Terms of service · Privacy policy · DPA · Subprocessor list

Your vendor just changed its DPA and its AI terms. Would you know?

When your vendors change their terms, privacy policies, DPAs or subprocessor lists, Driftline tells you what changed, what it means — a shorter notice window, the right to train on your data — and which risk it touches.

Where it helps

Every moment a vendor can change the deal on you.

You review a vendor once, then live with it for years. Driftline covers the four moments where a change you did not see becomes your problem.

Before you sign

Open a vendor and see its current AI posture and what it changed in the last year, before procurement says yes.

Onboard with a current picture

Between reviews

A vendor quietly shortens a notice window or adds an AI provider, and you hear about it with time to object, not from the auditor.

Never find out too late

At renewal

Every change since you signed sits in one history, so you renegotiate from evidence instead of memory.

Renew on your terms

At audit

When an auditor asks how you know a vendor materially changed, you show the record, not a promise.

Answer the auditor

A vendor just changed its terms.

Reduce the risk before it lands.

Driftline shows you what changed, when it takes effect, and which of your other vendors it reaches, so you can object, opt out or renegotiate while there's still time.

  1. Jul 10 · Vendor posts new terms
  2. Jul 13 · Driftline alerts you
  3. Jul 24 · Takes effect

11 days to act

Sample dates

What you see

A change lands. Here is your next ten minutes.

No dashboards to babysit. The change comes to you where you already work, says what it means, and leaves a record behind.

Minute 1 · You read it

One message, in plain language, with the date that matters. You already know whether it is worth a meeting.

Slack · #vendor-risk · Sample

Northwind changed its DPA Notice before a new subprocessor drops from 30 days to 14.

Takes effect Jul 24 · 11 days to act · touches Subprocessor oversight

Minute 3 · You decide

The change is already sitting on the right risk, with the clause attached. Accept it, object, or hand it to legal. Nothing to re-key.

Northwind · Risk register · Sample

  • Subprocessor oversight · Flagged · Raised by the DPA change · owner: Privacy
  • Data residency · EU · Accepted · Unchanged since the Jan review
  • AI training rights · Prohibited · Current posture, traced to the clause

Minute 10 · You act in time

You object, opt out or renegotiate while the window is open. The audit trail records that you did.

Email · Sample

Objection to DPA §6.2 change · Northwind

Hi Dana, under §6.2 of our DPA we are objecting to the shortened notice period before it takes effect on Jul 24. The previous wording and the new wording are attached.

  • Days before it took effect: 11
  • Evidence attached: Old and new wording

What changed in your vendors' terms this year?

Paste your vendor list. Our engine builds your free Vendor Drift Report — the material changes, who can train on your data, and where your exposure concentrates.

Get your free Vendor Drift Report · Start 14-day trial