Can I publish a versioned subprocessor list?
Yes. Use a dedicated section and update it whenever subprocessors change. Buyers can subscribe to notifications via your changelog.
We use cookies and similar technologies to improve your experience and analyse usage. By continuing you agree to our Privacy Policy.
Data platforms
A trust center for data, analytics and AI platforms
When you process customer data — especially PII or training data — buyers want detailed disclosure. VendorLens gives data and AI platforms a single portal for DPAs, subprocessor lists, data residency, retention policies and security evidence.
Who's asking
Enterprise data, privacy and security reviewers — particularly in regulated industries and the EU.
Documents typically shared in Data platforms
DPA / GDPR addendum
Subprocessor list with locations
Data retention and deletion policy
Data residency statement
SOC 2 Type 2 report
ISO 27001 certificate
Pen test summary
AI / ML model card (where applicable)
What slows down deals today
Subprocessor questions never end
Every enterprise wants the current subprocessor list. A trust page with a versioned subprocessor section makes it self-serve.
Data residency is a moving target
Buyers want clear, up-to-date statements per region. Email PDFs go stale.
AI vendors face new disclosure asks
Model cards, training data sources, opt-out flows — all need a place to live.
Frequently asked
Is VendorLens GDPR compliant?
VendorLens itself runs in the EU on Lovable Cloud (Supabase) and signs a DPA. See the privacy policy and DPA for details.
Related pages
Continue exploring related solutions, industries and comparisons.