500W Suite 300, Salt Lake City, UT 84101, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Spend Management & Corporate Card

Certifications

• SOC 1 Type 2
• SOC 2 Type 2
• PCI DSS
• GDPR
• CCPA

---

Ramp

Corporate spend-management platform offering corporate cards, expense automation, bill pay, and vendor management for finance teams.

Legal Name: Ramp Business Corporation

Headquarters: 28 West 23rd Street, Floor 2, New York, NY 10010 USA

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Spend Management

Certifications

• SOC 2 Type 2
• SOC 1 Type 2
• ISO/IEC 27001:2022
• PCI DSS v4.0
• GDPR
• CCPA
• Data Privacy Framework (DPF)

---

ClickHouse

Open-source column-oriented database and managed cloud service for ultra-fast, real-time analytics on large-volume data.

Legal Name: ClickHouse, Inc.

Headquarters: 650 Castro St., Suite 120 #92426, Mountain View, CA 94041, USA

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Real-time Analytics Database

Certifications

• SOC 2 Type 2
• ISO/IEC 27001
• Data Privacy Framework (DPF)
• HIPAA
• PCI DSS v4.0
• GDPR
• CCPA
• Colorado Privacy Act (CPA)
• Connecticut Data Privacy Act (CTDPA)
• Virginia Consumer Data Protection Act (VCDPA)

---

Tailscale

Tailscale provides a zero-config mesh VPN and zero-trust networking platform that securely connects devices and services across any network.

Legal Name: Tailscale Inc.

Headquarters: 401-50 Lynn Williams Street, Toronto, ON M6K 3R9, Canada

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Zero-Trust Networking / Mesh VPN

Certifications

• SOC 2 Type II
• GDPR
• CCPA

---

Puzzle

Puzzle provides modern, real-time accounting software that gives startups automated bookkeeping and instant finance metrics such as cash, burn and runway.

Legal Name: Puzzle Financial Inc.

Headquarters: 575 Market Street, Floor 5, San Francisco, CA 94105, USA

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link

Category: Accounting Software

Certifications

• SOC 2 Type 2
• GDPR
• CCPA

---

Probo

Probo is an open-source compliance platform that helps startups achieve SOC 2 and ISO 27001 certifications quickly and affordably, with expert guidance and no vendor lock-in.

Legal Name: Probo Inc.

Headquarters: 490 Post St, Suite 640,San Francisco, CA 94102, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Subprocessors List	Link

Category: Compliance & risk management software

---

folk

Lightweight, collaborative CRM that automates contact and relationship management for modern teams.

Legal Name: FOLK SAS

Headquarters: 31 Rue des Vinaigriers, 75010 Paris, France

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Status Page	Link
Subprocessors List	Link

Category: CRM

Certifications

• SOC 2 Type 1
• GDPR
• CCPA

---

Claap

AI-powered meeting recorder and video workspace that automates post-meeting tasks and CRM enrichment.

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Status Page	Link
Subprocessors List	Link

Category: Sales Enablement / AI Meeting Automation

Certifications

• SOC 2 Type 2
• GDPR
• CCPA

---

Pitch

Cloud-based presentation platform that lets teams collaboratively create, design, and share visually engaging slide decks in real time.

Legal Name: Pitch Software GmbH

Headquarters: Joachimstraße 7, 10119 Berlin, Germany

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Presentation Software

Certifications

• GDPR

---

Spendesk

Spendesk is a comprehensive spend management platform offering solutions like virtual and physical cards, invoice processing, and expense reimbursements to streamline company spending.

Legal Name: Spendesk SAS

Headquarters: 51 Rue de Londres, 75008 Paris, France

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Security Page	Link
Trust Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Spend Management

Certifications

• GDPR
• ISO/IEC 27001:2022
• DORA

---

Lever

Cloud-based talent-acquisition suite that combines applicant-tracking and candidate-relationship-management tools so organisations can source, engage and hire talent in one place.

Legal Name: Lever, Inc.

Headquarters: 1125 Mission Street, San Francisco, CA 94103, United States

Links

Resource	Link
Website	Link
Privacy Policy	Link
Terms of Service	Link
Service Level Agreement	Link
Security Page	Link
Status Page	Link
Data Processing Agreement	Link
Subprocessors List	Link

Category: Applicant Tracking / Talent Acquisition

Certifications

• SOC 2 Type 2
• ISO/IEC 27001
• GDPR
• CAIQ
• CCPA
• EU-U.S. Privacy Shield

---