Vendor terms, watched for you.

Why it matters

Your vendors keep changing the deal after you sign.

Two things move between your annual reviews. Driftline watches both, for the vendors you rely on.

Contract drift

The terms you approved get rewritten.

• What moves: Notice windows, retention periods, subprocessor lists.
• Why it matters: A change can take effect before your team has read it.
• What Driftline does: Tells you what changed, what it means and when it takes effect.

AI drift

What a vendor may do with your data in AI keeps changing.

• What moves: Training rights, new AI features, new model providers.
• Why it matters: Your data can reach an AI provider you never assessed.
• What Driftline does: Keeps a current answer to who can train on your data, and tells you when it changes.

See both on a real vendor

When the board asks

“Which of our vendors can train on our data?” You have the answer.

Every vendor you track carries a current AI posture: whether they may train on your data, how long you have to object, whether they promise to tell you first, and which AI providers sit behind them. When it moves, you hear.

• Answer the training-rights question for the whole portfolio in one view.
• Know your objection window before a new AI use takes effect.
• Know which AI providers sit behind each vendor, and hear when a new one appears.

AI posture · one vendor · Sample

• Training rights · Permit · opt-out
• Objection window · 14 days
• Notification commitment · None reserved
• AI subprocessors · +1 model provider

One vendor's panel — counted across the market in the public Vendor AI Census.

Who it is for

One record, three people who stop getting surprised.

• Security · CISO

  Accepted risk stops rotting

  The vendor you signed off in January is not the vendor you have in July, and your register now moves when the vendor does.

  Which vendors changed materially since our last review?

• Privacy · DPO · Legal

  You object while you still can

  Notice windows, training rights and new subprocessors reach you before the effective date, with the clause to cite.

  Did anyone give us the 30 days we negotiated?

• Procurement · Vendor management

  Renewals start from evidence

  Everything a vendor changed since you signed, in one place, when it is time to talk terms again.

  What did they change on us this contract?

Alerts & integrations

Nothing new to log into.

Alerts land in Slack, email, signed webhooks or the app itself; your audit trail streams to the SIEM you already run; your AI assistant can ask about any public vendor record.

• Slack
• Email
• HMAC-signed webhooks
• In-app
• Splunk HEC
• Microsoft Sentinel
• Datadog
• SAML SSO
• MCP server

Every material change is flagged on that vendor's open risks and carried out by Slack cards, HMAC-signed webhooks, email, in-app alerts and SIEM streams (HTTPS webhook, Splunk HEC, Microsoft Sentinel, Datadog), and public vendor data is queryable from a read-only MCP server.

In-app alerts on every plan; Slack cards, HMAC-signed webhooks, email and SIEM streaming on the Growth plan.