Talk to DPAFlow
DPAFlow is currently inactive, but you can still reach us by email — about the service, privacy and data requests, or security.
Email us
- General questionssupport@dpaflow.com
- Privacy & data requestsprivacy@dpaflow.com
- Security disclosuresecurity@dpaflow.com
What DPAFlow did
DPAFlow monitored the subprocessor lists, data processing agreements and privacy pages that SaaS vendors publish, so privacy teams could see when a vendor added, removed or changed a subprocessor, with the captured page and a before/after comparison as evidence. It is currently inactive: it no longer checks vendors or sends alerts.
5 months
of monitoring
From 20 May to 26 October 2026.
1,105
vendors monitored
Vendors whose published sources DPAFlow read successfully, out of 1,164 in its catalogue.
121,398
pages captured
Successful captures from 137,641 checks of vendors' published pages, plus 8,027 page screenshots kept as evidence.
332
vendors with a subprocessor change
Vendors with at least one recorded subprocessor addition, removal or list change.
Counted from DPAFlow's database as it stood when monitoring stopped on 26 October 2026. Change alerts were generated automatically and were not each reviewed by hand.
Changes DPAFlow recorded
Six subprocessor changes DPAFlow recorded on well-known vendors' published lists. Each one was checked against the before/after evidence DPAFlow kept and against the vendor's own page on 27 October 2026.
GitHub
AddedAdded Cerebras Systems Inc. and DataDome Solutions, Inc. as subprocessors.
Figma
AddedAdded Eleven Labs Inc., World Labs Technologies, Inc. and Digital Ocean.
HubSpot
AddedAdded Baseten Labs, Bright Data and Exa Labs, effective 16 October 2026, in a list update dated 16 September.
Notion
RemovedRemoved Amplitude, listed for event logging for analytics.
Zapier
Added and removedRemoved Pinecone and added Baseten, in a notice posted 9 October 2026 and effective 23 October.
General, privacy, and security
Write to the address that matches your question.
Privacy & data requests
Questions about personal data, data-protection requests, or opting out of email. Email privacy@dpaflow.com.
Security disclosure
Vulnerability reports and security questions. Email security@dpaflow.com directly — please do not include exploit detail in a first message.
Contact FAQ
Quick answers about reaching us while the service is inactive.
Is there a contact form?
No. This website is now a static site with no forms. Email the address that matches your question from your own mail client.
Can I sign up for or buy DPAFlow?
No. DPAFlow has been inactive since 26 October 2026. New accounts, trials and subscriptions are not offered.
How should I report a security concern?
Write to security@dpaflow.com. Please keep exploit detail out of a first message.
Who do I ask about personal data?
Email privacy@dpaflow.com with your question or request.