Loading…
Blog
What changed at vendors and regulators, and what it means for your documentation.
22 October 2026
What changed in Retool's DPA and subprocessor list — and what to check nowRetool replaced the named legal entity in its DPA with a general reference to "Retool" and its Affiliates, swapped Intercom and Salesforce for Pylon Labs on its subprocessor list, and restructured its DPA definitions — each change requiring a specific records update.
20 October 2026
What changed in QuickBooks's DPA — and what to check nowQuickBooks's DPA has been intermittently inaccessible, leaving the documented legal basis for international data transfers unverifiable. Here is what to check before your next client review.
19 October 2026
What changed in Spotnana's transfer documentation — and what to check nowSpotnana's transfer mechanism signals oscillated between present and absent across ten days in October 2026, correlated with site outages. Here is what to check before any client-facing work relies on the mechanism being in place.
14 October 2026
What changed in Recurly's DPA and subprocessor list — and what to check nowRecurly's DPA page returned a 404, seven subprocessors were removed, and the trust page lost its security detail. Here is what to check for each affected client.
13 October 2026
What changed in Stripe's DPA and subprocessor list — and what to check nowStripe changed its contracting entity logic, expanded US state privacy law coverage, restructured its subprocessor list, and updated its trust page. Here is what to review for any client using Stripe.
12 October 2026
Zendesk removed its DPA: what to check before your next client reviewZendesk's Data Processing Agreement disappeared from its published URL on 27 September 2026, taking the named transfer mechanisms and the contracting legal entity with it. Here is what to check for each affected client.
6 October 2026
NIS2 national profiles: vendor contract clauses your client must verify by jurisdictionEach member state's NIS2 transposition creates different vendor audit and contract requirements. This guide maps the clauses that matter in Germany, the Netherlands, Belgium, Denmark, Sweden, Austria and Ireland.
24 September 2026
UK GDPR vs. GDPR: vendor registry differences that matter to your client baseUK GDPR and GDPR share a document checklist but diverge on transfer mechanisms, supervisory authorities, and vendor DPA coverage. Here is where the gaps appear.
20 September 2026
Article 25(1) and the moment your client becomes the providerHow an SME that buys a model and fine-tunes it takes on the provider's obligations, the questions that surface it, and what changes in the file.
Enter your website. Free, no sign-up, the report in about a minute.