Data Flow & Jurisdiction
Whose laws govern your data, and your users' data?
Data originates with your application and everyone who uses it. Third parties and sub-processors receive it. ISP, hosting and CDN locations decide where it comes to rest. And the legal frameworks covering those locations decide who can compel access to it.
Data from your application and your users does not stop at the first vendor. It travels on through sub-processors, several steps beyond any supplier you have a direct relationship with. ISP and hosting locations reveal the legal regimes in play, from GDPR to CPRA to national frameworks that reach a company wherever its servers happen to sit.
Integrated Reports
-
Data Flow & Flow-Downs
A directed picture of information movement: what leaves the application, which third party receives it, and where those recipients pass it on next. A tracking script that sends data to its own vendor, who forwards it to an advertising exchange, who shares it with its partners, creates a chain of custody that runs well past the vendor you actually have a relationship with. It is what lets a data protection impact assessment be built from observed evidence rather than vendor questionnaires.
-
Data Hosting & Storage
Where data comes to rest, as opposed to where it travels. For each destination, the hosting arrangement behind it and whether it sits inside or outside the boundary you define. Privacy regulation treats data in transit and data at rest differently, and this report keeps them separate.
-
Addresses / Locations
The physical geography of the supply chain: server locations, the corporate addresses of the entities involved, and the registered offices behind them, in one list with a map. It converts an abstract technical footprint into something a non-technical reviewer can act on, because an address in a country your policy prohibits is a decision point, not a data point.
-
Governing Law / Jurisdictions
Which legal regimes have a claim on your data, for each entity and each hosting location in the supply chain, including regimes that grant government access to data held by companies within their reach regardless of where the data physically sits. Findings roll up into a jurisdiction summary showing every regime touching the application and how much of the supply chain sits under each.
One capture is enough to start
Capture a session in the browser, import it, and read what comes back. A free community account is available immediately.