Changes
Every observed change, reviewed before it is published. This list is the only thing on this site a competitor cannot copy.
95 published · 20 re-sourced by us, not moved by the vendor · observation began 2026-09-17· RSS feed
| Observed | Vendor | What moved | Why | Source |
|---|---|---|---|---|
| 2026-11-03 | Mailgun | Subprocessors added Amazon Web Services South Africa (Pty) Ltd Subprocessors location changed Amazon Web Services EMEA SARL: AU, BR, DE, EU, IE, SG, US, ZA -> AU, BR, DE, EU, IE, SG, US; Google LLC: BE, DE, EU, US -> AU, BE, EU, US | the vendor changed it | sinch.com |
| 2026-11-02 | Airtable | Subprocessors location changed Bright Data Ltd.: US -> DE, SG, US | the vendor changed it | airtable.com |
| 2026-11-02 | Apollo.io | Subprocessors removed NetNut Ltd. | the vendor changed it | trust.apollo.io |
| 2026-11-02 | Cloudflare | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-11-02 | Cloudflare | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-11-02 | Cloudflare | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-11-02 | Cursor | Subprocessors location changed SpaceXAI: US -> GB, US | the vendor changed it | trust.cursor.com |
| 2026-11-02 | GitLab | Subprocessors added LangChain, Inc. | the vendor changed it | about.gitlab.com |
| 2026-11-02 | Google Cloud | DPA last updated 2026-06-08 → 2026-10-30 | the vendor changed it | cloud.google.com |
| 2026-11-02 | Google Workspace | DPA last updated 2026-06-08 → 2026-10-30 | the vendor changed it | cloud.google.com |
| 2026-11-02 | Lovable | Subprocessors added TypeSafe AI | the vendor changed it | trust.lovable.dev |
| 2026-11-02 | Notion | Subprocessors added AssemblyAI Inc.; Browserbase, Inc.; Cinder Technologies Inc.; Customer.io; Google Cloud; Mailgun Technologies, Inc.; Modal Labs, Inc.; PlanetScale, Inc.; Runlayer; TypeSafe AI, Inc. Subprocessors removed Amplitude; Customer; Mailgun | the vendor changed it | trust.notion.com |
| 2026-11-02 | SAP | Valid_from 2025-09-05 → 2026-10-29 Valid until 2026-09-04 → 2027-09-04 | we read a better page | eucoc.cloud |
| 2026-11-02 | SAP | Valid_from 2025-09-05 → 2026-10-29 Valid until 2026-09-04 → 2027-09-04 | we read a better page | eucoc.cloud |
| 2026-11-02 | Sinch | Subprocessors added Amazon Web Services South Africa (Pty) Ltd Subprocessors location changed Amazon Web Services EMEA SARL: AU, BR, DE, EU, IE, SG, US, ZA -> AU, BR, DE, EU, IE, SG, US | the vendor changed it | sinch.com |
| 2026-11-02 | Snowflake | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-11-02 | Snowflake | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-11-02 | Snowflake | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-11-02 | WordPress.com | Subprocessors added Anthropic, PBC; Google LLC; Linode; OpenAI OpCo, LLC | the vendor changed it | automattic.com |
| 2026-11-02 | Zapier | Subprocessors added Ndea | the vendor changed it | zapier.com |
| 2026-10-26 | Adobe | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-26 | Adobe | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-26 | Adobe | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-26 | Datadog | Subprocessors added Nebius, Inc. | the vendor changed it | datadoghq.com |
| 2026-10-26 | Figma | Subprocessors added Lightricks Ltd.; QuiverAI, Inc. Subprocessors removed Lightricks Ltda AI, Inc. Subprocessors location changed Create Without Limits Technologies Inc. (dba Enhancor): EU, ID, MY -> US | the vendor changed it | figma.com |
| 2026-10-26 | Intercom | DPA in effect from 2025-04-09 → 2026-11-04 | the vendor changed it | intercom.com |
| 2026-10-26 | Miro | Status claimed → available-on-request | the vendor changed it | trust.miro.com |
| 2026-10-26 | Miro | Status claimed → certificate-published | the vendor changed it | trust.miro.com |
| 2026-10-26 | Mixpanel | Subprocessors removed Amazon Web Services, Inc.; Atlassian Pty, Ltd.; Zendesk, Inc. Subprocessors location changed Google, Inc.: US -> BE, DE, FI, IN, NL, US | the vendor changed it | mixpanel.com |
| 2026-10-26 | monday.com | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-26 | monday.com | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-26 | monday.com | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-26 | Perplexity | Status Active → Inactive - Withdrawal | the vendor changed it | dataprivacyframework.gov |
| 2026-10-26 | Perplexity | Status Active → Inactive - Withdrawal | the vendor changed it | dataprivacyframework.gov |
| 2026-10-26 | Snowflake | Status Active → Active - Re-certification under Review Valid until 2026-10-29 → 2027-10-22 | the vendor changed it | dataprivacyframework.gov |
| 2026-10-26 | Snowflake | Status Active → Active - Re-certification under Review Valid until 2026-10-29 → 2027-10-22 | the vendor changed it | dataprivacyframework.gov |
| 2026-10-26 | Snowflake | Status Active → Active - Re-certification under Review Valid until 2026-10-29 → 2027-10-22 | the vendor changed it | dataprivacyframework.gov |
| 2026-10-26 | Zoho | Subprocessors added AMD; AVOXI; AVOXI, Inc.; Bandwidth (Voxbone); Belgacom International Carrier Services SA (BICS); BulkSMS; Clickatell; Etisalat; Kaleyra; NTT; Sinch (formerly CLX); Tata Communications; TeleSign; Telnyx; Twilio; Validity; Value First | the vendor changed it | zoho.com |
| 2026-10-19 | Adobe | Status Active → Active - Re-certification under Review Valid until 2026-10-17 → 2027-10-16 | the vendor changed it | dataprivacyframework.gov |
| 2026-10-19 | Adobe | Status Active → Active - Re-certification under Review Valid until 2026-10-17 → 2027-10-16 | the vendor changed it | dataprivacyframework.gov |
| 2026-10-19 | Adobe | Status Active → Active - Re-certification under Review Valid until 2026-10-17 → 2027-10-16 | the vendor changed it | dataprivacyframework.gov |
| 2026-10-19 | Anthropic | Subprocessors added Intuition Machines, Inc. (hCaptcha); Parallel Web Systems, Inc. | the vendor changed it | trust.anthropic.com |
| 2026-10-19 | Calendly | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-19 | Calendly | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-19 | Calendly | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-19 | Contentsquare | DPA last updated 2026-06 → 2026-10 DPA version 2026.2 → 2026.3 | the vendor changed it | contentsquare.com |
| 2026-10-19 | Contentsquare | Subprocessors location changed Amazon Web Services, Inc.: DE, IE, US -> DE, ES, FR, GB, IE, IT, SE, US | the vendor changed it | contentsquare.com |
| 2026-10-19 | CrowdStrike | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-19 | CrowdStrike | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-19 | CrowdStrike | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-19 | Datadog | Subprocessors added Baseten Labs, Inc.; Databricks, Inc.; Fireworks.ai, Inc.; Together Computer, Inc. | the vendor changed it | datadoghq.com |
| 2026-10-19 | DigitalOcean | DPA last updated 2026-02-06 → 2026-10-14 | the vendor changed it | digitalocean.com |
| 2026-10-19 | New Relic | Subprocessors added Anthropic Claude; Google; Salesforce Service Cloud and Agentforce Subprocessors removed Salesforce Service Cloud; Zendesk | the vendor changed it | newrelic.com |
| 2026-10-19 | Notion | Status claimed → available-on-request | the vendor changed it | notion.com |
| 2026-10-19 | Notion | Status claimed → available-on-request | the vendor changed it | notion.com |
| 2026-10-19 | OpenAI | Subprocessors removed Confluent; Intercom, Inc.; Okta, Inc. Subprocessors location changed Google Cloud Platform: FI, GB, JP, NL, NO, US -> FI, GB, JP, NL, NO, SG, US; Microsoft Corporation: AE, AU, BR, CA, CH, DE, ES, FR, GB, ID, IE, IN, IT, JP, KR, MX, NL, NO, PL, SE, SG, US, ZA -> AE, AU, BE, BR, CA, CH, DE, DK, ES, FR, GB, ID, IE, IN, IT, JP, KR, MX, MY, NL, NO, NZ, PL, SE, SG, US, ZA | the vendor changed it | openai.com |
| 2026-10-19 | Salesforce | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-19 | Salesforce | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-19 | Salesforce | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-19 | Slack | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-19 | Slack | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-19 | Slack | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-19 | STACKIT | Status claimed → available-on-request | the vendor changed it | stackit.com |
| 2026-10-19 | STACKIT | Status claimed → certificate-published | the vendor changed it | stackit.com |
| 2026-10-12 | CrowdStrike | Status Active → Active - Re-certification under Review Valid until 2026-10-10 → 2027-10-09 | the vendor changed it | dataprivacyframework.gov |
| 2026-10-12 | CrowdStrike | Status Active → Active - Re-certification under Review Valid until 2026-10-10 → 2027-10-09 | the vendor changed it | dataprivacyframework.gov |
| 2026-10-12 | CrowdStrike | Status Active → Active - Re-certification under Review Valid until 2026-10-10 → 2027-10-09 | the vendor changed it | dataprivacyframework.gov |
| 2026-10-12 | Microsoft | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-12 | Microsoft | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-12 | Microsoft | Status Active - Re-certification under Review → Active | the vendor changed it | dataprivacyframework.gov |
| 2026-10-12 | Proton | Contact set to mailto:[email protected] Expires set to 2026-12-31T23:59:59.999Z Policy set to https://proton.me/security/bug-bounty Problems set to State none → published | the vendor changed it | proton.me |
| 2026-10-12 | Slack | Status Active → Active - Re-certification under Review Valid until 2026-10-20 → 2027-10-06 | the vendor changed it | dataprivacyframework.gov |
| 2026-10-12 | Slack | Status Active → Active - Re-certification under Review Valid until 2026-10-20 → 2027-10-06 | the vendor changed it | dataprivacyframework.gov |
| 2026-10-12 | Slack | Status Active → Active - Re-certification under Review Valid until 2026-10-20 → 2027-10-06 | the vendor changed it | dataprivacyframework.gov |
| 2026-10-12 | Zapier | Subprocessors added Baseten; Meta Subprocessors removed Pinecone | the vendor changed it | zapier.com |
| 2026-10-05 | Figma | Subprocessors added Automattic Inc. (Akismet); Cloudinary | the vendor changed it | figma.com |
| 2026-10-05 | Stripe | Subprocessors added Databricks, Inc.; January Technologies, Inc.; LoanProSoftware, LLC; Snowflake, Inc. Subprocessors removed Lantec (UK) Ltd; Mitek Systems, Inc. | the vendor changed it | stripe.com |
| 2026-09-18 | Atlassian | EU data location Enterprise only → Paid upgrade Minimum plan set to Standard, Premium or Enterprise Note rewritten | we read a better page | support.atlassian.com |
| 2026-09-18 | Cloudflare | EU data location Not stated → Paid upgrade Minimum plan set to Enterprise Note rewritten | we read a better page | developers.cloudflare.com |
| 2026-09-18 | Datadog | EU data location Not stated → Terms not stated Note rewritten | we read a better page | docs.datadoghq.com |
| 2026-09-18 | Figma | Note rewritten | we read a better page | help.figma.com |
| 2026-09-18 | GitHub | EU data location Not stated → Enterprise only Minimum plan set to GitHub Enterprise Cloud with data residency Note rewritten | we read a better page | docs.github.com |
| 2026-09-18 | HubSpot | EU data location Terms not stated → Paid upgrade Minimum plan set to Starter, Professional or Enterprise Note rewritten | we read a better page | knowledge.hubspot.com |
| 2026-09-18 | Intercom | EU data location No extra charge → Enterprise only Minimum plan set to Advanced or Expert, annual contract Note rewritten | we read a better page | intercom.com |
| 2026-09-18 | Miro | EU data location Terms not stated → EU by default Minimum plan set to Included on all plans Note rewritten | we read a better page | help.miro.com |
| 2026-09-18 | MongoDB | EU data location Not stated → Terms not stated Note rewritten | we read a better page | mongodb.com |
| 2026-09-18 | Notion | EU data location Not stated → Enterprise only Minimum plan set to Enterprise to migrate an existing workspace Note rewritten | we read a better page | notion.com |
| 2026-09-18 | OpenAI | EU data location Not stated → Paid upgrade Minimum plan set to Eligible customers, new Projects only Note rewritten | we read a better page | developers.openai.com |
| 2026-09-18 | Sentry | EU data location No extra charge → Terms not stated Note rewritten | we read a better page | docs.sentry.io |
| 2026-09-18 | Slack | EU data location Not stated → Paid upgrade Minimum plan set to Business+ or Enterprise Note rewritten | we read a better page | slack.com |
| 2026-09-18 | Snowflake | EU data location Not stated → Terms not stated Note rewritten | we read a better page | docs.snowflake.com |
| 2026-09-18 | Twilio | Note rewritten | we read a better page | twilio.com |
| 2026-09-18 | Vercel | Note rewritten | we read a better page | vercel.com |
| 2026-09-18 | Zendesk | EU data location Terms not stated → Paid upgrade Minimum plan, Note rewritten | we read a better page | support.zendesk.com |
| 2026-09-18 | Zoom | EU data location Terms not stated → Paid upgrade Minimum plan set to Paid account; admins only Note rewritten | we read a better page | support.zoom.com |
Nothing reaches this page unreviewed. A decision is bound to the exact content of the event it approved, so correcting the underlying facts invalidates the approval and returns the event to the queue rather than carrying consent across to something the reviewer never read.