{"id":13906500,"url":"https://github.com/privacyradius/gdpr-tracker","last_synced_at":"2025-07-11T03:32:36.646Z","repository":{"id":48644429,"uuid":"130922822","full_name":"privacyradius/gdpr-tracker","owner":"privacyradius","description":"A crowdsourced directory tracking the compliance and security practices of cloud services and their subprocessors","archived":false,"fork":false,"pushed_at":"2021-07-16T05:43:12.000Z","size":478,"stargazers_count":179,"open_issues_count":13,"forks_count":61,"subscribers_count":12,"default_branch":"master","last_synced_at":"2025-04-05T20:27:18.848Z","etag":null,"topics":["audit","certificates","certification","cloud","cloud-service","cloud-services","compliance","crowdsourcing","gdpr","gdpr-tracker","legal","privacy","privacy-radius","regtech","security"],"latest_commit_sha":null,"homepage":"https://compliancerank.com/","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/privacyradius.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2018-04-24T22:59:42.000Z","updated_at":"2025-04-05T05:35:39.000Z","dependencies_parsed_at":"2022-09-03T13:25:17.769Z","dependency_job_id":null,"html_url":"https://github.com/privacyradius/gdpr-tracker","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/privacyradius/gdpr-tracker","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/privacyradius%2Fgdpr-tracker","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/privacyradius%2Fgdpr-tracker/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/privacyradius%2Fgdpr-tracker/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/privacyradius%2Fgdpr-tracker/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/privacyradius","download_url":"https://codeload.github.com/privacyradius/gdpr-tracker/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/privacyradius%2Fgdpr-tracker/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":264721412,"owners_count":23653932,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["audit","certificates","certification","cloud","cloud-service","cloud-services","compliance","crowdsourcing","gdpr","gdpr-tracker","legal","privacy","privacy-radius","regtech","security"],"created_at":"2024-08-06T23:01:37.060Z","updated_at":"2025-07-11T03:32:32.176Z","avatar_url":"https://github.com/privacyradius.png","language":"JavaScript","funding_links":[],"categories":["JavaScript"],"sub_categories":[],"readme":"# [ComplianceRank (formerly GDPR Tracker)](https://compliancerank.com/) \n\n\u003cimg src=\"https://github.com/privacyradius/gdpr-tracker/blob/master/images/screenshot.png\"\u003e\n\n[ComplianceRank](https://compliancerank.com/) is a crowdsourced directory that makes it easier for companies and consumers to keep track of the data handling practices of their subcontractors and cloud services in real-time.\n\nThis repository holds all the services displayed in the directory. We strongly believe that data handling practices should be easily available to business \u0026 customers. \n\n## [How to add a service?](https://github.com/privacyradius/gdpr-tracker/blob/master/CONTRIBUTING.md)\n\nYou can add a service by following the [contribution guidelines](https://github.com/privacyradius/gdpr-tracker/blob/master/CONTRIBUTING.md).\n\n## Format\n\nWe use JSON Schema to validate the data and to maintain a high level of data quality. Please find the schema at the [following location](https://github.com/privacyradius/gdpr-tracker/blob/master/schema.json).\n\n| Field | Type | Format | Required | Options | Description |\n|---------------------|---------|------------------|----------|:-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------:|---------------------------------------------------------------------------:|\n| id | string |  | * |  | Unique id to identify the company |\n| name | string |  | * |  | Name of the company |\n| description | string |  | * |  | Description of the service |\n| website | string | url | * |  | Website of the service |\n| applicationUrl | string | url | * |  | Application of the service |\n| categories | array |  | * |  | Categories that the service belongs to |\n| iconUrl | string | url | * |  | URL to the icon of the service (recommended size 400x400px). Must be HTTPS |\n| countryHQ | string | ISO ALPHA-2 code | * |  | Country of HQ |\n| gdprReadyStatus | enum |  | * | unknown\u003cbr\u003e inProgress\u003cbr\u003e ready\u003cbr\u003e nonCompliant | GDPR readiness status of this service |\n| privacyUrl | string | url |  |  | Link to privacy policy |\n| dsarUrl | string | url |  |  | Data Subject Access Rights Form URL |\n| dpaUrl | string | url |  |  | Data Processing Agreement URL |\n| subprocessorsUrl | string | url |  |  | Subprocessors overview URL |\n| dataCenters | array |  |  |  | Locations where data is hosted |\n| hostingProviders | array |  |  |  | Hosting providers |\n| contacts | array |  |  |  | Appointed DPOs or privacy officers per region, we only support 3 types DPO, Privacy Officer, Other|\n| certifications | enum |  |  | - ISO 27001\u003cbr\u003e - ISO 27002\u003cbr\u003e - ISO 27017\u003cbr\u003e - ISO 27018\u003cbr\u003e - C5\u003cbr\u003e - PCI DSS Level 1\u003cbr\u003e - PCI DSS Level 3.1\u003cbr\u003e - PCI DSS Level 3.2\u003cbr\u003e - PCI DSS Level 4.0\u003cbr\u003e - SOC 1\u003cbr\u003e - SOC 2 Type I\u003cbr\u003e - SOC 2 Type II\u003cbr\u003e - SOC 3\u003cbr\u003e - HIPAA\u003cbr\u003e - HITECH\u003cbr\u003e - RESO\u003cbr\u003e - ISAE 3000\u003cbr\u003e - EU-U.S. Privacy Shield\u003cbr\u003e - Swiss-U.S. Privacy Shield\u003cbr\u003e - CSA\u003cbr\u003e - OpenID\u003cbr\u003e - TRUSTe Enterprise Privacy Certification\u003cbr\u003e - SOX | Certifications |\n| dataBreaches | array |  |  |  | Reported data breaches |\n| articles | array |  |  |  | GDPR \u0026 privacy related articles |\n| bugBountyProgramUrl | string | url |  |  | Link to bug bounty program |\n| statusUrl | string | url |  |  | Link to status page |\n| statusTwitter | string |  |  |  | Twitter account that communicates about service status \u0026 uptime |\n| businessModel | array |  |  | - B2B\u003cbr\u003e- B2C\u003cbr\u003e- B2B2C | Business model |\n| verified | boolean |  |  |  | Verified by company representative |\n\n### [Example](https://github.com/privacyradius/gdpr-tracker/blob/master/schema.json)\n\n```\n{\n  \"id\": \"acme\",\n  \"name\": \"Acme\",\n  \"description\": \"CRM \u0026 Customer platform for SMBs\",\n  \"categories\": [\n    \"CRM\", \n    \"Customer Support\"\n  ],\n  \"iconUrl\": \"https://pbs.twimg.com/profile_images/922908923207839744/5EZID3tH_400x400.jpg\",\n  \"website\": \"https://www.acmesaas.com\",\n  \"applicationUrl\": \"https://app.acmesaas.com\",    \n  \"twitter\": \"acme\",\n  \"countryHQ\": \"US\",\n  \"gdprReadyStatus\": \"inProgress\",\n  \"privacyUrl\": \"https://www.acmesaas.com/privacy\",\n  \"dsarUrl\": \"https://bs.gdprform.io\",\n  \"dpaUrl\": \"https://www.acmesaas.com/dpa\",\n  \"subprocessorsUrl\": \"https://www.acmesaas.com/subprocessors\",\n  \"dataCenters\": [\n    \"EU\"\n  ],\n  \"hostingProviders\": [\n    \"AWS\", \n    \"Digital Ocean\"\n  ],\n  \"contacts\": [\n    {\n      \"type\": \"DPO\",\n      \"name\": \"John Doe\",\n      \"email\": \"john@dpo.com\",\n      \"region\": \"EU\"\n    }, \n    {\n      \"type\": \"DPO\",\n      \"name\": \"Tim Doe\",\n      \"email\": \"tim@dpo.com\",\n      \"region\": \"US\"\n    }\n  ],\n  \"certifications\": [\n    \"ISO 27001\", \n    \"HIPAA\"\n  ],\n  \"dataBreaches\": [\n    {\n      \"date\": \"10/12/2017\",\n      \"url\": \"https://www.beatswtich.com/breach\"\n    }\n  ],\n  \"articles\": [\n    {\n      \"date\": \"02/12/2018\",\n      \"url\": \"https://www.beatswtich.com/gdpr\"\n    }\n  ],\n  \"bugBountyProgramUrl\": \"https://www.beatswtich.com/bounty-program\",\n  \"statusUrl\": \"https://www.beatswtich.com/status\",\n  \"statusTwitter\": \"beatswitchstatus\",\n  \"securityUrl\": \"https://www.beatswtich.com/security\",\n  \"businessModel\": [\"B2C\"]\n  \"verified\": true\n}\n```\n\n## Removal\n\nIf you want your service to be removed from the tracker, send in a pull request with the reason stated.\n\n## License\n\nMIT License. Please see the [license file](https://github.com/privacyradius/gdpr-tracker/blob/master/LICENSE) for more information.\n\n## About\n\nMade in Belgium 🇧🇪 Europe 🇪🇺\n\nThe GDPR Tracker is created by Privacy Radius. Privacy Radius is a European provider of AI-powered data and privacy solutions to help companies create trusted environments to protect consumers' privacy and data rights. \n\n## Disclaimer \n\nWe do our best to ensure that the data we provide is complete, accurate and useful. However, because we do not verify all the data, and because the processing required to make the data useful is complex, we cannot be liable for omissions or inaccuracies.\n\n## Links\n\n* [ComplianceRank](https://compliancerank.com/)\n* [GDPR Checklist](https://www.gdprchecklist.io)\n* [GDPR Form](https://www.gdprform.io)\n* [Twitter](https://twitter.com/privacyradius)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fprivacyradius%2Fgdpr-tracker","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fprivacyradius%2Fgdpr-tracker","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fprivacyradius%2Fgdpr-tracker/lists"}