Updated daily

What changed in AI vendor disclosures

Sub-processor lists and data processing agreements that differ from the last copy we held, over the 30 days to September 2026. Each entry carries the URL, the date we read it, and the hashes of the two copies we compared.

No sub-processor list or DPA in this record changed in the last 30 days.

An empty month is a result, not a gap. These documents move on legal timescales, and most months most vendors do not touch them. The pages are still being re-read on schedule.

The vendors we watch and the pages we read.

What a date here does and does not tell you

The date is when we read the page, not when the vendor edited it. We cannot see an edit history. What we can say is that on the earlier date the page held one thing, and on this date it held another.

A change here is not a finding against a vendor. Vendors add sub-processors as a matter of routine, and publishing the change is the vendor doing what its agreement says.

What happens downstream when an AI vendor changes a page follows one of these entries through the contracts underneath it.