Use cases / Procurement leads
Search the public directory, pin your strategic vendors, subscribe to their change feeds. Find out about a subprocessor swap or certification gap the day it happens — not at the next renewal cycle. One bookmark replaces the “please send your latest SOC 2” email.
You manage relationships with 50–500 SaaS vendors. Each one publishes their security posture differently: a static one-pager here, a Vanta trust portal there, a GDrive folder of expired PDFs everywhere else. Renewals stall when nobody knows which document was “the latest.” You can't tell which vendors have refreshed their evidence in the last quarter without manually checking each one.
Then a vendor swaps a subprocessor. You find out three months later when their next renewal lands. Or their SOC 2 lapses; you find out at audit time. The signal you need lives on their site, but you're not subscribed to it because nothing standardizes how to subscribe.
Live example
Live, indexed, free. Try a search for vendors you already use — most are probably already in here.
Search the directoryDirectory data is collected from public sources. Always validate against the vendor's own statements before procurement decisions.