eucsoft

Trust centres

Every vendor's own compliance page, read for you — including the ones behind a sales call and the ones that only exist after JavaScript runs. How a vendor discloses is itself a fact, and no one else publishes it.

7of 20 cannot be read by an ordinary HTTP client
1carry a vendor date over a year before our reading
13are plainly public
5 gated or refused to us · 25%2 JavaScript only · 10%13 plainly public · 65%
How each vendor discloses, latest observation per document.
VendorDocumentDisclosureVendor's own dateSourceObserved
Slacksubprocessors · partial transcriptionRefusednot datedsalesforce.com2026-09-18
Mirotrust-center · partial transcriptionGatednot datedtrust.miro.com2026-09-18
MongoDBtrust-center · partial transcriptionGatednot datedtrust.mongodb.com2026-09-18
Snowflaketrust-center · partial transcriptionGatednot datedtrust.snowflake.com2026-09-18
Verceltrust-center · partial transcriptionGatednot datedsecurity.vercel.com2026-09-17
Notiontrust-center · partial transcriptionJavaScript onlynot datedtrust.notion.com2026-09-17
OpenAIsubprocessors · partial transcriptionJavaScript onlynot datedopenai.com2026-09-17
Atlassiansubprocessors · partial transcriptionPublic2026-05-15atlassian.com2026-09-17
CloudflaresubprocessorsPublic2025-10-01cloudflare.com2026-09-17
DatadogsubprocessorsPublic2026-04-22datadoghq.com2026-09-17
FigmasubprocessorsPublic2026-08-07figma.com2026-09-18
GitHubsubprocessorsPublicnot dateddocs.github.com2026-09-18
HubSpotsubprocessorsPublicnot datedlegal.hubspot.com2026-09-18
IntercomsubprocessorsPublic2026-06-25intercom.com2026-09-17
MailchimpsubprocessorsPublic2024-02-29 30 momailchimp.com2026-09-18
SentrysubprocessorsPublic2026-06-01sentry.io2026-09-17
StripesubprocessorsPublic2025-12-20stripe.com2026-09-18
TwiliosubprocessorsPublic2026-09twilio.com2026-09-18
Zendesksubprocessors · partial transcriptionPublic2026-09-02support.zendesk.com2026-09-18
ZoomsubprocessorsPublic2026-04-29zoom.com2026-09-18

On a narrow screen this table shows the answer only. Plan, source and date are on each vendor's own page.

Disclosure is itself a compliance fact. A subprocessor list behind "Get access" cannot be checked by the customer who has to record it, and a list that exists only after JavaScript runs is invisible to most tooling. We record which, because the question an auditor asks is not only what does the vendor say but could you have seen it.
Two dates, not one. The date a vendor prints on its own page is not the date we read it. The gap between them is the column above. A list a customer is contractually told to rely on, last dated years ago, may be perfectly current and simply not re-dated — but the customer cannot tell, and neither can we. We publish both dates and no opinion.

"Partial transcription" means our copy covers part of a longer list. A partial list rendered as though complete is worse than no list, so it is labelled on every row it affects.