Soon Launching in Canada first
Your subprocessor list, kept honest.
One register for the vendors that touch your customers' data: their certifications and expiry dates, DPAs, evidence and risk. Publish your subprocessor list from it, and have a clean report ready when a customer, auditor or board asks.
Built for founders and privacy or security leads at small SaaS teams who answer security questionnaires and DPA requests.
- Self-serve, with a free plan. No sales call, no annual contract.
- Private by default. Your public page goes live only when you say so.
- Built in Ontario for Canadian SaaS. Hosted in Canada from launch.
Why Vendorlane
Your customers will ask. Have the answer ready.
-
"Who handles our data?"
Bigger customers want your subprocessor list, your DPAs and proof of each vendor's SOC 2 or ISO 27001, usually in the middle of a deal.
-
The spreadsheet goes stale
Certificates lapse without anyone noticing, DPAs sit in someone's inbox, and the subprocessor page on your website drifts out of date.
-
The big platforms are overkill
Full compliance suites cost five figures a year and start with a sales call. You need an organised register now, long before an audit.
What you get
Everything behind your subprocessor list, in one place.
-
A register for every vendor
Purpose, data handled, processing country, owner, risk tier and DPA for each vendor, in one searchable list.
-
Certifications that don't lapse quietly
Track SOC 2 and ISO 27001 dates, auditor and scope. Reminders go out before a certificate expires or a review comes due.
-
Evidence, stored privately
Keep reports, DPAs and other documents next to the vendor they belong to, private to your team.
-
Risk scores you can explain
Each vendor gets a score with the reasons behind it, so you can stand behind it when someone asks why.
-
A public page customers can follow
Publish your subprocessor list with a changelog. Customers subscribe with double opt-in and get an email when it changes.
-
Reports for stakeholders
An audit-readiness dashboard, a designed PDF for your board, investors or a customer's security team, and CSV export anytime.
Start free. Grow into it.
Begin on the free plan and upgrade when your vendor list grows. Accounts are protected with multi-factor sign-in, and your data is hosted in Canada from launch. An export to the larger compliance platforms is planned, so your work comes with you if you outgrow us.