01
New fourth parties
Identify newly named providers and connect them to the products, data categories, or functions described publicly.
Subprocessor monitoring
See when a vendor adds, removes, or relocates a subprocessor.
Subprocessor notices arrive inconsistently: email lists, trust centers, tables, help-center posts, or silent edits. Track Changes gives your team one repeatable control for the public source—establish the list you reviewed, check it daily, and preserve the exact additions or removals that deserve attention.
What to put on the watchlist
Monitor the pages incorporated into real decisions.
- Vendor subprocessor and infrastructure-provider lists
- Trust-center subprocessor tables
- Regional hosting and data-location disclosures
- Product-specific third-party service lists
- Subprocessor-notification and objection procedures
Review signals
Focus on the change behind the page update.
02
Location changes
Review new countries, hosting regions, or cross-border processing locations against the existing vendor record.
03
Notice-window drift
Watch the procedure itself for shorter notice, narrower objections, or different notification channels.
A repeatable control
From vendor approval to continuous evidence.
- 01
Record the approved list
Capture the public source on the day the vendor review is completed or the service is approved.
- 02
Check the source daily
Detect table and list changes without relying on the vendor to send a complete email notice.
- 03
Open a targeted review
Route only the new evidence to the owner who can assess location, purpose, transfer, and objection questions.
Scope and limits
Use the evidence with human judgment.
Does monitoring replace vendor notification obligations?
No. It is a backstop and evidence source, not a substitute for contractual notice.
Can it monitor our own published subprocessor list?
Yes. Monitoring your own list can help catch publication drift after infrastructure or product changes.
What if a trust center requires a login?
The founding pilot is for public pages and does not bypass authentication or access controls.
Fixed-price founding pilot