Xither

Free scan

How long do your vendors give you to object?

When a vendor adds a sub-processor (a company it hands your data to), its agreement sets how long you have to say no.

Paste the page where your company lists its sub-processors. We’ll show which of them we watch, and each one’s window.

The page your company publishes listing its sub-processors, or the sub-processor page of its trust center. We read it once. We keep only the address and how many vendors matched.

What you get back, for each vendor.

The window, then the clause it comes from, word for word. This row is real.

Demandbase

5 days to object

“Customer may object in writing to Demandbase’s appointment of a new Sub-processor on reasonable grounds relating to data protection by notifying Demandbase promptly in writing within five (5) calendar days of an update to the Sub-processor List referenced in Section 3.3 …”

https://demandbase.com/data-processing-agreement, read 2026-10-02

Every window we can quote is in the notice windows table.

What happens when you press Scan.

We read your page once.

As XitherBot, following the site's robots.txt. If the page needs a browser to show its list, we read it through a third-party reader service. If the site refuses automated readers, the result says so.

The windows are the vendors' own words.

Quoted from our dated copy of each vendor's agreement, the same quotes as the notice windows table.

Names we don't watch stay on the list.

Listed as your page prints them, marked “not in the record”.

Only the address is kept.

We keep the address you scanned and how many vendors matched, plus a hashed network address for the rate limit: 5 scans an hour.

Track sub-processors

More for this job.

See every resource