Resources
Answer the questionnaire. Tell your customers. Object in time.
When an AI vendor changes its terms or adds a sub-processor (a company your vendor hands your data to), the paperwork lands on you. Here are the templates, checklists and vendor data to get it done. All free to read.
Start here
Start with these three.
- TemplateWord downloadCustomer notice templateThe notice to send your customers when a sub-processor changes.Open it ›
- TemplateWord downloadSecurity questionnaire answersEight AI questions customers ask: a good answer for each, and what to attach.Open it ›
- TemplateWord downloadSub-processor objection letterA short, polite letter that quotes your vendor's own clause back to them.Open it ›
What do you need to get done?
Pick a job, from answering a security questionnaire to reading a data processing agreement (DPA), or search. Anything marked Word download comes with a file you can edit and send.
35 of 35
Watch vendor pages
5 resourcesKnow which pages to read and how often.
- DatasetWhere vendors publish their lists and DPAsThe page to read for each vendor's sub-processor list and DPA.
- ToolThe vendor record in your AI assistantA free, read-only MCP server: windows, the pages we watch and model retirements.
- ExplainerWord downloadThe AI Vendor Change LexiconThe window to object, silence as consent and more, with real clauses where we hold one.
- GuideWord downloadWhich vendor pages to watchTen kinds of vendor page, and which ones are worth watching.
- DatasetWord downloadWhat AI vendors have retiredEvery model and API retirement we've read, soonest first, with its source page.
Track sub-processors
5 resourcesFind out when a vendor's list moves, and decide what to do.
- ExplainerWhat is a sub-processor?The company your vendor brings in, its published list, and your window to object.
- ToolScan your sub-processor pagePaste your sub-processor page to see which vendors we watch, and each vendor's window.
- DatasetWhat changed in AI vendor disclosuresSub-processor lists and DPAs that differ from the copy we held before.
- DatasetWord downloadWho your AI vendors depend onThe companies that sit under many of your AI vendors at once.
- TemplateWord downloadSub-processor register templateTen columns in the shape a reviewer asks for, ready to fill in.
Tell your customers
5 resourcesWork out who you owe notice, and by when.
- ExplainerWhat happens downstream when a vendor edits a pageOne edit, three contracts: the vendor, you, and your enterprise customer.
- TemplateWord downloadCustomer notice templateThe notice to send your customers when a sub-processor changes.
- GuideWord downloadWhen a vendor's change mattersThe rules that decide when a vendor's edit moves a fact you need to act on.
- TemplateWord downloadCustomer notice worksheetWork out which customers you owe notice, and by when.
- GuideDo you have to tell your customers?Six questions, in order, that decide whether you owe your customers notice.
Answer a questionnaire
7 resourcesAnswer what a customer's security team asks about the AI vendors in your product.
- GuideAnswering “list every AI sub-processor”What the question asks, where each answer is published, and what to say about gaps.
- DatasetWord downloadWhich certifications AI vendors claimSOC 2, ISO 27001, ISO 42001 and more, as each vendor's trust page states them.
- DatasetWord downloadWho says they won't train on your dataCommitments not to train, and opt-outs, quoted from vendors' own pages.
- DatasetWord downloadHow long AI vendors keep your dataEvery retention window we can quote, grouped by vendor.
- TemplateWord downloadSecurity questionnaire answersEight AI questions customers ask: a good answer for each, and what to attach.
- ChecklistWord downloadAI supply-chain question set29 questions to put to an AI vendor about its own supply chain.
- DatasetWord downloadWhere AI vendors say they keep your dataResidency commitments and transfer disclosures, kept apart: they look alike and mean opposite things.
Read a DPA
11 resourcesUnderstand what your agreement actually obliges you to do.
- DatasetWindows, by vendorEach vendor's window to object or notice period, quoted from its own DPA.
- ExplainerWhat a notice clause obliges you to doWhy the clock starts at their notice, not the day you find out.
- ComparisonDo AI providers train on your data?OpenAI, Anthropic, Google and Microsoft on training and retention, side by side.
- ComparisonAWS, Google Cloud and Microsoft sub-processor termsHow much notice each cloud gives before it adds a sub-processor.
- ComparisonAI model providers' sub-processor termsOpenAI, Anthropic, Google Cloud, Mistral, xAI and Groq: each one's notice period and how it's sent.
- ExplainerWhat is a DPA?What the law says a data processing agreement has to contain.
- ExplainerWhat are SCCs?The EU's approved transfer terms, and the sub-processor period vendors fill in.
- ChecklistWord downloadDPA red-flag checklistSix DPA terms that decide whether a change reaches your customers before you do.
- TemplateWord downloadAI addendum clause bankTerms to ask for in a DPA, each with a smaller fallback if refused.
- TemplateWord downloadSub-processor objection letterA short, polite letter that quotes your vendor's own clause back to them.
- DatasetWord downloadSilence as consentThe agreements where not objecting in time counts as approving the sub-processor.
Prove what a page said
2 resourcesProve what a page said, and when.
Every vendor quote on these pages carries its source and the date we read it, and each download carries the same sources as its page. How the record is kept.
None of this is legal advice; your signed contract governs. Corrections are free to request, and a vendor can claim and correct its own record for nothing.
Hear about it the morning we read the change.
Name the AI vendors in your product. When a page you watch changes a fact, you get the lines that moved and the date your window closes.
Try it free for 30 daysNo card. Nothing to cancel.