Library

Reference for compliance professionals.

Durable, factual content for vendor privacy management. Not blog posts. We add things slowly — only what we'd actually want a colleague to read.

Guides

Long-form references

SOC 2 vendor monitoring, GDPR risk assessment, DPA review checklists, transfer impact assessments. Process and reference.

Glossary

Privacy term definitions

DPA, DPIA, subprocessor, controller, processor, SCCs, TIA, RoPA, DSAR. Plain-English definitions with regulatory context.

Jurisdictions

Regulation references

GDPR, CCPA, CPRA, VCDPA, CPA, TDPSA, DPDP, LGPD. Each one's vendor-monitoring requirements, in practical terms.

Vendor directory

Privacy facts per vendor

Structured facts — jurisdictions, subprocessor counts, retention periods, breach notification windows — drawn from each vendor's published documents. Updated on change.

Reports

State of Vendor Privacy

Quarterly aggregate reports drawing on Thorgate's accumulated tracking data. Industry-wide patterns in subprocessor sprawl, retention, AI training disclosures.