{ "schema_version": "1.0", "generated_at": "2026-06-27T06:03:47.019Z", "licence": "CC BY-SA 4.0", "attribution": "Mission-Tech Alignment Audit catalogue, Open Eye Media — https://mtaa.openeyemedia.net", "vendors": [ { "id": "0fea79ad-ac19-478d-8af7-b2e46cf11871", "slug": "openai", "name": "OpenAI, Inc.", "hqJurisdiction": "US", "legalForm": "Hybrid capped-profit / nonprofit structure. OpenAI, Inc. is a 501(c)(3) nonprofit that controls OpenAI Global LLC (the commercial entity) in which investors hold capped-return interests (currently 100× cap). In late 2024 OpenAI announced a transition to a Delaware Public Benefit Corporation (PBC); the conversion was ongoing at the time of this research and should be verified before publishing.", "ownershipStructure": "The nonprofit OpenAI, Inc. was the controlling entity as of this research. Under the proposed PBC conversion, OpenAI's nonprofit would receive a significant equity stake in the new PBC and investors would hold standard shares. Microsoft has invested over $13 billion and is OpenAI's exclusive cloud infrastructure provider via Azure. Sam Altman (CEO) holds a reported ~7% equity stake. The governance crisis of November 2023 — in which the board fired and then rehired Altman within five days — resulted in significant board restructuring and reduced independence of the nonprofit oversight mechanism.", "fundingModelKind": "vc-backed", "fundingModelDetail": "Revenue from ChatGPT subscriptions (Plus, Pro, Team, Enterprise), the OpenAI API, and a Microsoft commercial partnership. Microsoft has invested $13B+ and receives a 49% share of commercial profits until its cap is reached. OpenAI is not yet profitable; it has reported multi-billion dollar operating losses annually.", "foundedYear": 2015, "brief": "OpenAI, Inc. is a US-based AI company that operates ChatGPT and provides access to the GPT-4, GPT-4o, and o-series language models via API. It is headquartered in San Francisco, California. Microsoft is its primary investor and exclusive cloud infrastructure provider. OpenAI transitioned from a pure nonprofit to a hybrid capped-profit structure and is in the process of further transitioning to a PBC." }, { "id": "805f8300-eaa0-46c5-88cc-a3f6b294fa83", "slug": "brave-software", "name": "Brave Software, Inc.", "hqJurisdiction": "US", "legalForm": "Delaware corporation (private)", "ownershipStructure": "Brave Software, Inc. is a privately held Delaware corporation. It is co-founded by Brendan Eich (CEO) and Brian Bondy (CTO). In 2015 Brendan Eich resigned as Mozilla CEO following a public controversy over his 2008 donation to the Proposition 8 campaign (which sought to ban same-sex marriage in California). The company has raised venture capital funding. No dual-class share structure has been publicly disclosed. Ownership details are not publicly available.", "fundingModelKind": "vc-backed", "fundingModelDetail": "Brave operates a unique ad revenue model (Brave Ads) using the Basic Attention Token (BAT), a cryptocurrency on the Ethereum blockchain. Users who opt into Brave Ads receive BAT tokens; advertisers pay in BAT; Brave takes a share of ad revenue. Brave also earns revenue from its default search (Brave Search) and partnerships (e.g., default search revenue from Bing if users do not use Brave Search). The BAT model is controversial: it replaces traditional web advertising with a crypto-monetised alternative.", "foundedYear": 2015, "brief": "Brave Software, Inc. is a US private company that develops the Brave browser, a Chromium-based privacy-focused browser that blocks ads and trackers by default and operates the Brave Ads/Basic Attention Token (BAT) advertising model. Headquartered in San Francisco, California." }, { "id": "b98cc30c-e967-443d-9ade-e9c5079aa10d", "slug": "mozilla-foundation", "name": "Mozilla Foundation", "hqJurisdiction": "US", "legalForm": "Nonprofit organisation (501(c)(3)); parent of Mozilla Corporation", "ownershipStructure": "The Mozilla Foundation is a US nonprofit organisation (501(c)(3)) incorporated in California. It wholly owns Mozilla Corporation, a for-profit subsidiary that develops and distributes Firefox and Mozilla's other products. The Foundation's mission is \"to ensure the internet is a global public resource, open and accessible to all.\" Mozilla Corporation's profits can be used by the Foundation for its nonprofit mission. There are no shareholders; the Foundation is governed by a board of directors. The Foundation cannot be acquired by a commercial entity.", "fundingModelKind": "foundation-backed", "fundingModelDetail": "Mozilla Corporation derives the majority of its revenue from default-search partnership agreements, primarily with Google (approximately 80-90% of revenue historically). Mozilla also receives revenue from Mozilla VPN subscriptions, Firefox Relay, and donations to the Foundation. The Google search deal creates a structural dependency on the company whose browser Firefox most directly competes with.", "foundedYear": 2003, "brief": "The Mozilla Foundation is a US nonprofit that wholly owns Mozilla Corporation, the developer of Firefox. Mozilla's mission is to ensure the open, accessible, and healthy internet. Mozilla Corporation develops Firefox for Desktop and Android, Firefox Focus, and related products. Headquartered in San Francisco, California." }, { "id": "fba33f72-d285-4e1f-ae1c-81f544cb383b", "slug": "ghost-foundation", "name": "Ghost Foundation", "hqJurisdiction": "SG", "legalForm": "Nonprofit company limited by guarantee (Singapore)", "ownershipStructure": "Ghost Foundation is a nonprofit company limited by guarantee incorporated in Singapore. It was founded by John O'Nolan (CEO) and Hannah Wolfe (COO) in 2013. There are no shareholders; profits are reinvested in the project's development. The nonprofit structure means Ghost cannot be acquired by a commercial entity in the conventional sense. John O'Nolan retains significant influence as CEO and founder. The Ghost open source project is maintained by the Foundation and community contributors.", "fundingModelKind": "foundation-backed", "fundingModelDetail": "Ghost Foundation derives revenue from Ghost(Pro), its managed hosting service. Ghost(Pro) subscriptions fund ongoing development of the open source Ghost platform. Ghost does not take any revenue share from publisher memberships or subscriptions — publishers keep 100% of their subscription revenue (minus Stripe payment processing fees). This model aligns the Foundation's interests with publisher success.", "foundedYear": 2013, "brief": "Ghost Foundation is a Singapore-based nonprofit that develops and maintains Ghost, a free and open source (MIT licence) publishing and CMS platform. It operates Ghost(Pro), a managed hosting service. Ghost is focused on independent publishing, journalism, and membership/subscription businesses. Ghost Foundation cannot be acquired; its mission is to build sustainable tools for independent journalism." }, { "id": "639a1e54-2e32-4b5c-ac32-cec1ca79869b", "slug": "migadu", "name": "Migadu", "hqJurisdiction": "CH", "legalForm": "Migadu is a small Swiss company. The precise corporate form and registered legal entity are not prominently disclosed on the company website.", "ownershipStructure": "Migadu is independently owned and operated as a small, bootstrapped business. Not known to have received external investment. Very small team; minimal public corporate disclosure.", "fundingModelKind": "bootstrapped", "fundingModelDetail": "Subscription revenue only. Flat-rate email hosting fees based on usage tiers (messages and storage), not per-mailbox. No advertising; no data monetisation.", "foundedYear": null, "brief": "Migadu is a small Swiss email hosting provider for custom domains at flat-rate subscription pricing. Independently owned and bootstrapped. Notable for its unlimited-mailbox flat-rate model. Corporate structure not publicly disclosed." }, { "id": "83823dae-bc55-45f1-ac7c-a78833c6fbe9", "slug": "tutanota", "name": "Tutanota", "hqJurisdiction": "DE", "legalForm": "Tutao GmbH is a German GmbH (Gesellschaft mit beschränkter Haftung) incorporated in Hanover, Germany. Products rebranded from Tutanota to Tuta in late 2023.", "ownershipStructure": "Tutao GmbH is a small, privately held German company. Founded in 2011 by Matthias Pfau and Arne Möhle in Hanover. Bootstrapped and independently owned; no institutional investors disclosed.", "fundingModelKind": "bootstrapped", "fundingModelDetail": "Subscription revenue only. Tuta offers a free tier and paid plans for end-to-end encrypted email, calendar, and contacts. No advertising; no user-data monetisation.", "foundedYear": null, "brief": "Tutao GmbH is a small, independently owned German private company in Hanover, developing the Tuta (formerly Tutanota) end-to-end encrypted email, calendar, and contacts service. Founded 2011 by Matthias Pfau and Arne Möhle. Bootstrapped; rebranded from Tutanota to Tuta in late 2023." }, { "id": "c5add581-0060-4e31-9f02-398cef66c4a3", "slug": "automattic", "name": "Automattic, Inc.", "hqJurisdiction": "US", "legalForm": "Delaware corporation (private)", "ownershipStructure": "Automattic, Inc. is a privately held Delaware corporation founded and led by Matt Mullenweg (CEO). Mullenweg is also co-creator of the WordPress open source project and administrator of WordPress.org. Automattic has raised venture capital including from Insight Partners, Salesforce Ventures, and Tiger Global, with a most recently disclosed valuation of approximately $7.5 billion (2021). The company is distributed-first with no physical headquarters. Exact share ownership is not publicly disclosed; Mullenweg retains significant influence as founder and CEO.", "fundingModelKind": "vc-backed", "fundingModelDetail": "Revenue from WordPress.com subscription plans, WooCommerce payments, Jetpack plugin subscriptions, Akismet, and other products. Automattic operates WordPress.com as its primary hosted service.", "foundedYear": 2005, "brief": "Automattic, Inc. is the US private company that operates WordPress.com (the hosted website and CMS platform), WooCommerce, Jetpack, Tumblr, and other products. Matt Mullenweg is both CEO of Automattic and the administrator of the separate WordPress.org open source project, creating a unique concentration of influence over both the commercial and open source WordPress ecosystems." }, { "id": "8e89f0f5-0327-4b8c-b624-7ffa93dd6e00", "slug": "duck-duck-go", "name": "Duck Duck Go, Inc.", "hqJurisdiction": "US", "legalForm": "Delaware corporation (private)", "ownershipStructure": "Duck Duck Go, Inc. is a privately held Delaware corporation founded and led by Gabriel Weinberg (CEO). The company raised venture capital funding including from Union Square Ventures. Detailed ownership structure and current investor composition are not publicly disclosed. The company does not publish financial accounts. Weinberg has stated an intention to keep the company independent.", "fundingModelKind": "vc-backed", "fundingModelDetail": "DuckDuckGo generates revenue from contextual search advertising: when users search for a keyword, relevant text ads are displayed based only on the search term — not on user history or profile. Ad revenue is not tied to user tracking. DuckDuckGo also has a default search partnership with browsers and devices (earning placement fees).", "foundedYear": 2008, "brief": "Duck Duck Go, Inc. is a US private company that operates DuckDuckGo, a search engine designed to provide private, no-tracking search. It does not store search histories, does not build user advertising profiles, and displays contextual ads based solely on search terms. Headquartered in Paoli, Pennsylvania." }, { "id": "16ff5198-9241-4943-8c83-cfed67dfba3a", "slug": "8x8", "name": "8x8, Inc.", "hqJurisdiction": "US", "legalForm": "Delaware corporation (publicly traded, NASDAQ)", "ownershipStructure": "Publicly traded on NASDAQ under the ticker EGHT. 8x8 is a standard single-class share corporation with no founder super-voting rights. The company is institutionally owned; top shareholders include mutual funds and index funds. 8x8 acquired the Jitsi project assets from Atlassian in 2018; Atlassian had earlier acquired them from the original Jitsi developers led by Emil Ivov.", "fundingModelKind": "public", "fundingModelDetail": "Public company; revenue from cloud communications and video products including 8x8 Video Meetings, 8x8 Contact Center, and 8x8 Voice. The open source Jitsi Meet project is maintained by 8x8 engineers and community contributors; it is not a revenue-generating product directly.", "foundedYear": 1987, "brief": "8x8, Inc. is a US-based publicly traded cloud communications company headquartered in Campbell, California. It operates the Jitsi open source project and the meet.jit.si public hosted video conferencing service, as well as a commercial cloud communications platform (8x8 Video Meetings, 8x8 Contact Center). 8x8 acquired the Jitsi project from Atlassian in 2018." }, { "id": "856693d2-5b3b-4a56-8105-6310ad10c7a4", "slug": "zoom-video-communications", "name": "Zoom Video Communications, Inc.", "hqJurisdiction": "US", "legalForm": "Delaware corporation (publicly traded, NASDAQ)", "ownershipStructure": "Publicly traded on NASDAQ under the ticker ZM since April 2019. Founder and CEO Eric Yuan holds Class B super-voting shares (10 votes per share versus 1 vote for Class A), giving him approximately 25% of total voting power while holding roughly 13% of economic equity. The dual-class structure concentrates governance control in the founder.", "fundingModelKind": "public", "fundingModelDetail": "Public company; revenue from subscription plans across Free, Pro, Business, and Enterprise tiers.", "foundedYear": 2011, "brief": "Zoom Video Communications, Inc. is a US-based publicly traded video conferencing company headquartered in San Jose, California. Its eponymous platform became one of the dominant video calling services globally during the COVID-19 pandemic. Zoom offers meetings, webinars, team chat, and phone services." }, { "id": "186ba367-1c4f-44a1-a97c-633ac117d48d", "slug": "slack-technologies", "name": "Slack Technologies, LLC", "hqJurisdiction": "US", "legalForm": "Limited liability company (wholly owned subsidiary of Salesforce, Inc.)", "ownershipStructure": "Slack Technologies, LLC is a wholly owned subsidiary of Salesforce, Inc. (NYSE: CRM), which acquired Slack in July 2021 for approximately $27.7 billion. Salesforce is publicly traded and is the world's largest CRM software company. Slack operates as an independent product unit within Salesforce but its data and infrastructure are increasingly integrated with the Salesforce platform. There are no minority shareholders in the Slack subsidiary.", "fundingModelKind": "public", "fundingModelDetail": "Revenue from Slack subscription plans (Pro, Business+, Enterprise Grid) and from bundled sale with Salesforce CRM products. The free tier is a customer acquisition funnel.", "foundedYear": 2013, "brief": "Slack Technologies, LLC is the operator of the Slack team messaging and collaboration platform. It is a wholly owned subsidiary of Salesforce, Inc., which acquired Slack in 2021. Slack is headquartered in San Francisco, California and processes customer messaging data on infrastructure operated in the United States." }, { "id": "9d037929-2d5b-4f34-991f-a9d3a6d6bd90", "slug": "anthropic", "name": "Anthropic, PBC", "hqJurisdiction": "US", "legalForm": "Anthropic, PBC is a Delaware Public Benefit Corporation. The Public Benefit Corporation structure legally requires Anthropic to balance the interests of shareholders against a broader public benefit purpose (AI safety). This is a meaningful governance choice: it places a legal obligation on the company beyond profit maximisation.", "ownershipStructure": "Anthropic was founded in 2021 by Dario Amodei (CEO), Daniela Amodei (President), and several other former OpenAI employees. Major investors include Amazon ($4 billion commitment, including $1.25B initial investment), Google (significant investment), Spark Capital, and others. Amazon has agreed to make Anthropic models available via Amazon Bedrock as part of the investment relationship. Despite the investor relationships, Anthropic maintains that its PBC structure and safety mission govern decision-making.", "fundingModelKind": "vc-backed", "fundingModelDetail": "Anthropic earns revenue from Claude API access (for developers and businesses) and consumer subscriptions (Claude.ai Free and Pro tiers). The company has also received substantial investment from Amazon and Google, which provides runway for continued model development. As of 2024, Anthropic's valuation was approximately $18 billion.", "foundedYear": 2021, "brief": "Anthropic, PBC is a US AI safety company and the developer of Claude. Founded in 2021 by former OpenAI executives, Anthropic focuses on AI safety research alongside product development. Anthropic pioneered Constitutional AI methodology for model alignment. Major investors include Amazon and Google. Anthropic is structured as a Public Benefit Corporation, creating a legal obligation to balance commercial interests with the broader benefit of humanity." }, { "id": "c4cba5d0-4d8b-4850-9c90-93b3f739555d", "slug": "mistral-ai", "name": "Mistral AI SAS", "hqJurisdiction": "FR", "legalForm": "Société par Actions Simplifiée (SAS) — French simplified joint-stock company. Mistral AI is incorporated in France and headquartered in Paris. It is subject to French law and EU GDPR. As a French company, it is NOT subject to US CLOUD Act.", "ownershipStructure": "Mistral AI was founded in 2023 by Arthur Mensch (CEO), Guillaume Lample, and Timothée Lacroix — all former DeepMind and Meta AI Research scientists. The company raised €105 million in a Series A round led by Andreessen Horowitz (a16z) in June 2023, followed by a €600 million Series B in June 2024 at a valuation of approximately €6 billion. Investors include a16z, Lightspeed, General Catalyst, Salesforce, NVIDIA, and others. French state investment agency Bpifrance has also invested, reflecting the French government's strategic interest in supporting a European AI champion.", "fundingModelKind": "vc-backed", "fundingModelDetail": "Mistral earns revenue from the Mistral API (pay-per-token for developer and enterprise API access), le Chat Pro subscription (consumer product), and enterprise contracts. Open-weight model downloads are free. Mistral is venture-backed with no advertising revenue model.", "foundedYear": 2023, "brief": "Mistral AI SAS is a French AI company and the leading European frontier AI lab. Founded in 2023, Mistral achieved remarkable model performance with its first open-weight release (Mistral 7B) and followed with Mixtral 8x7B (mixture-of-experts). Mistral has positioned itself as a European alternative to US AI labs with strong open-weight model releases and an EU-jurisdiction data processing posture. Mistral's consumer product is \"le Chat\"." }, { "id": "cc818785-cb3c-4b09-bd70-606645de107b", "slug": "ollama", "name": "Ollama, Inc.", "hqJurisdiction": "US", "legalForm": "Ollama, Inc. is a privately held US corporation. Limited public information is available about Ollama's exact legal structure; it is incorporated in the US. Ollama is an open-source project with a commercial entity behind it.", "ownershipStructure": "Ollama was founded by Jeffrey Morgan and Michael Chiang. The company has received seed funding (exact investors not fully disclosed). Ollama is primarily known as an open-source tool (MIT licence) that runs large language models locally; the commercial entity provides the model library and tooling. The software is free and open source; Ollama's business model is not primarily subscription-based.", "fundingModelKind": "vc-backed", "fundingModelDetail": "Ollama is primarily funded through investment. The Ollama tool is free and open source under the MIT licence. Ollama's model library and infrastructure are free to use. No subscription or API fees for local model inference. The company's long-term revenue model has not been publicly detailed.", "foundedYear": 2023, "brief": "Ollama, Inc. is a US company that develops the Ollama open-source tool for running large language models locally on standard hardware (macOS, Windows, Linux). Ollama makes it straightforward to download and run open-weight AI models (Llama 3, Mistral, Gemma, Phi, and others) without any internet connection during inference. Founded in 2023, Ollama has rapidly become the most widely used local LLM runner." }, { "id": "a3243378-2541-4ea5-92d5-1af7e94cfa49", "slug": "github", "name": "GitHub, Inc. (Microsoft subsidiary)", "hqJurisdiction": "US", "legalForm": "Delaware corporation. GitHub, Inc. is a wholly owned subsidiary of Microsoft Corporation (acquired 2018 for $7.5 billion). Microsoft is a publicly traded Washington State corporation (NASDAQ: MSFT).", "ownershipStructure": "GitHub is wholly owned by Microsoft Corporation. Microsoft has full control over GitHub's strategic direction and data practices. As a US subsidiary, GitHub is subject to the same US legal regime as Microsoft, including CLOUD Act and FISA Section 702. GitHub's development platform hosts approximately 100 million developers globally, giving Microsoft significant leverage in the developer tools market.", "fundingModelKind": "public", "fundingModelDetail": "GitHub Copilot is a subscription service: $10/month Individual, $19/user/month Business, $39/user/month Enterprise. GitHub also offers free Copilot access to verified students and open-source maintainers. Revenue from Copilot is a significant and growing component of GitHub's business.", "foundedYear": 2008, "brief": "GitHub, Inc. is a Microsoft-owned developer platform. GitHub Copilot is GitHub's AI code completion assistant, powered by OpenAI's Codex/GPT-4 models via Microsoft Azure. It was the first major AI code assistant and remains the market leader by adoption. Launched in 2021 (technical preview), generally available 2022." }, { "id": "1d49a2db-7f92-4245-a14b-b6040537cbb8", "slug": "apple", "name": "Apple Inc.", "hqJurisdiction": "US", "legalForm": "California corporation (publicly traded, NASDAQ)", "ownershipStructure": "Apple Inc. is a publicly traded California corporation listed on NASDAQ (AAPL). Tim Cook serves as CEO. No single controlling shareholder; major institutional investors include Vanguard, Berkshire Hathaway, BlackRock. Market capitalisation approximately $3+ trillion (2024), the world's most valuable company by market cap.", "fundingModelKind": "public", "fundingModelDetail": "Apple's revenue is approximately $385 billion (fiscal year 2024) from iPhone (~49%), Mac (~8%), iPad (~7%), Wearables (~9%), and Services (~22%). Services (App Store, iCloud, Apple TV+, Apple Music, licensing payments from Google for default Safari search) contribute an increasing share. Apple reportedly earns $15-20 billion per year from Google for Safari search default.", "foundedYear": 1976, "brief": "Apple Inc. is a US-based technology company manufacturing iPhone, iPad, Mac, Apple Watch, and related software platforms (iOS, macOS, Safari, iCloud). Headquartered in Cupertino, California. Apple is the world's most valuable publicly traded company." }, { "id": "cb128933-fe50-4bf3-9276-bb941794b69b", "slug": "librewolf-community", "name": "LibreWolf Community Project", "hqJurisdiction": "EU", "legalForm": "Unincorporated community project. LibreWolf has no formal legal entity, registered company, or foundation. It is maintained by a group of volunteers operating under an open-source collaboration model.", "ownershipStructure": "LibreWolf is a community project with no single owner or company. It was originally started by a community of privacy-focused developers and is maintained on GitLab (gitlab.com/librewolf-community). Governance is informal, based on contributor consensus. No venture capital, no non-profit foundation, no corporate sponsor.", "fundingModelKind": "other", "fundingModelDetail": "LibreWolf accepts voluntary donations (via Open Collective and other platforms). There is no commercial revenue model. Development is entirely community-funded and volunteer-driven.", "foundedYear": 2020, "brief": "LibreWolf is a community-maintained privacy fork of Mozilla Firefox. It removes Mozilla telemetry, tracking, and advertising features from Firefox and adds stronger default privacy settings. Maintained by volunteers with no formal corporate structure." }, { "id": "39d5099b-bf13-4c19-9173-9e121ba5c972", "slug": "mullvad-vpn", "name": "Amagicom AB (Mullvad VPN)", "hqJurisdiction": "SE", "legalForm": "Amagicom AB is a Swedish private limited company (aktiebolag — AB). It operates the Mullvad VPN service and co-developed the Mullvad Browser with the Tor Project.", "ownershipStructure": "Amagicom AB is a privately held Swedish company. It was founded in 2009 by Fredrik Strömberg and Daniel Berntsson. The company operates independently and has no venture capital investors. Revenue comes from Mullvad VPN subscriptions. The company has a strong privacy-by-design ethos and accepts payment anonymously (including cash and cryptocurrency).", "fundingModelKind": "bootstrapped", "fundingModelDetail": "Mullvad Browser is free and open source. It is funded by Mullvad VPN's subscription revenue — Mullvad considers the browser part of its broader privacy product offering, complementing the VPN. There is no advertising or data monetisation.", "foundedYear": 2009, "brief": "Amagicom AB is a Swedish privacy company operating Mullvad VPN, one of the most privacy-focused VPN services available. The company partnered with the Tor Project to develop the Mullvad Browser." }, { "id": "040575dd-cf89-43c8-a868-879e91216137", "slug": "bastian-allgeier", "name": "bastian allgeier GmbH", "hqJurisdiction": "DE", "legalForm": "GmbH (Gesellschaft mit beschränkter Haftung) — German private limited company. Small independent company operated by Bastian Allgeier.", "ownershipStructure": "Kirby is developed and maintained by bastian allgeier GmbH, a small German company operated by Bastian Allgeier, the sole author of Kirby. The company is entirely independent, not venture-backed, and not publicly listed. Kirby is funded through licence sales.", "fundingModelKind": "bootstrapped", "fundingModelDetail": "Kirby is commercial open-source software. The source code is publicly available on GitHub but requires a paid licence for production use (approximately €99 per site per major version). Revenue comes entirely from one-time licence sales, not recurring subscriptions or advertising.", "foundedYear": 2012, "brief": "bastian allgeier GmbH is a small independent German company run by Bastian Allgeier that develops and maintains the Kirby flat-file CMS. Kirby is a developer-focused CMS used primarily by agencies and designers for bespoke websites." }, { "id": "2af133fb-8ce5-4bd7-99d8-d083e370ae25", "slug": "squarespace", "name": "Squarespace, Inc.", "hqJurisdiction": "US", "legalForm": "Delaware corporation. Squarespace IPO'd via direct listing in May 2021 (NYSE: SQSP). In May 2024 Permira, a UK-based private equity firm, announced an acquisition of Squarespace for approximately $6.9 billion; the company was delisted from NYSE following completion.", "ownershipStructure": "Founded in 2003 by Anthony Casalena (CEO), who remains CEO post-acquisition. Following the 2024 Permira acquisition, Squarespace became a private company. Permira is a private equity firm; its ownership introduces typical PE pressure on margin improvement and eventual exit. Casalena retained a significant stake in the private company.", "fundingModelKind": "vc-backed", "fundingModelDetail": "Subscription-based SaaS. Revenue from website builder subscriptions (Personal, Business, Commerce tiers). Additional revenue from domain registration, email marketing (via Squarespace Email Campaigns), and e-commerce transaction fees. Squarespace reported approximately $1 billion in annual revenue prior to the 2024 privatisation.", "foundedYear": 2003, "brief": "Squarespace, Inc. is a US-based website building and hosting SaaS company. Founded in 2003, it operates in the website builder market alongside Wix and WordPress.com. Squarespace is known for its design-forward templates. In 2024 it was acquired by Permira private equity for ~$6.9B." }, { "id": "78c37a8e-4d3f-44c3-bf98-dd84b308d1e8", "slug": "substack", "name": "Substack, Inc.", "hqJurisdiction": "US", "legalForm": "Delaware corporation (privately held)", "ownershipStructure": "Substack, Inc. is a privately held Delaware corporation founded in 2017 by Chris Best, Hamish McKenzie, and Jairaj Sethi. Chris Best serves as CEO. Venture-backed; investors include a16z (Andreessen Horowitz), Y Combinator, Reid Hoffman, and others. Substack raised $65 million in a 2021 Series B led by a16z. Not publicly listed.", "fundingModelKind": "vc-backed", "fundingModelDetail": "Substack takes a 10% cut of paid newsletter subscription revenue. Free newsletters cost Substack nothing; revenue is generated entirely when writers charge readers. Substack does not run advertising. The platform is free for writers and free for readers of free newsletters.", "foundedYear": 2017, "brief": "Substack, Inc. is a US-based publishing platform focused on email newsletters and subscription-based writing. It is used by independent journalists, writers, and creators who monetise directly via reader subscriptions. Substack powers many high-profile independent media publications." }, { "id": "662fbfa5-a648-4e10-a7b1-a4e754a5ce85", "slug": "wix", "name": "Wix.com Ltd", "hqJurisdiction": "IL", "legalForm": "Israeli company (Ltd) incorporated under Israeli law, headquartered in Tel Aviv. Listed on NASDAQ (WIX). The US subsidiary Wix.com Inc. handles US-based operations.", "ownershipStructure": "Wix.com Ltd is a publicly traded company on NASDAQ. Founded in 2006 by Avishai Abrahami, Nadav Abrahami, and Giora Kaplan. Avishai Abrahami serves as CEO. No single controlling shareholder; major institutional investors include Insight Partners, Vanguard, BlackRock. Market capitalisation approximately $5-7 billion (2024). The company has significant operations in Israel (R&D, headquarters) and the US (sales, marketing).", "fundingModelKind": "public", "fundingModelDetail": "Freemium and subscription-based SaaS. Revenue from premium website subscriptions, domain registration, Wix Payments (e-commerce), Wix Stores, and Wix Apps marketplace. Wix reported approximately $1.5 billion in annual revenue (2024).", "foundedYear": 2006, "brief": "Wix.com Ltd is an Israeli-founded, NASDAQ-listed website builder and hosting company. It serves over 250 million registered users globally. Wix is one of the three dominant website builders alongside Squarespace and WordPress.com." }, { "id": "b69b7e06-3cf3-4360-893d-de065dec1699", "slug": "wordpress-foundation", "name": "WordPress Foundation / Automattic, Inc.", "hqJurisdiction": "US", "legalForm": "The WordPress Foundation is a 501(c)(3) non-profit organisation incorporated in California, USA. It holds the WordPress trademark and promotes the WordPress open-source project. Automattic, Inc. is a separate for-profit Delaware corporation (privately held) that employs the majority of core WordPress developers and operates WordPress.com, Jetpack, and other commercial products.", "ownershipStructure": "The WordPress Foundation owns the WordPress trademark and its mission is to ensure the project's long-term sustainability. Automattic, Inc. is the primary commercial entity, founded by Matt Mullenweg (CEO) and Mike Little in 2005. Automattic is backed by investors including Salesforce Ventures, Tiger Global, Coatue, and others; it has raised over $600 million and has a valuation of approximately $7.5 billion (2021 round). Matt Mullenweg holds significant sway over both the Foundation and Automattic.", "fundingModelKind": "mixed", "fundingModelDetail": "The WordPress.org CMS software is free and open source (GPL v2 or later). The WordPress project is funded through Automattic's commercial activities (WordPress.com hosting, Jetpack, WooCommerce, Pressable). Automattic dedicates a portion of its employees' time to the WordPress open-source project.", "foundedYear": 2003, "brief": "WordPress is an open-source CMS project governed by the WordPress Foundation (non-profit) and primarily developed by Automattic, Inc. (private US company). WordPress.org distributes the free, self-hosted CMS software. It is the world's most widely used CMS, powering approximately 43% of all websites." }, { "id": "4e9f1dc2-1524-4b74-9985-a369b6d66e84", "slug": "tresorit", "name": "Tresorit Zrt.", "hqJurisdiction": "CH", "legalForm": "Tresorit was incorporated as a Hungarian company (Zrt. — private limited company) but operates primarily from Zurich, Switzerland. As of reporting, Tresorit was acquired by SwissCom AG (Switzerland's state-linked telecommunications operator) in 2021. The operating entity and legal structure post-acquisition should be verified.", "ownershipStructure": "Tresorit was founded in 2011 by István Lám and Szabolcs Pásztor in Budapest/ Zurich. It was backed by investors including DFJ Esprit, TechCrunch, and others. In 2021 Tresorit was acquired by SwissCom AG, the majority state-owned Swiss telecom (the Swiss Confederation holds approximately 51% of SwissCom). The acquisition price was not publicly disclosed. Post-acquisition Tresorit has continued to operate as a separate brand.", "fundingModelKind": "public", "fundingModelDetail": "Subscription-based. Business-oriented pricing with per-seat plans. Consumer offering also available. Revenue model is subscription-only; no advertising.", "foundedYear": 2011, "brief": "Tresorit is an end-to-end encrypted cloud storage and collaboration service. Originally a Swiss/Hungarian startup, it was acquired by SwissCom AG in 2021. It is positioned as a business-grade secure file storage solution with a zero-knowledge architecture." }, { "id": "04146bf6-39f9-44a7-b121-639b17db1158", "slug": "element", "name": "Element Matrix Services Ltd", "hqJurisdiction": "GB", "legalForm": "Private limited company (Ltd) incorporated in England and Wales. The company has operated under the name \"New Vector Ltd\" and later \"Element Matrix Services Ltd\". The consumer brand is \"Element\".", "ownershipStructure": "Element was founded by Matthew Hodgson and Amandine Le Pape, the original architects of the Matrix open protocol. The company is venture-backed; investors include Notion Capital, Automattic (parent of WordPress.com), Protocol Labs, and others. Element raised a Series B of $30 million in 2021. The company is headquartered in London, England, with a globally distributed team.", "fundingModelKind": "vc-backed", "fundingModelDetail": "Revenue from hosting services (element.io managed Matrix homeservers for organisations), enterprise support contracts, and Element One (a managed consumer tier). The underlying Matrix protocol is open source and free; Element monetises through managed hosting and enterprise contracts.", "foundedYear": 2017, "brief": "Element Matrix Services Ltd (brand: Element) is a UK-based company that develops the Element messaging client (formerly Riot.im) and provides managed Matrix homeserver hosting. Element is the most widely used client for the open Matrix decentralised messaging protocol." }, { "id": "ef6eadf4-4d4c-4c9e-9003-2a2c0406e02a", "slug": "mattermost", "name": "Mattermost, Inc.", "hqJurisdiction": "US", "legalForm": "Delaware corporation (privately held)", "ownershipStructure": "Mattermost, Inc. is a privately held Delaware corporation headquartered in Palo Alto, California. Founded in 2015 by Ian Tien (CEO) and Corey Hulen. Venture-backed: investors include Andreessen Horowitz (a16z), Battery Ventures, S28 Capital, Redpoint, YC, and others. Mattermost raised a $50 million Series B in 2019 and subsequent rounds. Not publicly listed.", "fundingModelKind": "vc-backed", "fundingModelDetail": "Open-core model. The Community Edition (Team Edition) is MIT-licensed and free. Revenue comes from the Enterprise Edition, which adds SSO, compliance features, and enterprise support, sold on a per-seat subscription. Also generates revenue from hosted cloud services.", "foundedYear": 2015, "brief": "Mattermost, Inc. is a US-based open-source company building a self-hostable messaging and collaboration platform. It is widely used by US government, defence contractors, and enterprises requiring on-premises deployment with air-gap support." }, { "id": "48ac5b16-0636-40a1-b470-d2dd35ef316f", "slug": "meta", "name": "Meta Platforms, Inc.", "hqJurisdiction": "US", "legalForm": "Delaware corporation (publicly traded, NASDAQ)", "ownershipStructure": "Meta Platforms, Inc. (formerly Facebook, Inc.) is a publicly traded Delaware corporation listed on NASDAQ (META). Mark Zuckerberg controls the company through a dual-class share structure (Class B shares carry 10 votes each), giving him majority voting control. Zuckerberg owns approximately 13% of economic interest but ~60% of voting power as of 2024.", "fundingModelKind": "public", "fundingModelDetail": "Meta's revenue is derived overwhelmingly from targeted digital advertising across Facebook, Instagram, and the Meta Audience Network. WhatsApp itself generates minimal direct revenue (no ads in personal chats) but contributes to Meta's data ecosystem and drives engagement. Meta reported approximately $134 billion in revenue for 2023, ~98% from advertising.", "foundedYear": 2004, "brief": "Meta Platforms, Inc. is a US-based technology conglomerate operating Facebook, Instagram, WhatsApp, Messenger, and the Quest VR platform. WhatsApp was acquired by Meta (then Facebook) in 2014 for approximately $19 billion. Meta is headquartered in Menlo Park, California." }, { "id": "35a37028-6f97-4eaf-af80-2f8cb7e3904d", "slug": "kagi", "name": "Kagi Inc.", "hqJurisdiction": "US", "legalForm": "Delaware corporation (privately held)", "ownershipStructure": "Kagi Inc. is a privately held Delaware corporation. Founded in 2018 by Vladimir Prelovac (CEO), who previously founded Mailbird. Bootstrapped by the founder; no venture capital investors as of reporting. The company operates from California with a globally distributed team.", "fundingModelKind": "bootstrapped", "fundingModelDetail": "Subscription-based only. Kagi charges users directly for search access. No advertising. No data monetisation. Revenue comes entirely from paid subscriptions (~$10/month for starter tier). This is a deliberate business model choice to align Kagi's interests with user quality rather than advertiser quality.", "foundedYear": 2018, "brief": "Kagi Inc. is a US-based company operating a subscription-based, ad-free search engine. Founded by Vladimir Prelovac. Kagi is bootstrapped with no VC funding and is designed to provide high-quality search results funded by users rather than advertisers." }, { "id": "b63ef81c-904e-4cc6-a85a-ee1b028bf1dd", "slug": "searxng-community", "name": "SearXNG Community Project", "hqJurisdiction": "EU", "legalForm": "Unincorporated community project. SearXNG has no formal legal entity, registered company, or foundation. It is a fork of the Searx project maintained by a community of volunteers on GitHub.", "ownershipStructure": "SearXNG is an open-source community project forked from Searx in 2021. Governance is informal; the primary maintainers operate on GitHub (github.com/searxng/searxng). No single company or individual owns the project. No venture capital, no corporate sponsor, no non-profit foundation.", "fundingModelKind": "other", "fundingModelDetail": "Entirely volunteer-driven. No commercial revenue model. The project accepts donations. Individual public instance operators self-fund their hosting.", "foundedYear": 2021, "brief": "SearXNG is a free, open-source, self-hostable metasearch engine forked from the original Searx project. It aggregates results from multiple search engines (Google, Bing, DuckDuckGo, and others) without tracking users. Maintained by a volunteer community with no corporate backing." }, { "id": "f3af2180-08ba-4da8-bdaa-56d9a20ec381", "slug": "bigbluebutton-project", "name": "BigBlueButton (open source project / Blindside Networks)", "hqJurisdiction": "CA", "legalForm": "BigBlueButton is an open-source project. The primary commercial sponsor and maintainer has been Blindside Networks Inc., a Canadian company. There is no formal non-profit foundation governing BigBlueButton.", "ownershipStructure": "BigBlueButton is an open-source project originally developed by Richard Alam and co-founders in Ottawa, Canada. Blindside Networks Inc. is the primary commercial entity that employs the core maintainers and sells hosting and integration services. The project is hosted at bigbluebutton.org and its source code is on GitHub under the LGPL v3 licence. Other companies (notably Greenlight, provided by BigBlueButton project) provide managed hosting. Universities and schools worldwide self-host BigBlueButton instances.", "fundingModelKind": "other", "fundingModelDetail": "BigBlueButton is free and open source (LGPL v3). Commercial services around BigBlueButton (hosting, support, integration) are provided by Blindside Networks and third parties. The project does not have a centralised commercial revenue stream beyond Blindside Networks' services.", "foundedYear": 2007, "brief": "BigBlueButton is an open-source web conferencing system designed specifically for virtual classrooms and online education. It provides real-time sharing of audio, video, slides, whiteboard, and polls. Originally developed in Canada, it is used by universities, schools, and learning management systems (Moodle, Canvas, Sakai) worldwide." }, { "id": "f50f4e78-79ec-4377-8592-1622c9cb32e5", "slug": "cryptpad", "name": "CryptPad", "hqJurisdiction": "FR", "legalForm": "SAS (société par actions simplifiée) — French private simplified joint-stock company. CryptPad is developed by CryptPad SAS, a small French company spun out of XWiki SAS.", "ownershipStructure": "CryptPad SAS is a small, privately held French company. The project was incubated at XWiki SAS (Paris), a French open-source software company. The core development team subsequently formed an independent entity. No disclosed institutional investors; founding team retains ownership.", "fundingModelKind": "mixed", "fundingModelDetail": "Mixed: EU public research grants (Next Generation Internet programmes including NGI Assure, NGI Zero Entrust, and Horizon 2020) and commercial subscriptions for the hosted CryptPad.fr service. No advertising; no user-data monetisation.", "foundedYear": null, "brief": "CryptPad SAS is a small French company developing the CryptPad end-to-end encrypted document collaboration platform. Originally incubated at XWiki SAS, it operates independently, funded through EU research grants (NGI) and hosted-service subscriptions." }, { "id": "04689601-eb4a-4c9a-a7d9-a40ec7e1bc5e", "slug": "dropbox", "name": "Dropbox", "hqJurisdiction": "US", "legalForm": "Delaware corporation, publicly traded on the NASDAQ (ticker: DBX) since its IPO in March 2018.", "ownershipStructure": "Dropbox, Inc. is a publicly traded company (NASDAQ: DBX). Co-founded in 2007 by Drew Houston (CEO) and Arash Ferdowsi. Dual-class share structure: Class A shares (publicly traded) and Class B shares (10 votes each, held by founders), giving founders effective voting control. Early VC investors included Sequoia Capital and Index Ventures.", "fundingModelKind": "public", "fundingModelDetail": "Subscription revenue (Dropbox Plus, Professional, Business, and Enterprise plans). Additional revenue from integrations and partnerships. No advertising; Dropbox does not sell user data.", "foundedYear": null, "brief": "Dropbox, Inc. is a US public company (NASDAQ: DBX) headquartered in San Francisco, providing cloud file storage and collaboration software. Founded in 2007 by Drew Houston and Arash Ferdowsi; went public in 2018." }, { "id": "c9343b09-ec3b-440d-a194-5d52a7280b29", "slug": "google", "name": "Google Drive", "hqJurisdiction": "US", "legalForm": "Alphabet Inc. is a Delaware corporation publicly traded on the NASDAQ (ticker: GOOG / GOOGL). Google LLC, the principal operating subsidiary, is also a Delaware corporation wholly owned by Alphabet Inc.", "ownershipStructure": "Alphabet Inc. is publicly traded but controlled through a tri-class share structure. Class B shares (10 votes each) held by founders Larry Page and Sergey Brin give them majority voting control despite a minority economic interest. Sundar Pichai serves as CEO of both Google LLC and Alphabet Inc.", "fundingModelKind": "public", "fundingModelDetail": "Digital advertising is Alphabet''s dominant revenue source (~77% of revenue), primarily through Google Search and YouTube. Google services including Gmail, Drive, and Calendar are offered as free (ad-supported) consumer products and as paid Workspace tiers. Consumer free-tier users are subject to data collection for ad targeting.", "foundedYear": null, "brief": "Alphabet Inc. (parent of Google LLC) is a US public company (NASDAQ: GOOG/GOOGL) headquartered in Mountain View, California. Founded by Larry Page and Sergey Brin in 1998; one of the world''s largest companies by market cap. Primary revenue is digital advertising. Google services including Gmail, Drive, and Calendar are among the most widely used productivity tools globally." }, { "id": "25517af6-9850-486d-8f32-b071193eb7e5", "slug": "fastmail", "name": "Fastmail", "hqJurisdiction": "AU", "legalForm": "Fastmail Pty Ltd is an Australian proprietary limited company (Pty Ltd) incorporated in Melbourne, Victoria, Australia.", "ownershipStructure": "Fastmail Pty Ltd is independently and privately held. Founded in 1999 in Melbourne. Acquired by Opera Software ASA in 2010 and returned to independent ownership via a management buyout in 2013. No institutional investors.", "fundingModelKind": "bootstrapped", "fundingModelDetail": "Subscription revenue only. Fastmail offers paid email and calendar plans from approximately US$3/month. No advertising; no data monetisation.", "foundedYear": null, "brief": "Fastmail Pty Ltd is an independent Australian private company providing email, calendar, and contacts via subscription. Founded 1999 in Melbourne; returned to independent ownership in 2013. No advertising revenue and no outside investors." }, { "id": "e55081c1-3fd8-4189-9102-62b15d4a1f52", "slug": "mailbox-org", "name": "Mailbox.org", "hqJurisdiction": "DE", "legalForm": "Mailbox.org is operated by Heinlein Support GmbH, a German GmbH (private limited company) incorporated and headquartered in Berlin, Germany.", "ownershipStructure": "Heinlein Support GmbH is a small, independently and privately held German company. Founded by Peer Heinlein, a recognised German Linux and email server specialist. No external investors.", "fundingModelKind": "bootstrapped", "fundingModelDetail": "Subscription revenue only from approximately €1/month. No advertising. Powered by 100% renewable energy from German providers.", "foundedYear": null, "brief": "Mailbox.org is operated by Heinlein Support GmbH, a small German private company based in Berlin. Founded by Peer Heinlein, providing privacy-respecting email, calendar, and collaboration tools on subscription. Independently owned, powered by 100% renewable energy, GDPR-compliant." }, { "id": "321b2428-cc10-429d-bb40-98e2f9d235b2", "slug": "microsoft", "name": "Microsoft", "hqJurisdiction": "US", "legalForm": "Microsoft Corporation is a Washington State corporation publicly traded on the NASDAQ (ticker: MSFT).", "ownershipStructure": "Microsoft Corporation is publicly traded (NASDAQ: MSFT) with a single-class share structure. No controlling individual shareholder; major institutional investors include Vanguard Group, BlackRock, and State Street. Satya Nadella is CEO. Co-founded by Bill Gates and Paul Allen in 1975.", "fundingModelKind": "public", "fundingModelDetail": "Diversified revenue: cloud services (Azure, Microsoft 365), software licences (Windows, Office), gaming (Xbox, Activision Blizzard), and advertising (Bing). Microsoft 365 subscriptions fund Outlook and OneDrive. No advertising within paid Microsoft 365 tiers; Outlook.com free accounts display advertising.", "foundedYear": null, "brief": "Microsoft Corporation is a US public company (NASDAQ: MSFT) headquartered in Redmond, Washington. One of the world''s largest technology companies, developing software, cloud services, hardware, and gaming products. Products include Microsoft 365 (Outlook, OneDrive, Teams), Azure, and Bing." }, { "id": "18c307ac-d514-4f5e-be75-055731776a69", "slug": "nextcloud", "name": "Nextcloud", "hqJurisdiction": "DE", "legalForm": "Nextcloud GmbH is a German GmbH (Gesellschaft mit beschränkter Haftung) incorporated in Stuttgart, Baden-Württemberg, Germany.", "ownershipStructure": "Nextcloud GmbH is privately held. Founded in 2016 by Frank Karlitschek, who forked ownCloud to create Nextcloud under an AGPL licence. Has received venture capital investment (including Target Partners). Frank Karlitschek serves as CEO.", "fundingModelKind": "vc-backed", "fundingModelDetail": "Enterprise subscriptions and support contracts (Nextcloud Enterprise) are the primary revenue source. The core Nextcloud Hub software is AGPL-licensed open source. Commercial revenue comes from enterprise support, integration services, and compliance tooling.", "foundedYear": null, "brief": "Nextcloud GmbH is a German private company in Stuttgart developing the Nextcloud open-source collaboration platform. Founded in 2016 by Frank Karlitschek. Provides self-hosted cloud storage, file sharing, calendar, contacts, and communication under AGPL. Revenue from enterprise support contracts." }, { "id": "cb812e08-1e3e-4a6e-a291-a294a4c36334", "slug": "posteo", "name": "Posteo", "hqJurisdiction": "DE", "legalForm": "Posteo GmbH & Co. KG is a German private company (GmbH & Co. Kommanditgesellschaft) incorporated and headquartered in Berlin, Germany.", "ownershipStructure": "Posteo GmbH & Co. KG is a small, independently and privately held German company. Founded in 2009 by Patrik Löhr and Sabrina Löhr in Berlin. No external investors.", "fundingModelKind": "bootstrapped", "fundingModelDetail": "Subscription revenue only. €1/month per mailbox for ad-free, encrypted email, calendar, contacts, and notes. No advertising; no free tier. Powered by 100% renewable energy.", "foundedYear": null, "brief": "Posteo GmbH & Co. KG is a small, independently owned German private company based in Berlin. Founded by Patrik Löhr and Sabrina Löhr in 2009. Provides ad-free, privacy-focused email, calendar, and contacts for €1/month. Powered by 100% renewable energy; GDPR-compliant; no external investors." }, { "id": "839474d6-a515-454f-a27b-29b3b3c548a1", "slug": "proton", "name": "Proton Mail", "hqJurisdiction": "CH", "legalForm": "Proton AG is a Swiss corporation (Aktiengesellschaft, AG) incorporated in Geneva, Switzerland. A subsidiary, Proton Europe sàrl, is incorporated in Luxembourg as the designated EU GDPR Article 27 representative.", "ownershipStructure": "Proton AG''s primary shareholder is the nonprofit Proton Foundation, whose mission is to promote an open internet. Founded in 2013 by CERN scientists Andy Yen, Jason Stockman, and Wei Sun. External investment received (including from Temasek Holdings), but the Proton Foundation retains the primary shareholding position.", "fundingModelKind": "foundation-backed", "fundingModelDetail": "Subscription-based revenue via Proton''s tiered plans (Proton Free and Proton Unlimited bundle covering Mail, Drive, VPN, Calendar, and Pass). No advertising; Proton does not sell user data. Free tiers maintained permanently.", "foundedYear": null, "brief": "Proton AG is a Swiss corporation headquartered in Geneva, founded in 2013 by CERN scientists Andy Yen, Jason Stockman, and Wei Sun. The nonprofit Proton Foundation is the primary shareholder. Proton develops privacy-first services including Proton Mail, Proton VPN, Proton Drive, Proton Calendar, and Proton Pass. Revenue from subscriptions; no advertising." }, { "id": "1e8f4b0e-7094-4e9d-8366-113608112ba6", "slug": "signal", "name": "Signal", "hqJurisdiction": "US", "legalForm": "The Signal Foundation is a US 501(c)(3) nonprofit corporation. Signal Messenger LLC is the operating entity — a Delaware LLC wholly controlled by the Signal Foundation. Both based in Mountain View, California.", "ownershipStructure": "Established in 2018 by Moxie Marlinspike (Signal''s original creator) and Brian Acton (co-founder of WhatsApp), who made an initial donation of US$50 million. As a nonprofit, no individual holds equity. Meredith Whittaker became President in 2022.", "fundingModelKind": "donor-supported", "fundingModelDetail": "Donor-supported and grant-funded. Signal app is free; no advertising, no data monetisation. Revenue from individual donations, foundation grants, and the endowment from Brian Acton''s initial US$50 million donation.", "foundedYear": null, "brief": "The Signal Foundation is a US 501(c)(3) nonprofit (Mountain View, California) operating Signal Messenger LLC, developer of the Signal encrypted messaging app. Established in 2018 by Moxie Marlinspike and Brian Acton with a US$50 million seed donation. No advertising or data monetisation. Current president is Meredith Whittaker." }, { "id": "59e07a96-1e7c-4221-8bd2-c2f6124a8279", "slug": "ecosia", "name": "Ecosia GmbH", "hqJurisdiction": "DE", "legalForm": "Ecosia GmbH is a German GmbH (Gesellschaft mit beschränkter Haftung), a private limited liability company incorporated and headquartered in Berlin, Germany. Since 2018, the company's shares are held in trust by the Purpose Foundation (Stiftung), a German foundation that legally prevents the company from being sold or profits being distributed to private shareholders.", "ownershipStructure": "Ecosia GmbH was founded in 2009 by Christian Kroll in Berlin. In 2018, Kroll transferred control of the company to the Purpose Foundation (Stiftung), a German stewardship foundation model that holds the shares in trust and legally prevents sale of the company or distribution of profits to private shareholders. This means Ecosia cannot be sold to a third party without the consent of the Purpose Foundation. Christian Kroll continues to lead the company operationally. Ecosia is certified as a B Corporation.", "fundingModelKind": "other", "fundingModelDetail": "Advertising revenue via Microsoft Bing (Ecosia operates as a Bing affiliate and displays Bing search ads). A stated majority of profits (historically 80%+ of ad revenue) are committed to tree-planting and climate projects via Ecosia's own tree-planting programmes and partner organisations. Financial reports are published monthly on Ecosia's website. Ecosia charges no user fees and does not sell user data for advertising.", "foundedYear": 2009, "brief": "Ecosia GmbH is a German private company based in Berlin, operating an environmental search engine that donates the majority of its advertising profits to tree-planting and climate projects. Founded in 2009 by Christian Kroll, Ecosia transferred control to the Purpose Foundation in 2018, legally preventing the company from being sold. It is certified as a B Corporation and publishes monthly financial reports." }, { "id": "e23b7832-3b08-4950-8fa7-1b04b5b7e6e7", "slug": "opera", "name": "Opera Limited", "hqJurisdiction": "NO", "legalForm": "Opera Limited is a Cayman Islands exempted company publicly traded on the NASDAQ (ticker: OPRA) since its IPO in July 2018. The operational browser and technology subsidiary is Opera Norway AS (Oslo, Norway), a Norwegian aksjeselskap (AS). The corporate holding structure is Cayman Islands-based but operationally headquartered in Oslo.", "ownershipStructure": "Opera Limited is majority-controlled by a consortium of Chinese investors who acquired Opera Software ASA (the original Norwegian company) in 2016 for approximately US$600 million. The acquiring consortium comprised Kunlun Tech Co., Ltd. (a Chinese mobile gaming and internet company), Qihoo 360 Technology Co. (a Chinese cybersecurity company, now rebranded as 360 Security Technology), and Golden Brick Silk Road Capital Management Co. Kunlun Tech holds the largest stake. Opera went public on NASDAQ in 2018 (ticker: OPRA) at a reduced IPO price. Chinese investors collectively retain majority control. The original Norwegian founders and management exited following the acquisition. Qihoo 360 is a Chinese cybersecurity company with reported links to the Chinese government; this has been noted in security research and press coverage as a material concern for a browser vendor.", "fundingModelKind": "public", "fundingModelDetail": "Advertising revenue (primarily via Opera News, the embedded news feed, and default search engine partnerships), browser partnership deals (default search revenue from Google and others), and financial services (Opera has operated short-term lending products under the OKash, OPesa, and CashBean brands in Africa and Asia). The browser itself is free to download. Opera GX (gaming browser) and Opera One are variant products.", "foundedYear": 1995, "brief": "Opera Limited (NASDAQ: OPRA) is a Cayman Islands company operationally headquartered in Oslo, Norway. Originally founded in Norway in 1995 as Opera Software ASA, it was acquired in 2016 by a Chinese investor consortium led by Kunlun Tech and Qihoo 360 for approximately US$600 million. Opera develops the Opera web browser and related products. Chinese investors retain majority control; the original Norwegian ownership and management exited following the acquisition." } ], "suites": [ { "id": "703622bb-4df7-4edd-ba1f-1c37a175fea7", "slug": "microsoft-365", "name": "Microsoft 365", "brief": "Microsoft 365 is Microsoft's cloud-based productivity suite, bundling Office applications, Teams, Exchange, SharePoint, and OneDrive under a single subscription. It is the dominant enterprise productivity platform globally, used by hundreds of millions of users.", "vendorId": "321b2428-cc10-429d-bb40-98e2f9d235b2" }, { "id": "424910b0-9954-4fde-ac40-130b4aa5aef4", "slug": "proton", "name": "Proton", "brief": "Proton is a suite of end-to-end encrypted privacy services from Proton AG, including Proton Mail, Proton Drive, Proton VPN, Proton Calendar, and Proton Pass. All services share the same account and are designed to work together as a privacy-first alternative to Google Workspace.", "vendorId": "839474d6-a515-454f-a27b-29b3b3c548a1" }, { "id": "99cfcd4b-cbf9-4f32-9d16-c2a8d11a7843", "slug": "google-workspace", "name": "Google Workspace", "brief": "Google Workspace (formerly G Suite) is Google's cloud-based productivity suite, bundling Gmail, Drive, Docs, Sheets, Slides, Meet, Calendar, and Chat under a single subscription. Used by over 9 million businesses and widely adopted in education. A direct competitor to Microsoft 365.", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29" } ], "services": [ { "id": "64a9b145-e613-482e-a28b-666d4cc697a5", "slug": "proton-mail", "name": "Proton Mail", "brief": "Proton: Privacy by default. (Brief placeholder — edit before publishing.)", "homepageUrl": "https://proton.me", "vendorId": "839474d6-a515-454f-a27b-29b3b3c548a1", "suiteId": null, "createdAt": "2026-04-30T12:47:03.832Z" }, { "id": "c4a9124a-c45e-4f15-b75a-fecd4f697f88", "slug": "signal", "name": "Signal", "brief": "Signal Messenger: Speak Freely. (Brief placeholder — edit before publishing.)", "homepageUrl": "https://signal.org", "vendorId": "1e8f4b0e-7094-4e9d-8366-113608112ba6", "suiteId": null, "createdAt": "2026-04-30T12:47:05.893Z" }, { "id": "cfcf66ff-6001-4b63-8957-995285318bc3", "slug": "fastmail", "name": "Fastmail", "brief": "Email and calendar made better. (Brief placeholder — edit before publishing.)", "homepageUrl": "https://www.fastmail.com/", "vendorId": "25517af6-9850-486d-8f32-b071193eb7e5", "suiteId": null, "createdAt": "2026-04-30T12:47:07.937Z" }, { "id": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "slug": "tutanota", "name": "Tutanota", "brief": "Tuta: Turn ON privacy for free with secure emails, calendars & contacts | Tuta. (Brief placeholder — edit before publishing.)", "homepageUrl": "https://tuta.com/", "vendorId": "83823dae-bc55-45f1-ac7c-a78833c6fbe9", "suiteId": null, "createdAt": "2026-04-30T12:47:15.879Z" }, { "id": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "slug": "dropbox", "name": "Dropbox", "brief": "Dropbox.com. (Brief placeholder — edit before publishing.)", "homepageUrl": "https://www.dropbox.com/", "vendorId": "04689601-eb4a-4c9a-a7d9-a40ec7e1bc5e", "suiteId": null, "createdAt": "2026-04-30T12:47:20.097Z" }, { "id": "cce75b07-8f87-40c4-a373-70b981ee7430", "slug": "nextcloud", "name": "Nextcloud", "brief": "Nextcloud - Open source content collaboration platform. (Brief placeholder — edit before publishing.)", "homepageUrl": "https://nextcloud.com/", "vendorId": "18c307ac-d514-4f5e-be75-055731776a69", "suiteId": null, "createdAt": "2026-04-30T12:47:22.119Z" }, { "id": "9b45e05b-e937-44f4-9fa3-cb7da087f344", "slug": "google-drive", "name": "Google Drive", "brief": "Google Drive: Sign-in. (Brief placeholder — edit before publishing.)", "homepageUrl": "https://drive.google.com/", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "createdAt": "2026-04-30T12:47:24.193Z" }, { "id": "aa6e8f30-2325-488f-a484-60ef063998d3", "slug": "gmail", "name": "Gmail", "brief": "Gmail. (Brief placeholder — edit before publishing.)", "homepageUrl": "https://mail.google.com/", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "createdAt": "2026-04-30T12:47:26.083Z" }, { "id": "2bc5b466-2b01-43a1-b2bc-c3df7a1533c6", "slug": "outlook", "name": "Outlook", "brief": "Outlook. (Brief placeholder — edit before publishing.)", "homepageUrl": "https://www.microsoft.com/en-gb/microsoft-365/outlook/email-and-calendar-software-microsoft-outlook", "vendorId": "321b2428-cc10-429d-bb40-98e2f9d235b2", "suiteId": null, "createdAt": "2026-04-30T12:47:28.003Z" }, { "id": "2719c556-29da-469b-9f6a-c3c291bc4ec8", "slug": "onedrive", "name": "OneDrive", "brief": "OneDrive. (Brief placeholder — edit before publishing.)", "homepageUrl": "https://www.microsoft.com/en-us/microsoft-365/onedrive/online-cloud-storage", "vendorId": "321b2428-cc10-429d-bb40-98e2f9d235b2", "suiteId": null, "createdAt": "2026-04-30T12:47:29.935Z" }, { "id": "742b99cf-06b3-44d3-b84d-8923703fe1ff", "slug": "brave", "name": "Brave", "brief": "Brave is a free, open source (Mozilla Public License), Chromium-based web browser that blocks ads and trackers by default without requiring any extensions. It includes optional Brave Rewards (opt-in ad revenue sharing via BAT cryptocurrency) and Brave Search (a no-tracking search engine). It is the primary mainstream browser that ships with aggressive privacy protections enabled by default.", "homepageUrl": "https://brave.com", "vendorId": "805f8300-eaa0-46c5-88cc-a3f6b294fa83", "suiteId": null, "createdAt": "2026-05-02T12:48:30.226Z" }, { "id": "dee03ced-10e9-4462-b306-803943094a9f", "slug": "chrome", "name": "Google Chrome", "brief": "Google Chrome is the world's most widely used web browser (approximately 65% global market share). It is a proprietary browser built on the open source Chromium engine. Chrome is a core distribution mechanism for Google's signed-in services, and when users are logged in with a Google account it syncs browsing history, bookmarks, and passwords to Google's servers.", "homepageUrl": "https://www.google.com/chrome/", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "createdAt": "2026-05-02T12:48:32.183Z" }, { "id": "8518f97c-9014-43f3-b553-dbdf131ce864", "slug": "firefox", "name": "Firefox", "brief": "Firefox is a free, open source (MPL 2.0) web browser developed by Mozilla Corporation. It is the primary non-Chromium-based browser with significant market share. Firefox includes Enhanced Tracking Protection by default, supports a broad extension ecosystem, and is developed by a nonprofit entity without advertising revenue from browser usage.", "homepageUrl": "https://www.mozilla.org/en-US/firefox/", "vendorId": "b98cc30c-e967-443d-9ade-e9c5079aa10d", "suiteId": null, "createdAt": "2026-05-02T12:48:34.124Z" }, { "id": "0565b547-574f-4c6c-aa4b-8a5f9cb5f84a", "slug": "ghost", "name": "Ghost", "brief": "Ghost is a free, open source (MIT licence) CMS and publishing platform optimised for independent media, journalism, newsletters, and membership businesses. It is available as Ghost(Pro) managed hosting or as a fully self-hosted installation. Ghost takes 0% of publisher subscription revenue. The platform is owned and developed by Ghost Foundation, a Singapore nonprofit.", "homepageUrl": "https://ghost.org", "vendorId": "fba33f72-d285-4e1f-ae1c-81f544cb383b", "suiteId": null, "createdAt": "2026-05-02T12:48:36.002Z" }, { "id": "cab10b8f-1a87-4cb1-9eae-c78d06933b49", "slug": "wordpress-com", "name": "WordPress.com", "brief": "WordPress.com is a hosted website and CMS platform operated by Automattic. It is built on the WordPress open source software but is distinct from self-hosted WordPress (WordPress.org). WordPress.com offers a managed hosting service with tiers from Free to Enterprise. The underlying WordPress software is GPL 2.0 open source, but WordPress.com's hosting infrastructure is proprietary.", "homepageUrl": "https://wordpress.com", "vendorId": "c5add581-0060-4e31-9f02-398cef66c4a3", "suiteId": null, "createdAt": "2026-05-02T12:48:37.941Z" }, { "id": "6073324d-6e64-4ada-85fb-aef2299521af", "slug": "duckduckgo", "name": "DuckDuckGo", "brief": "DuckDuckGo is a privacy-focused search engine that does not store user search histories, does not build advertising profiles, and does not personalise results based on past searches. It generates contextual advertising revenue based on search terms only. DuckDuckGo draws results from multiple sources including its own web crawler and Microsoft/Bing.", "homepageUrl": "https://duckduckgo.com", "vendorId": "8e89f0f5-0327-4b8c-b624-7ffa93dd6e00", "suiteId": null, "createdAt": "2026-05-02T12:48:43.465Z" }, { "id": "e1030af7-7ee8-4bab-8ece-bb32d9142c4e", "slug": "google-search", "name": "Google Search", "brief": "Google Search is the world's dominant general-purpose search engine (approximately 91% global market share). It is free to use, ad-supported, and operated by Google LLC, a US company. Search queries, click behaviour, and usage patterns are used to build advertising profiles. Google was found by a US federal court to hold an illegal monopoly in general search in 2024.", "homepageUrl": "https://www.google.com", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "createdAt": "2026-05-02T12:48:45.237Z" }, { "id": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9", "slug": "jitsi-meet", "name": "Jitsi Meet", "brief": "Jitsi Meet is a free, open source (Apache 2.0) video conferencing platform that can be used without an account via the public meet.jit.si instance or self-hosted on any infrastructure. It uses WebRTC open standards, requires no software installation for web-browser participants, and supports optional end-to-end encryption for small meetings.", "homepageUrl": "https://jitsi.org", "vendorId": "16ff5198-9241-4943-8c83-cfed67dfba3a", "suiteId": null, "createdAt": "2026-05-02T12:48:47.004Z" }, { "id": "768c092a-97cd-4e1f-9b28-51dc59f68959", "slug": "zoom", "name": "Zoom", "brief": "Zoom is the market-leading hosted video conferencing platform used by millions of organisations worldwide. It offers meetings, webinars, team chat, and phone in a single application, available on desktop, mobile, and web browser.", "homepageUrl": "https://zoom.us", "vendorId": "856693d2-5b3b-4a56-8105-6310ad10c7a4", "suiteId": null, "createdAt": "2026-05-02T12:48:49.053Z" }, { "id": "04a52a12-967d-4ed3-aa11-2a4d7d285cbb", "slug": "slack", "name": "Slack", "brief": "Slack is a proprietary, cloud-hosted team messaging and collaboration platform used by millions of organisations worldwide. It offers channels, direct messaging, file sharing, and integrations with hundreds of third-party tools. It is owned by Salesforce, Inc. and does not offer a self-hosting option.", "homepageUrl": "https://slack.com", "vendorId": "186ba367-1c4f-44a1-a97c-633ac117d48d", "suiteId": null, "createdAt": "2026-05-02T12:50:41.492Z" }, { "id": "251d6595-d725-4ba2-a51b-42db2ec17db4", "slug": "apple-safari", "name": "Apple Safari", "brief": "Apple Safari is the default browser on all Apple devices (iPhone, iPad, Mac). Built on WebKit. It has strong cross-site tracking prevention (Intelligent Tracking Prevention — ITP), on-device processing for many features, and a privacy-focused marketing message. However, Safari is only available on Apple hardware, creating a significant platform dependency. Apple earns substantial revenue from Google's payment to be Safari's default search engine, an arrangement the DOJ antitrust case identified as a key element of Google's search monopoly.", "homepageUrl": "https://www.apple.com/safari/", "vendorId": "1d49a2db-7f92-4245-a14b-b6040537cbb8", "suiteId": null, "createdAt": "2026-05-03T20:15:51.590Z" }, { "id": "54fecb34-a5af-481e-95ee-bfc9baf6d525", "slug": "microsoft-edge", "name": "Microsoft Edge", "brief": "Microsoft Edge is a Chromium-based browser developed by Microsoft, the default browser on Windows 10 and 11. Rebuilt on Chromium in 2020 after the discontinuation of the original EdgeHTML browser. Edge has built-in tracking prevention, an integrated Bing/Copilot AI assistant, and Microsoft Start news feed. It collects significantly more telemetry than Chrome by default and sends data to Microsoft for personalisation. Multiple instances of undisclosed data collection have been reported by researchers. Default search engine is Bing.", "homepageUrl": "https://www.microsoft.com/en-us/edge", "vendorId": "321b2428-cc10-429d-bb40-98e2f9d235b2", "suiteId": null, "createdAt": "2026-05-03T20:15:55.408Z" }, { "id": "7a263049-c560-4e1f-b143-e639e22c5ead", "slug": "squarespace", "name": "Squarespace", "brief": "Squarespace is a cloud-based, drag-and-drop website builder and hosting service. It provides templated website creation with no technical knowledge required. Squarespace includes integrated e-commerce, blogging, scheduling (via Acuity Scheduling), and email marketing tools. It is a fully hosted SaaS service with no self-hosting option. Websites cannot be exported to other platforms in a directly deployable format. Known for high-quality design templates and an all-in-one approach.", "homepageUrl": "https://www.squarespace.com/", "vendorId": "2af133fb-8ce5-4bd7-99d8-d083e370ae25", "suiteId": null, "createdAt": "2026-05-03T20:16:01.236Z" }, { "id": "831de1b0-4b82-4854-909b-c085ab265084", "slug": "substack", "name": "Substack", "brief": "Substack is a publishing platform for email newsletters with integrated subscription billing. Writers can publish free and paid content directly to subscribers' inboxes, with Substack handling payments, email delivery, and a web archive. Substack takes 10% of paid subscription revenue. Content is hosted on Substack's infrastructure (US). There is no self-hosting option. Content can be exported but subscriber email addresses are portable. Substack attracted controversy in 2023 over its hosting of extremist content.", "homepageUrl": "https://substack.com/", "vendorId": "78c37a8e-4d3f-44c3-bf98-dd84b308d1e8", "suiteId": null, "createdAt": "2026-05-03T20:16:03.114Z" }, { "id": "800c082c-af5a-4407-af43-a8177962d4b3", "slug": "wix", "name": "Wix", "brief": "Wix is a cloud-based website builder and hosting platform serving over 250 million users. It offers drag-and-drop site creation with hundreds of templates, integrated e-commerce, blogging, booking, and an app marketplace. Wix ADI (Artificial Design Intelligence) can generate a website automatically. Content is hosted exclusively on Wix's infrastructure. No self-hosting option. Like Squarespace, migrating away from Wix requires significant manual effort as content cannot be exported in a directly deployable format.", "homepageUrl": "https://www.wix.com/", "vendorId": "662fbfa5-a648-4e10-a7b1-a4e754a5ce85", "suiteId": null, "createdAt": "2026-05-03T20:16:05.093Z" }, { "id": "f1726a97-7cfa-4e41-b529-c4762118d11a", "slug": "wordpress-org", "name": "WordPress.org (self-hosted)", "brief": "WordPress.org distributes the self-hosted WordPress CMS software under the GPL v2 licence. It is free to download and deploy on any web hosting. WordPress powers approximately 43% of all websites globally. The software is developed by a global open-source community primarily funded by Automattic. It offers a rich plugin ecosystem (60,000+ plugins), extensive theme marketplace, and full data ownership. The owner of the hosting determines data processing; no data is sent to WordPress.org or Automattic for self-hosted installations by default.", "homepageUrl": "https://wordpress.org/", "vendorId": "b69b7e06-3cf3-4360-893d-de065dec1699", "suiteId": null, "createdAt": "2026-05-03T20:16:07.022Z" }, { "id": "d137368f-24cf-4728-828f-6d3c73dd03e7", "slug": "proton-drive", "name": "Proton Drive", "brief": "Proton Drive is an end-to-end encrypted cloud storage service operated by Proton AG, a Swiss company. Files are encrypted client-side before upload using open-source cryptographic code; Proton cannot access file contents. Integrated with the broader Proton ecosystem (Mail, Calendar, VPN, Pass). A privacy-first alternative to Google Drive and OneDrive.", "homepageUrl": "https://proton.me/drive", "vendorId": "839474d6-a515-454f-a27b-29b3b3c548a1", "suiteId": "424910b0-9954-4fde-ac40-130b4aa5aef4", "createdAt": "2026-05-03T20:16:09.009Z" }, { "id": "b311c3ac-7396-4a6d-a0e4-685b92faae5d", "slug": "element", "name": "Element", "brief": "Element is an open-source messaging client for the Matrix decentralised protocol. It supports end-to-end encrypted direct messages and group chats. Users can choose to host their own Matrix homeserver or use a managed service such as Element Matrix Services. Matrix's federated architecture means users on different homeservers can communicate without a central gatekeeper. Element is used by governments, universities, and enterprises seeking self-hosted, privacy-respecting collaboration.", "homepageUrl": "https://element.io/", "vendorId": "04146bf6-39f9-44a7-b121-639b17db1158", "suiteId": null, "createdAt": "2026-05-03T20:16:12.652Z" }, { "id": "7cdd6a9d-0a91-4c78-991b-c0d7b065dd71", "slug": "whatsapp", "name": "WhatsApp", "brief": "WhatsApp is the world's largest messaging application, with over 2 billion users. It uses the Signal Protocol for end-to-end encryption of personal messages. However, WhatsApp is owned by Meta Platforms (Facebook) and collects significant metadata — including who users communicate with, frequency, and device information — which is shared with Meta for advertising profiling purposes. WhatsApp stores message content E2E encrypted but unencrypted backups to Google Drive or iCloud are a significant privacy risk.", "homepageUrl": "https://www.whatsapp.com/", "vendorId": "48ac5b16-0636-40a1-b470-d2dd35ef316f", "suiteId": null, "createdAt": "2026-05-03T20:16:16.549Z" }, { "id": "10cfed88-641a-4267-b566-21b74d019545", "slug": "bing", "name": "Bing", "brief": "Bing is Microsoft's general-purpose search engine, with approximately 3% global market share (second to Google). It powers other search products including DuckDuckGo and Yahoo. Bing has integrated Copilot (AI-powered search chat based on GPT-4/Azure OpenAI). Like Google Search, Bing is ad-supported and collects extensive user data for advertising. Microsoft is a US company subject to CLOUD Act. For privacy-conscious users, Bing offers no meaningful improvement over Google Search.", "homepageUrl": "https://www.bing.com/", "vendorId": "321b2428-cc10-429d-bb40-98e2f9d235b2", "suiteId": null, "createdAt": "2026-05-03T20:16:18.561Z" }, { "id": "6e69cb04-3ecc-4174-b0f2-a75c438f185f", "slug": "kagi", "name": "Kagi", "brief": "Kagi is a subscription-based, ad-free search engine. Users pay directly for search access (from ~$5/month); Kagi earns no advertising revenue and does not sell user data. It combines its own search index with results from multiple sources (including Bing) and allows users to personalise result rankings (blocking or boosting specific domains). Kagi also offers an AI search assistant (FastGPT) and web summarisation. Designed for users who prefer to pay for quality results rather than being the product.", "homepageUrl": "https://kagi.com/", "vendorId": "35a37028-6f97-4eaf-af80-2f8cb7e3904d", "suiteId": null, "createdAt": "2026-05-03T20:16:22.413Z" }, { "id": "d30271ea-853e-4909-87e0-94c5532df545", "slug": "google-meet", "name": "Google Meet", "brief": "Google Meet is Google's video conferencing service, integrated with Google Workspace (Gmail, Calendar, Drive). It is widely used for business and education video calls. Meet offers a free consumer tier (up to 60-minute meetings, up to 100 participants) and paid Workspace tiers with extended limits. All calls are encrypted in transit; optional end-to-end encryption is available for personal calls. As a Google service, all usage data is subject to Google's privacy policy and US jurisdiction.", "homepageUrl": "https://meet.google.com/", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": "99cfcd4b-cbf9-4f32-9d16-c2a8d11a7843", "createdAt": "2026-05-03T20:16:30.274Z" }, { "id": "1b342130-fdab-4b9b-ac97-87058d39cb1a", "slug": "microsoft-teams", "name": "Microsoft Teams", "brief": "Microsoft Teams is a proprietary cloud-hosted team messaging, video conferencing, and collaboration platform deeply integrated with Microsoft 365 (Office 365). It is used by over 320 million active users and is the dominant workplace collaboration tool in enterprise environments. Teams is operated by Microsoft Corporation, a US company, and is closed source.", "homepageUrl": "https://www.microsoft.com/en-us/microsoft-teams/group-chat-software", "vendorId": "321b2428-cc10-429d-bb40-98e2f9d235b2", "suiteId": "703622bb-4df7-4edd-ba1f-1c37a175fea7", "createdAt": "2026-05-02T12:50:39.640Z" }, { "id": "96a65b88-3c28-4d93-8ac2-e99256f2bc22", "slug": "ecosia", "name": "Ecosia", "brief": "Ecosia is a German ad-supported search engine that donates the majority of its advertising revenue to tree-planting and climate restoration projects. Search results are partly powered by Microsoft Bing. Ecosia does not build advertising profiles on users and states it does not sell personal data. It is certified B Corp; the company cannot be sold due to its Purpose Foundation ownership structure. Free to use; no subscription.", "homepageUrl": "https://www.ecosia.org/", "vendorId": "59e07a96-1e7c-4221-8bd2-c2f6124a8279", "suiteId": null, "createdAt": "2026-05-07T16:04:29.163Z" }, { "id": "84211f4b-0841-4745-9726-3b1f3ac8c989", "slug": "google-calendar", "name": "Google Calendar", "brief": "Google Calendar is Alphabet's (Google LLC's) web-based calendar and scheduling service, available as a free consumer product (ad-supported) and as part of Google Workspace for businesses. It integrates tightly with Gmail, Google Meet, and other Google services. CalDAV access is supported for third-party calendar clients. As a free-tier service, Google may use calendar data to inform advertising profiles. Google Calendar is the most widely used calendar service globally, with deep integration into the Google ecosystem and Android.", "homepageUrl": "https://calendar.google.com/", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "createdAt": "2026-05-07T16:05:03.342Z" }, { "id": "0b93706d-5f36-48cb-8ffb-500bfa176cc5", "slug": "proton-calendar", "name": "Proton Calendar", "brief": "Proton Calendar is an end-to-end encrypted calendar service integrated into the Proton suite (Proton AG, Geneva, Switzerland). Calendar event data — including titles, descriptions, and locations — is encrypted so that Proton cannot read it. It integrates with Proton Mail for email invites and Proton Meet for video calls. Available in free and paid Proton plans. Proton Calendar is subject to Swiss law and the Proton Foundation's nonprofit governance. CalDAV interoperability should be verified before assuming standard client compatibility.", "homepageUrl": "https://proton.me/calendar", "vendorId": "839474d6-a515-454f-a27b-29b3b3c548a1", "suiteId": null, "createdAt": "2026-05-07T16:05:05.246Z" }, { "id": "82b0f93c-a208-4b55-b351-8dde1ba67edd", "slug": "tuta-calendar", "name": "Tuta Calendar", "brief": "Tuta Calendar (formerly Tutanota Calendar) is an end-to-end encrypted calendar service integrated into the Tuta suite (Tutao GmbH, Hanover, Germany). Calendar event data is encrypted so that Tuta cannot read it. Available in free and paid Tuta plans alongside encrypted email and contacts. Subject to German law (GDPR). Bootstrapped and independently owned. CalDAV support should be verified — Tuta's encryption architecture may limit compatibility with standard third-party calendar clients.", "homepageUrl": "https://tuta.com/calendar", "vendorId": "83823dae-bc55-45f1-ac7c-a78833c6fbe9", "suiteId": null, "createdAt": "2026-05-07T16:05:08.959Z" }, { "id": "8481545c-8d43-4288-aca1-8b09b0643805", "slug": "fastmail-calendar", "name": "Fastmail Calendar", "brief": "Fastmail Calendar is the calendar component of Fastmail's subscription email and productivity service, operated by the independent Australian company Fastmail Pty Ltd. It supports CalDAV for third-party client sync and iCal for data export. No advertising; no free tier. Event data is not end-to-end encrypted (standard transport encryption only). Fastmail is subject to Australian law and data retention requirements. Subscription starts from approximately US$3/month, which includes email and calendar.", "homepageUrl": "https://www.fastmail.com/", "vendorId": "25517af6-9850-486d-8f32-b071193eb7e5", "suiteId": null, "createdAt": "2026-05-07T16:05:10.843Z" } ], "flags": [ { "id": "8b082f5b-1ea5-4430-bcc7-f8fd7f87feb2", "flagGroupId": "2cdf1844-75d0-4895-a124-720bb88a8e13", "version": 1, "attachmentLevel": "vendor", "vendorId": "9d037929-2d5b-4f34-991f-a9d3a6d6bd90", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Anthropic is a US company subject to CLOUD Act; Claude conversations are processed in the US; the Amazon investment relationship means some Claude infrastructure is on AWS, adding an additional US hyperscaler to the data chain.", "explanation": "Anthropic, PBC is incorporated in Delaware and subject to US law including CLOUD Act. Claude API and claude.ai conversations are processed on Anthropic's US infrastructure (with Amazon AWS as a significant infrastructure partner). US law enforcement can compel Anthropic to disclose conversation data via legal process. Anthropic does not have a published EU data residency option. For EU organisations with strict data sovereignty requirements, the US jurisdiction and lack of EU processing options are a constraint. This is consistent with the broader AI assistant market — all major commercial AI assistants (ChatGPT, Gemini, Claude, Copilot) are operated by US companies.", "lastVerifiedAt": "2026-05-03" }, { "id": "b30c5736-fa3f-40de-8f8a-b47e02a3bd2a", "flagGroupId": "7abd6c98-320d-4e42-befd-fe5c2d0b67a2", "version": 1, "attachmentLevel": "vendor", "vendorId": "9d037929-2d5b-4f34-991f-a9d3a6d6bd90", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 2, "headline": "Anthropic's Public Benefit Corporation structure legally requires the company to pursue AI safety as a public benefit alongside commercial interests; this is a structural governance commitment absent from other major AI assistant vendors.", "explanation": "Anthropic is incorporated as a Public Benefit Corporation (PBC) in Delaware. PBC status means the board must consider the company's stated public benefit — \"the responsible development and maintenance of advanced AI for the long-term benefit of humanity\" — in all major decisions, not only shareholder interests. This creates legal obligations that differ from standard corporations. In practice, Anthropic's safety research investment, Constitutional AI methodology, and AI Safety Institute participation reflect this mission. However, PBC structure does not prevent commercial behaviour or investor returns — it is a governance framework, not a guarantee.", "lastVerifiedAt": "2026-05-03" }, { "id": "f94fd852-aa53-4ccf-a5d7-26620f0db593", "flagGroupId": "4f7b1712-4ddb-49ec-aa0d-1dca6f2ad2a7", "version": 1, "attachmentLevel": "vendor", "vendorId": "9d037929-2d5b-4f34-991f-a9d3a6d6bd90", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 3, "headline": "Anthropic's major investors — Amazon ($4B) and Google — are also competitors in the AI assistant and cloud infrastructure markets; the terms of these investments (including Bedrock integration) create potential conflicts of interest with Anthropic's independence.", "explanation": "Amazon invested $4 billion in Anthropic in 2023 with an agreement to make Claude models available on Amazon Bedrock. Google has also made a significant investment. Both Amazon and Google are major competitors in cloud services (relevant to enterprise customers choosing AI assistant infrastructure) and in AI assistants (Google Gemini, Amazon Alexa/AI services). The investment terms may create obligations or preferences that affect Anthropic's independence and pricing decisions for customers using competing cloud providers. Anthropic's PBC structure provides some governance protection, but the financial dependency on two major cloud competitors is a structural concern.", "lastVerifiedAt": "2026-05-03" }, { "id": "93d909d7-78b9-4de3-b6a3-0f2f536fa208", "flagGroupId": "3b3ffe98-3307-4265-8ccd-a132c3b0539b", "version": 1, "attachmentLevel": "vendor", "vendorId": "9d037929-2d5b-4f34-991f-a9d3a6d6bd90", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Anthropic has not published an environmental report; Claude inference runs on AWS infrastructure with renewable energy commitments; as a frontier AI company, Anthropic's model training energy consumption is significant but not publicly quantified.", "explanation": "Anthropic has not published a sustainability report or carbon emissions data. Claude inference is processed on AWS infrastructure, which has Amazon's renewable energy commitments (Amazon committed to net-zero carbon by 2040). Training frontier AI models is energy-intensive, with estimates for GPT-4 class training runs in the range of gigawatt-hours of electricity consumption. Anthropic's training runs for Claude models are not disclosed. As a safety-focused AI lab, Anthropic has stated concern about training compute growth but has not published quantified environmental commitments.", "lastVerifiedAt": "2026-05-03" }, { "id": "acdda824-b951-4d1a-88d8-dc87f632c5d5", "flagGroupId": "8f185eac-1d0b-491b-9a0d-10dce527f635", "version": 1, "attachmentLevel": "vendor", "vendorId": "9d037929-2d5b-4f34-991f-a9d3a6d6bd90", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Anthropic employs approximately 1,000 people, primarily AI researchers and engineers; as a private company it publishes no diversity or pay equity reports; no significant labour controversies have been reported.", "explanation": "Anthropic had approximately 1,000 employees as of early 2024 and was actively hiring. As a private company, Anthropic is not required to publish diversity or pay equity data. No significant labour controversies have been reported at Anthropic. Like all frontier AI labs, Anthropic's training data practices involve human feedback labelling, which may involve third-party contractor labour. Anthropic has not published information about its data labelling supply chain.", "lastVerifiedAt": "2026-05-03" }, { "id": "c1b77111-a39b-43ff-9b25-0edcfae8784c", "flagGroupId": "ffd75ce0-a8ec-44eb-966e-53fa492a3200", "version": 1, "attachmentLevel": "vendor", "vendorId": "b69b7e06-3cf3-4360-893d-de065dec1699", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "The 2024 dispute between Automattic CEO Matt Mullenweg and WP Engine revealed concerning concentration of control over WordPress.org infrastructure by Automattic, including temporary blocking of WP Engine from the plugin directory.", "explanation": "In September 2024, Matt Mullenweg (CEO of Automattic, which funds and employs the majority of WordPress core contributors) entered a public dispute with WP Engine, a major managed WordPress hosting company. Mullenweg accused WP Engine of profiting from WordPress without adequately contributing to the open-source project. In response, WordPress.org (under Mullenweg's effective control) temporarily blocked WP Engine from accessing the WordPress.org plugin repository. This action — blocking a third-party company's access to open-source infrastructure — alarmed the WordPress community and raised fundamental questions about whether WordPress.org's neutrality could be guaranteed given Automattic's effective control. The incident highlighted the gap between WordPress's open-source framing and the real-world power exercised by the Mullenweg/Automattic axis.", "lastVerifiedAt": "2026-05-03" }, { "id": "05f552a2-939e-43df-9ee3-a1650536272c", "flagGroupId": "fb0e755c-1b69-46e9-a2ea-0f20d919317d", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "f1726a97-7cfa-4e41-b529-c4762118d11a", "valence": "context", "tier": 3, "headline": "Self-hosted WordPress has no central data centre footprint; environmental impact is entirely determined by the hosting provider's energy mix; green hosting options are readily available.", "explanation": "Because WordPress.org CMS is self-hosted, there is no central energy footprint to report. The deploying organisation's hosting choice determines environmental impact. Green hosting providers (using renewable energy or carbon credits) are available and compatible with WordPress. This flexibility means a WordPress site can have a significantly lower environmental footprint than a SaaS product hosted in fossil-fuel-powered data centres.", "lastVerifiedAt": "2026-05-03" }, { "id": "1aed1293-3eb4-4527-acd4-98dabf71f863", "flagGroupId": "54d89c0a-a98b-49af-8b18-7411881a93cd", "version": 1, "attachmentLevel": "vendor", "vendorId": "b69b7e06-3cf3-4360-893d-de065dec1699", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Automattic employs approximately 2,000 fully remote workers in 100+ countries; as a private company it does not publish diversity or pay equity data; the open-source WordPress community is a separate contributor base.", "explanation": "Automattic, Inc. operates a 100% distributed workforce with no headquarters office. It employs approximately 2,000 staff globally. As a private company, Automattic does not publish annual diversity or pay equity reports. WordPress's open-source community includes thousands of volunteers and contributors from agencies, freelancers, and other companies — this work is unpaid or indirectly compensated through business relationships. The governance controversy of 2024 has highlighted tensions between paid Automattic employees, volunteer contributors, and commercial WordPress hosting companies.", "lastVerifiedAt": "2026-05-03" }, { "id": "d3392363-4444-4eaf-882f-b06f2c3e8245", "flagGroupId": "240a7d98-86b0-43df-85c3-1e6e34ad7f42", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "f1726a97-7cfa-4e41-b529-c4762118d11a", "valence": "strength", "tier": 3, "headline": "WordPress has a dedicated accessibility team and publishes WCAG 2.1 AA accessibility standards for themes in the official directory; the block editor (Gutenberg) is screen reader-compatible with ongoing improvements.", "explanation": "The WordPress accessibility team reviews core code contributions, maintains accessibility coding standards, and advocates for accessible design in themes and plugins. Themes in the WordPress Theme Directory are required to meet accessibility standards for \"accessibility-ready\" designation. The Gutenberg block editor supports keyboard navigation and screen readers (NVDA, JAWS, VoiceOver). WordPress core aims for WCAG 2.1 AA conformance. The accessibility quality of the final website depends heavily on the theme and plugins chosen, but the core platform provides a strong accessibility foundation.", "lastVerifiedAt": "2026-05-03" }, { "id": "793a4eb5-2559-4f3c-a660-f5b64a460228", "flagGroupId": "1df91032-8d1a-4137-960c-2e04ea11629c", "version": 1, "attachmentLevel": "vendor", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 1, "headline": "Google is a US company; Gemini conversation data is subject to CLOUD Act and FISA Section 702; Google receives tens of thousands of government data requests annually, documented in its Transparency Report.", "explanation": "Google LLC is incorporated in Delaware and subject to US law. Google's Transparency Report documents government requests for user data: Google received approximately 60,000 government requests for user data in H2 2023. Gemini conversations linked to Google accounts are user data subject to lawful compulsion. Unlike services that delete or anonymise data quickly, Gemini's default 18-month retention means conversation history is potentially available to law enforcement. EU organisations should assess this US jurisdiction risk in light of GDPR's restrictions on transfers to third countries, though Google's EU Standard Contractual Clauses are the primary legal mechanism in practice.", "lastVerifiedAt": "2026-05-03" }, { "id": "bc7a16c6-2589-4856-928f-5b66b5480fd5", "flagGroupId": "78610a67-1b3a-42fa-988d-ce5c4204e20b", "version": 1, "attachmentLevel": "vendor", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "serviceId": null, "valence": "context", "tier": 2, "headline": "Google has been designated an EU DMA gatekeeper for Search, Maps, Play, YouTube, Shopping, and the Chrome browser; Gemini's integration into Google Search results is under scrutiny for DMA compliance.", "explanation": "Google is among the largest designated gatekeepers under the EU Digital Markets Act. As Gemini becomes integrated into Google Search (via AI Overviews/SGE), the European Commission is scrutinising whether this integration constitutes self-preferencing in violation of DMA Article 6(5). Google has received DMA non-compliance warnings related to its search and advertising practices. For organisations in the EU, this regulatory context is relevant: Gemini's market position benefits from Google's dominant search position, which is itself under regulatory constraint.", "lastVerifiedAt": "2026-05-03" }, { "id": "7a3d6126-38fb-4680-a9f7-ac784f32d4f9", "flagGroupId": "95f6b218-0e30-404c-ae71-2a83137941ae", "version": 1, "attachmentLevel": "vendor", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Google has committed to operating on carbon-free energy 24/7 by 2030; Gemini inference runs on Google's own data centre infrastructure; Google's 2024 sustainability report acknowledged AI workloads significantly increased data centre energy consumption.", "explanation": "Google has the most ambitious renewable energy programme of any hyperscale cloud provider. It was the first large company to match annual electricity use with renewable purchases (achieved in 2017) and has committed to 24/7 carbon-free energy by 2030. However, Google's 2024 Environmental Report disclosed that total greenhouse gas emissions increased 48% between 2019 and 2023, with AI workloads cited as a key driver. Gemini's inference infrastructure runs on Google data centres, which benefit from Google's renewable investment but also contribute to rising energy demand.", "lastVerifiedAt": "2026-05-03" }, { "id": "afabacba-f531-4fde-9920-df7b2c9ba0b8", "flagGroupId": "cbf6c15e-e595-482e-9e25-b1d270e0eed2", "version": 1, "attachmentLevel": "vendor", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 3, "headline": "Google's AI products rely on third-party contractors for data labelling and content moderation; AI training workers have raised concerns about working conditions and psychological harm from reviewing harmful content.", "explanation": "Training and safety-testing large language models like Gemini involves human review of potentially harmful content — hate speech, graphic violence, and explicit material — by low-wage contractors. TIME reported in 2023 on the psychological impact of AI content moderation work in Kenya, where contractors reviewed harmful content for OpenAI. Similar labour practices apply across the industry, including Google. Google contracts data labelling and content review work through third-party suppliers including Appen and Scale AI. No Google-specific investigation into Gemini content moderation working conditions has been published, but industry-wide concerns apply.", "lastVerifiedAt": "2026-05-03" }, { "id": "10c10db8-e21b-4685-bd48-c3e59c6442d4", "flagGroupId": "4f55e4bf-d3cc-41a8-a9fe-6efe6b910667", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d137368f-24cf-4728-828f-6d3c73dd03e7", "valence": "strength", "tier": 1, "headline": "Proton Drive applies end-to-end encryption to all uploaded files; Proton AG holds no keys and cannot access file contents, even under legal compulsion.", "explanation": "All files uploaded to Proton Drive are encrypted client-side using the user's private key before transmission. Proton AG stores only ciphertext. The encryption uses OpenPGP standards. Even if Proton receives a valid Swiss court order for a user's files, it can only provide encrypted data it cannot decrypt. This is a genuine zero-knowledge architecture: the service provider is technically incapable of reading stored content. File metadata (names, sizes, directory structure) was historically accessible to Proton but Proton has progressively extended E2E encryption to cover metadata as well. Client applications for web, iOS, Android, and desktop are open source and their cryptographic implementation has been audited.", "lastVerifiedAt": "2026-05-03" }, { "id": "f51e5fce-f71b-4968-9eac-45cc38fa2e15", "flagGroupId": "6d1dec7e-afdd-41e5-8fd0-d1aaad400b3d", "version": 1, "attachmentLevel": "vendor", "vendorId": "839474d6-a515-454f-a27b-29b3b3c548a1", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 2, "headline": "Proton runs no advertising on any of its services and does not use customer data for advertising purposes; revenue comes entirely from subscriptions.", "explanation": "Proton AG's business model is subscription-only. There are no ads across Proton Mail, Proton Drive, Proton VPN, or other services. Proton's privacy policy states it does not sell user data to third parties and does not use it for advertising. This contrasts sharply with Google Drive and OneDrive, which are operated by advertising or advertising-adjacent companies.", "lastVerifiedAt": "2026-05-03" }, { "id": "5ae7b612-3a11-422d-8ff6-fdd525343b52", "flagGroupId": "3230766b-28d5-4b10-8733-e2dac56451fd", "version": 1, "attachmentLevel": "vendor", "vendorId": "839474d6-a515-454f-a27b-29b3b3c548a1", "suiteId": null, "serviceId": null, "valence": "context", "tier": 2, "headline": "Proton Drive data is stored on servers in Switzerland and Iceland; Switzerland has an EU adequacy decision and strong data protection laws, but is subject to Swiss MLAT requests and Swiss criminal law.", "explanation": "Proton AG is headquartered in Geneva and stores data primarily in Switzerland, with some infrastructure in Iceland (also a strong privacy jurisdiction). Switzerland has received an EU GDPR adequacy decision, meaning data transfers from the EU to Switzerland are permitted without additional safeguards. Swiss law (the nFADP — Switzerland's revised Federal Act on Data Protection, in force since 2023) provides protections broadly comparable to GDPR. However, Switzerland does share data with foreign governments via Mutual Legal Assistance Treaties (MLATs). In 2021, Proton was compelled by a Swiss court to begin logging IP addresses of a French climate activist's ProtonMail account. This case showed that while E2E encryption protects content, metadata (IP addresses) can still be obtained. For Proton Drive, the E2E encryption means file contents remain protected even under such orders.", "lastVerifiedAt": "2026-05-03" }, { "id": "826d7f30-d1b1-4297-90af-13168dfd6962", "flagGroupId": "cfd08890-610b-432d-8153-5d4079e83b55", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d137368f-24cf-4728-828f-6d3c73dd03e7", "valence": "strength", "tier": 2, "headline": "Proton Drive web, iOS, Android, and desktop client applications are open source and published on GitHub under permissive licences.", "explanation": "Proton AG has published the source code for all Proton Drive client applications (web app, iOS, Android, Windows, macOS) on GitHub under open-source licences. This allows independent security researchers to audit the client-side cryptographic implementation. The server-side code is not open source. As of 2024, Proton Drive lacks WebDAV support, limiting its integration with third-party apps that rely on the WebDAV protocol (such as Cyberduck, Rclone, or many Linux desktop environments). Proton has indicated WebDAV support is planned.", "lastVerifiedAt": "2026-05-03" }, { "id": "979ea995-62d8-4ed0-aae0-d6ed70f12213", "flagGroupId": "fd214109-93cc-4bab-bc35-931262f85b1d", "version": 1, "attachmentLevel": "vendor", "vendorId": "839474d6-a515-454f-a27b-29b3b3c548a1", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 2, "headline": "A controlling stake in Proton AG is held by the Proton Foundation, a Swiss non-profit, which is designed to prevent acquisition or mission drift.", "explanation": "Proton AG has stated that a controlling stake is held by the Proton Foundation, a Swiss foundation, specifically to prevent a hostile takeover or acquisition that would compromise the company's privacy mission. This structure is intended to ensure that no venture capital investor can force a sale or pivot to an ad-based model. The CEO Andy Yen has explicitly stated this as a rationale. While the Foundation's governance documents are not fully public, this structure provides a meaningful structural protection against the acquisition risk that affects other privacy-focused services.", "lastVerifiedAt": "2026-05-03" }, { "id": "adc370f7-a374-4292-aca0-0478bad36791", "flagGroupId": "0f40a3af-64db-4a9b-b2e3-ce5eadd89990", "version": 1, "attachmentLevel": "vendor", "vendorId": "839474d6-a515-454f-a27b-29b3b3c548a1", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Proton states its data centres in Switzerland and Iceland run on renewable hydroelectric power; the company has not published a detailed sustainability or carbon footprint report.", "explanation": "Proton has stated that its primary data centre in Switzerland is powered by renewable hydroelectric energy, and its Iceland infrastructure benefits from Iceland's nearly 100% renewable grid (geothermal and hydro). Proton does not publish an annual sustainability or ESG report comparable to those of large cloud providers. The company's relatively small size means its absolute energy consumption is modest. No independent third-party verification of renewable energy claims has been published.", "lastVerifiedAt": "2026-05-03" }, { "id": "e32ce397-896b-4475-a8b6-6b8ff38cbacb", "flagGroupId": "3dd42f89-2d87-4b92-bc9f-6a04f352215f", "version": 1, "attachmentLevel": "vendor", "vendorId": "839474d6-a515-454f-a27b-29b3b3c548a1", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Proton AG employs approximately 300 people, primarily in Switzerland and other EU countries; it does not publish diversity, pay equity, or supply chain transparency reports.", "explanation": "As a private SME, Proton AG is not subject to the same transparency obligations as publicly listed companies. The company does not publish gender pay gap, diversity, or supply chain reports. Proton has faced no significant public labour controversies. Its distributed team includes staff in Geneva, Czech Republic, and other locations. The company's consumer-facing privacy focus does not appear to extend to published transparency about its own workforce or supply chain.", "lastVerifiedAt": "2026-05-03" }, { "id": "7bf93aeb-596b-4250-aa65-ebbc5006f9a8", "flagGroupId": "b407ed92-6fba-42ee-8075-dea18fea0c65", "version": 1, "attachmentLevel": "vendor", "vendorId": "c4cba5d0-4d8b-4850-9c90-93b3f739555d", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 1, "headline": "Mistral is a French company subject to EU GDPR and French law; it is NOT subject to US CLOUD Act or FISA Section 702; for EU organisations, Mistral offers the strongest data sovereignty posture of any commercially available frontier AI assistant.", "explanation": "Mistral AI SAS is incorporated in Paris, France and processes data under GDPR. US CLOUD Act applies only to US-incorporated companies and their subsidiaries; it does not apply to Mistral. FISA Section 702 applies to US persons and US-controlled entities; it does not apply to Mistral. French intelligence services do have their own legal frameworks (including DGSI/DGSE access), but these are limited to domestic security concerns and are generally not considered equivalent to the broad extraterritorial reach of US surveillance law. For EU public sector organisations or those with strict data sovereignty requirements, Mistral's EU jurisdiction is a material procurement advantage over all US-based AI assistants. Bpifrance's strategic investment also signals French government support for Mistral as a European AI sovereign capability.", "lastVerifiedAt": "2026-05-03" }, { "id": "4ff7d5de-462d-4185-b5d7-fd54d558c3f7", "flagGroupId": "65ccc3b7-8d0d-4eaa-b72b-d1cc1174352c", "version": 1, "attachmentLevel": "vendor", "vendorId": "c4cba5d0-4d8b-4850-9c90-93b3f739555d", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 2, "headline": "Mistral has received strategic investment from Bpifrance (French state investment bank) and is positioned as a European AI sovereign capability; this government-backed strategic interest provides some governance stability against acquisition or pivot away from EU values.", "explanation": "Bpifrance, the French public investment bank, has invested in Mistral, reflecting the French government's strategic interest in maintaining European AI capability. Mistral's founders have publicly positioned the company as committed to European AI sovereignty and open model releases. While VC investors (a16z, Lightspeed) with primarily US interests hold larger stakes, the Bpifrance relationship and French regulatory context create governance incentives aligned with EU values. The EU AI Act's general-purpose AI provisions (applying to frontier models) will impose obligations on Mistral as a French company, further embedding EU governance frameworks.", "lastVerifiedAt": "2026-05-03" }, { "id": "c2c36bf2-25b9-480a-ad51-5672968aea14", "flagGroupId": "66ef277a-cf00-4267-b36f-2d216586c6d2", "version": 1, "attachmentLevel": "vendor", "vendorId": "c4cba5d0-4d8b-4850-9c90-93b3f739555d", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Mistral has not published environmental data; Mistral API infrastructure is cloud-hosted in the EU; Mistral's open-weight models allow self-hosted deployment where energy efficiency can be optimised by the operator.", "explanation": "Mistral has not published a sustainability report or energy consumption data. Mistral API inference is processed on cloud infrastructure in the EU (reported to use OVHcloud and other EU providers). Notably, Mistral's open-weight model releases allow organisations to run Mistral models on their own hardware, where the operator can choose energy-efficient configurations. This self-hosting option is unique among commercial AI assistants and gives organisations direct control over the environmental footprint of their AI use.", "lastVerifiedAt": "2026-05-03" }, { "id": "82839d1a-d040-418f-954f-6994d6129bd6", "flagGroupId": "e43b0ca9-c07c-4806-8cfa-0fb5c876d5a1", "version": 1, "attachmentLevel": "vendor", "vendorId": "c4cba5d0-4d8b-4850-9c90-93b3f739555d", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Mistral employs approximately 200 people, primarily in Paris; as a private startup founded in 2023 it publishes no diversity or labour reports; French labour law provides strong worker protections.", "explanation": "Mistral AI had approximately 200 employees as of early 2024 and was growing rapidly. As a private startup, no reporting obligations require diversity or pay equity disclosure. French labour law (Code du travail) provides strong worker protection — among the most robust in the EU. No labour controversies have been reported. Mistral's data labelling supply chain for model training has not been publicly disclosed.", "lastVerifiedAt": "2026-05-03" }, { "id": "95f44ae3-7136-4beb-8e53-a86810d57c85", "flagGroupId": "930ca543-382d-451a-bacd-a498d5a1d74a", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d137368f-24cf-4728-828f-6d3c73dd03e7", "valence": "context", "tier": 3, "headline": "Proton Drive's web and mobile applications support keyboard navigation and screen readers at a basic level; no published WCAG audit has been found.", "explanation": "Proton Drive's web application is built with modern React and uses semantic HTML, providing basic screen reader and keyboard navigation support. The mobile apps (iOS/Android) follow platform accessibility guidelines at a basic level. However, Proton has not published any WCAG 2.1 conformance statement or independent accessibility audit for Proton Drive. Complex interactions (encrypted file sharing, key management flows) may present challenges for users with cognitive or motor disabilities.", "lastVerifiedAt": "2026-05-03" }, { "id": "a7ff79f1-f522-44a0-96f6-e90c3c8933a3", "flagGroupId": "d319b62e-355c-4bbb-8c13-c2a67a18364d", "version": 1, "attachmentLevel": "vendor", "vendorId": "cc818785-cb3c-4b09-bd70-606645de107b", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 3, "headline": "Ollama Inc. is a recently founded small startup with limited disclosed governance and funding information; if Ollama ceases operations, the open-source code and model weights remain available for self-hosting or forking.", "explanation": "Ollama Inc. was founded in 2023 and has limited publicly disclosed financial or governance information. Unlike more established open-source companies (Mattermost, Element), Ollama's governance and funding runway are not publicly documented. If Ollama Inc. were acquired, pivoted to a commercial model, or ceased operations, the consequences for users would be limited: the MIT-licensed code and community-maintained forks would remain available. Model weights from Meta, Mistral, and Google are independently distributed and not controlled by Ollama. The open-source foundation significantly mitigates business continuity risk compared to proprietary cloud AI assistants.", "lastVerifiedAt": "2026-05-03" }, { "id": "730b371d-d714-481e-8924-82c5c857340a", "flagGroupId": "c899c7e3-2b49-48fb-82da-a14431f0b122", "version": 1, "attachmentLevel": "vendor", "vendorId": "cc818785-cb3c-4b09-bd70-606645de107b", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Ollama is a very small team (fewer than 20 people); the open-source project also receives community contributions; no labour data or controversies exist.", "explanation": "Ollama Inc. operates with a very small core team. The MIT-licensed project also receives contributions from the open-source community on GitHub. No labour controversies have been reported. As a small US company, no diversity or supply chain reporting obligations apply. The open-source community contributions are voluntary. The model weights distributed via Ollama's library are developed by separate organisations (Meta, Mistral, Google, Microsoft) with their own labour practices.", "lastVerifiedAt": "2026-05-03" }, { "id": "b9c99c5d-c81d-4564-8f38-7bdb4c196c8b", "flagGroupId": "d2d8d584-b0eb-45d5-ac28-c2378aecb493", "version": 1, "attachmentLevel": "vendor", "vendorId": "a3243378-2541-4ea5-92d5-1af7e94cfa49", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 1, "headline": "GitHub Copilot queries are processed via Microsoft Azure (US company); code content sent to Copilot is subject to CLOUD Act and FISA Section 702; Enterprise customers can use Azure regions to constrain data residency.", "explanation": "GitHub Copilot processes code queries through Microsoft Azure's OpenAI infrastructure. Microsoft is a US company subject to CLOUD Act, which allows US law enforcement to compel data from US cloud providers regardless of where the data is stored. For organisations sending proprietary code to Copilot, this means Microsoft could in principle be compelled to disclose query contents. GitHub Copilot Enterprise allows organisations to configure which Azure region processes their data, but the US legal jurisdiction remains regardless of region. Organisations with strict data sovereignty requirements should assess whether sending proprietary code to a US cloud service is acceptable under their policy.", "lastVerifiedAt": "2026-05-03" }, { "id": "aab0dbb5-240f-4ba5-9e1d-a5ba7b9a2285", "flagGroupId": "8a507468-20dc-4bd5-b13f-7813e63b40de", "version": 1, "attachmentLevel": "vendor", "vendorId": "a3243378-2541-4ea5-92d5-1af7e94cfa49", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "GitHub is owned by Microsoft; GitHub hosts approximately 100 million developers and is the dominant code hosting platform; Microsoft's control of both the hosting platform and the leading AI code assistant raises platform concentration concerns.", "explanation": "Microsoft's acquisition of GitHub in 2018 for $7.5 billion gave it control of the world's largest code hosting platform. GitHub Copilot extends this leverage by monetising the AI layer on top of the same code repository data. This concentration — Microsoft controls the repository host, the IDE (VS Code), the AI code assistant, and the cloud provider (Azure) — is a structural dependency risk for organisations. Switching away from GitHub Copilot is relatively easy at the tool level, but the broader Microsoft/GitHub ecosystem integration creates broader lock-in. No EU or US antitrust authority has specifically investigated GitHub Copilot, but Microsoft's DMA gatekeeper designation (for Windows and LinkedIn) is relevant context.", "lastVerifiedAt": "2026-05-03" }, { "id": "f49aa537-8beb-4eb0-8696-144f87d0e31f", "flagGroupId": "17f98435-042b-4269-8fbf-07e13271938e", "version": 1, "attachmentLevel": "vendor", "vendorId": "a3243378-2541-4ea5-92d5-1af7e94cfa49", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "GitHub Copilot inference runs on Microsoft Azure; each code suggestion query involves large language model inference, which has significantly higher energy consumption than traditional software tools; Microsoft Azure uses renewable energy.", "explanation": "GitHub Copilot uses LLM inference for every code suggestion, with energy consumption significantly higher than traditional IDE features. Microsoft Azure, on which Copilot runs, is matched with renewable energy and Microsoft has committed to carbon negative operations by 2030. However, Microsoft's own 2024 sustainability report acknowledged that AI workloads have substantially increased total energy consumption, partially offsetting progress toward sustainability goals. The per-query energy footprint of AI-assisted development is a legitimate sustainability consideration for organisations with environmental commitments.", "lastVerifiedAt": "2026-05-03" }, { "id": "f8e39476-842b-489e-9be5-413512323cc3", "flagGroupId": "abce2fac-badd-4f72-89a7-99a769812336", "version": 1, "attachmentLevel": "vendor", "vendorId": "a3243378-2541-4ea5-92d5-1af7e94cfa49", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "GitHub employs approximately 3,000 people globally as a Microsoft subsidiary; Microsoft publishes an annual diversity and inclusion report; GitHub participated in the 2023 Microsoft layoffs affecting 10,000 staff across the company.", "explanation": "GitHub operates as a Microsoft subsidiary with approximately 3,000 employees. Microsoft's 2023 layoffs of approximately 10,000 staff affected GitHub teams. Microsoft publishes annual diversity and inclusion reports and discloses pay equity analysis. No specific labour controversies have been reported for GitHub beyond the broader Microsoft layoffs. Copilot development relies on OpenAI's model work, introducing a supply chain dependency on OpenAI's labour practices.", "lastVerifiedAt": "2026-05-03" }, { "id": "538f11ff-d939-4766-a0fe-c595a1c12dbf", "flagGroupId": "d03ee954-8754-4f9f-965e-636f18897506", "version": 1, "attachmentLevel": "vendor", "vendorId": "4e9f1dc2-1524-4b74-9985-a369b6d66e84", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Tresorit's acquisition by SwissCom AG (majority Swiss-state-owned) in 2021 introduces a potential conflict between the zero-knowledge promise and the interests of a state-linked telecommunications company.", "explanation": "SwissCom AG is approximately 51% owned by the Swiss Confederation (the Swiss federal government). SwissCom's acquisition of Tresorit means that Tresorit is ultimately majority-controlled by a government-linked entity. While Switzerland is not an EU member and SwissCom is a commercial entity, the ownership structure creates a theoretical conflict: a state-linked entity owns the company that promises its users zero-knowledge privacy. In practice, Tresorit's technical architecture means SwissCom cannot access file contents regardless of its ownership. However, SwissCom could in future push changes to the client software that weaken the E2E encryption model without users being aware, unless the client code is independently audited. This risk is mitigated (but not eliminated) by Tresorit's track record and the fact that its code is not fully open source.", "lastVerifiedAt": "2026-05-03" }, { "id": "07a2d75c-90d9-4234-a9b5-0f53dc621039", "flagGroupId": "18a26ad6-d949-4fe2-9d03-199c003ef543", "version": 1, "attachmentLevel": "vendor", "vendorId": "4e9f1dc2-1524-4b74-9985-a369b6d66e84", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Tresorit is owned by SwissCom AG, a company approximately 51% owned by the Swiss federal government, introducing a state-adjacent ownership structure to a privacy-focused service.", "explanation": "As a SwissCom subsidiary, Tresorit's strategic direction is ultimately subject to SwissCom board oversight. SwissCom is a commercial entity that operates as Switzerland's dominant telecommunications company, but its majority state ownership means the Swiss government has a significant indirect stake in Tresorit's operation. For organisations choosing Tresorit specifically to avoid US Big Tech ownership, the SwissCom/Swiss-state structure is a relevant governance fact to understand, even if it differs substantially from the US tech conglomerates Tresorit is positioned against.", "lastVerifiedAt": "2026-05-03" }, { "id": "c6fee45f-e092-4edc-97ca-3e115df1493c", "flagGroupId": "25aa1591-d6fc-4534-a943-f8c65670cb85", "version": 1, "attachmentLevel": "vendor", "vendorId": "4e9f1dc2-1524-4b74-9985-a369b6d66e84", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "As a SwissCom subsidiary, Tresorit's infrastructure benefits from SwissCom's sustainability commitments, including targets for climate-neutral operations; SwissCom uses predominantly renewable energy on the Swiss grid.", "explanation": "Switzerland's electricity grid is approximately 60% renewable (primarily hydropower). SwissCom publishes an annual sustainability report and has committed to net-zero operations. As a SwissCom subsidiary, Tresorit's infrastructure falls within this framework. Data centre energy efficiency is managed at the SwissCom group level. Specific Tresorit energy consumption data is not published separately.", "lastVerifiedAt": "2026-05-03" }, { "id": "449170a9-9925-4739-bdb8-0b991e3b09c6", "flagGroupId": "d1f2f61d-d59c-4268-a55b-c45bbd1f4d87", "version": 1, "attachmentLevel": "vendor", "vendorId": "4e9f1dc2-1524-4b74-9985-a369b6d66e84", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Tresorit is a small (~100-person) team within the SwissCom group; no standalone labour practices or supply chain transparency report has been published for Tresorit specifically.", "explanation": "Tresorit operates with a relatively small engineering and operations team, mostly based in Budapest and Zurich. As a SwissCom subsidiary, it falls under SwissCom's HR and labour frameworks. SwissCom publishes diversity and employment data as part of its group annual report. No Tresorit-specific workforce transparency data is available.", "lastVerifiedAt": "2026-05-03" }, { "id": "0f4beab1-9b4a-48f3-b9ff-2d9c08b78f49", "flagGroupId": "a7c7b8d0-1bea-4e81-8209-6684074955dc", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "251d6595-d725-4ba2-a51b-42db2ec17db4", "valence": "strength", "tier": 2, "headline": "Safari's Intelligent Tracking Prevention (ITP) is the most advanced cross-site tracking prevention in a major browser, blocking third-party cookies and aggressively limiting tracker fingerprinting.", "explanation": "Apple's Intelligent Tracking Prevention (ITP), developed by the WebKit team, uses on-device machine learning to identify and block cross-site tracking. Safari blocks all third-party cookies by default (a step Chrome and Edge have been slow to take). ITP also limits the lifespan of first-party cookies set by redirects, limiting bounce-tracking. Safari's Private Relay (in iCloud+ subscriptions) hides the user's IP from websites and Apple's own DNS servers. In iOS 17+, Safari's private browsing applies link-tracking protection, removing tracking parameters (utm_*, fbclid, etc.) from URLs. Safari's privacy protections are generally leading the industry.", "lastVerifiedAt": "2026-05-03" }, { "id": "47c0e25d-bdcd-4c20-bab1-088aa86573e1", "flagGroupId": "d9437282-2b8f-42c5-8db1-f57c90b3301a", "version": 1, "attachmentLevel": "vendor", "vendorId": "1d49a2db-7f92-4245-a14b-b6040537cbb8", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Apple earns an estimated $15-20 billion annually from Google to make Google the default search engine in Safari; this structural financial dependency conflicts with Safari's privacy positioning as it channels all Safari searches to the world's largest advertising company.", "explanation": "The 2024 US DOJ antitrust ruling against Google found that Apple receives approximately $18-20 billion per year from Google to make Google the default search engine in Safari. This constitutes approximately 14-16% of Apple's Services revenue. The arrangement means Apple's browser — marketed as privacy-preserving — routes all default user searches through Google, which builds advertising profiles from search data. Apple's privacy measures protect users from third-party website trackers but do nothing to protect search privacy from Google (the default search engine Apple is paid to promote). This is a fundamental conflict between Apple's privacy marketing and its financial interests.", "lastVerifiedAt": "2026-05-03" }, { "id": "5c61fca1-2473-4791-a885-b476ce84a6d0", "flagGroupId": "10de211e-f0c2-4ea8-bb29-31dba5c295f8", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "251d6595-d725-4ba2-a51b-42db2ec17db4", "valence": "concern", "tier": 2, "headline": "Safari iCloud sync (bookmarks, reading list, history, passwords) transmits data to Apple's servers; Apple is a US company subject to CLOUD Act, though Safari's on-device processing model minimises (but does not eliminate) this exposure.", "explanation": "Users of Safari with iCloud sync enabled store their browsing history, bookmarks, reading list, and Keychain passwords on Apple's iCloud servers. Apple's servers are in the US (and partners globally). Apple is subject to the CLOUD Act. While Apple has published technical documentation of end-to-end encryption for certain iCloud data (including passwords), browsing history and bookmarks sync has historically been accessible to Apple. In 2022, Apple introduced Advanced Data Protection, enabling E2E encryption for most iCloud data categories including Safari history. This is opt-in and not enabled by default.", "lastVerifiedAt": "2026-05-03" }, { "id": "4a927754-b093-4021-9666-3edb6a4d4ade", "flagGroupId": "8b65ed88-2c4b-47ea-87c3-9167dc40e2a9", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "251d6595-d725-4ba2-a51b-42db2ec17db4", "valence": "concern", "tier": 2, "headline": "Safari is only available on Apple hardware (macOS/iOS); there is no Windows or Android version, creating a hard dependency on the Apple hardware ecosystem and historically Safari has been slow to implement web standards compared to Chrome and Firefox.", "explanation": "Apple discontinued Safari for Windows in 2012. Safari is exclusively available on Apple devices (iPhone, iPad, Mac). iOS requires all browsers to use WebKit (Apple's rendering engine) — even Chrome and Firefox on iPhone use WebKit, not Blink or Gecko. This gives Apple a monopoly on browser rendering on iOS. Historically, Safari has been criticised as \"the new Internet Explorer\" for slow or incomplete implementation of web standards (PWA support, WebRTC, Payment Request API). This has improved in recent years but Safari's lack of a Windows/Android version limits its use as an organisation-wide browser standard.", "lastVerifiedAt": "2026-05-03" }, { "id": "7cd1157d-922a-4719-aef8-70a9ab0bbd5c", "flagGroupId": "f64a621c-8b95-4b12-abef-d5fdbc231768", "version": 1, "attachmentLevel": "vendor", "vendorId": "1d49a2db-7f92-4245-a14b-b6040537cbb8", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Apple has been designated an EU DMA gatekeeper; DMA requires Apple to allow alternative browser engines on iOS and provide browser choice screens — addressing Apple's historic monopoly on iOS browser rendering.", "explanation": "Apple was designated a gatekeeper under the EU Digital Markets Act in 2023. DMA obligations required Apple to offer users in the EU a browser choice screen when setting up iOS devices (choosing a default browser from a selection). More significantly, the DMA requires Apple to allow third-party browser engines on iOS — ending the WebKit-only requirement for browsers on iPhone. Apple began implementing these changes for EU users in iOS 17.4 (early 2024). This is a landmark regulatory change that removes one of Apple's most significant competitive moats in the mobile browser market.", "lastVerifiedAt": "2026-05-03" }, { "id": "e4ec136f-122e-4126-a601-e9b391c4cd23", "flagGroupId": "8305990e-c893-43cc-9c6a-e49633c8f024", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "251d6595-d725-4ba2-a51b-42db2ec17db4", "valence": "strength", "tier": 3, "headline": "Apple optimises Safari for energy efficiency on Apple Silicon and iOS; it consistently achieves significantly longer battery life in browser benchmarks compared to Chrome and other browsers on the same Mac hardware.", "explanation": "Apple's Safari is deeply optimised for Apple Silicon (M-series chips) and iOS/iPadOS. Independent battery life tests consistently show Safari achieving 30-50% more battery life on MacBook and iPhone compared to Chrome or Firefox running the same workload. This is due to Safari's native integration with Apple's hardware power management, Metal GPU acceleration, and process management. For organisations with large Mac fleets, Safari's lower energy consumption per browsing session is a measurable environmental advantage. Apple publishes annual Environmental Progress Reports.", "lastVerifiedAt": "2026-05-03" }, { "id": "4fea36d0-b49b-4cf2-ba19-5d561c742d06", "flagGroupId": "fc5f1ee1-b168-4761-805e-f0134f196899", "version": 1, "attachmentLevel": "vendor", "vendorId": "1d49a2db-7f92-4245-a14b-b6040537cbb8", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Apple's hardware supply chain (Foxconn, TSMC, Pegatron) involves factories in China with documented labour practice concerns; Apple publishes supplier responsibility reports but conditions at assembly facilities remain a recurring concern.", "explanation": "Apple's hardware supply chain relies heavily on manufacturers in mainland China (Foxconn/Hon Hai, Pegatron) for iPhone and Mac assembly. The 2010 Foxconn suicides and subsequent labour rights investigations documented extreme working conditions and excessive overtime. Apple's Supplier Responsibility Programme audits suppliers and publishes annual reports. Conditions have improved but concerns persist: the 2022 Zhengzhou Foxconn protests (during COVID lockdowns) and ongoing reports of excessive overtime show systemic challenges. While Safari is software, it is delivered exclusively on Apple hardware, making Apple's hardware supply chain relevant.", "lastVerifiedAt": "2026-05-03" }, { "id": "88183020-7316-4af2-8a1a-a5249bd7466c", "flagGroupId": "c15f7576-989d-42e4-8160-8d393de57e3a", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "251d6595-d725-4ba2-a51b-42db2ec17db4", "valence": "strength", "tier": 3, "headline": "Safari integrates deeply with Apple's industry-leading accessibility stack (VoiceOver, Switch Control, Voice Control); on iOS, Safari provides the most accessible web browsing experience for users with visual or motor disabilities.", "explanation": "Apple's accessibility platform (VoiceOver screen reader, Switch Control, Voice Control, Zoom magnification, Dynamic Type) is consistently rated among the best in the industry. Safari, as a native Apple app, integrates with all of these features at a deeper level than any third-party browser. VoiceOver + Safari on iOS provides one of the best mobile web browsing experiences for blind users. Apple publishes an Accessibility page and has received recognition from accessibility advocates for its consistent investment in disability access features. Apple also uses its App Store requirements to enforce accessibility standards for third-party apps.", "lastVerifiedAt": "2026-05-03" }, { "id": "db7ef2c7-6022-4f6e-8819-cd5cb21d0ba6", "flagGroupId": "bf1ceaab-a727-45df-8680-d902e7049482", "version": 1, "attachmentLevel": "vendor", "vendorId": "cb128933-fe50-4bf3-9276-bb941794b69b", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 1, "headline": "LibreWolf has no central servers, no user accounts, and no data processing infrastructure; all browsing data remains entirely on the user's device.", "explanation": "Unlike Firefox (which connects to Mozilla for sync, updates, and telemetry) or Chrome (Google), LibreWolf is a locally installed application that processes all browsing data on-device. There is no sync service, no user account, no cloud storage. The only network connections made by LibreWolf itself are to download software updates (from GitLab/release servers), to uBlock Origin's filter list servers (for ad blocker updates), and to the websites the user explicitly navigates to. No browsing data is transmitted to LibreWolf's developers or any third party.", "lastVerifiedAt": "2026-05-03" }, { "id": "b24a8afd-c16b-42f2-be96-a66e2f689af7", "flagGroupId": "47281c5f-1ece-4a22-986e-b93d309f34d5", "version": 1, "attachmentLevel": "vendor", "vendorId": "cb128933-fe50-4bf3-9276-bb941794b69b", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "LibreWolf has no formal legal entity, no foundation, and no paid maintainers; the project depends entirely on volunteer time and could be abandoned or diverge from Firefox in a way that creates security gaps.", "explanation": "LibreWolf's development depends on a small group of volunteers. There is no organisation responsible for its continuity. The primary risk for LibreWolf users is that security updates from upstream Firefox may lag in LibreWolf releases — any delay between a Firefox security patch release and the corresponding LibreWolf release creates a window of vulnerability. The LibreWolf team generally releases updates within days of Firefox, but this is not guaranteed. If key contributors leave the project, the lag could increase significantly.", "lastVerifiedAt": "2026-05-03" }, { "id": "505872d0-0d73-42cb-bd19-d7e2766e3879", "flagGroupId": "2b1f7697-cfe0-474a-8755-ffcd10a8824c", "version": 1, "attachmentLevel": "vendor", "vendorId": "cb128933-fe50-4bf3-9276-bb941794b69b", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "LibreWolf has no server infrastructure beyond release hosting; its environmental footprint is limited to the user's device and is comparable to Firefox.", "explanation": "LibreWolf releases are hosted on GitLab and third-party mirrors. The browser has no server-side components. Its environmental footprint is effectively the same as Firefox (they run on the same hardware with similar resource requirements). No sustainability data is published by the project, nor would it be expected from a volunteer community project.", "lastVerifiedAt": "2026-05-03" }, { "id": "cf9037b2-c3a5-40b4-ab3b-204a549ca14c", "flagGroupId": "74f75907-1b8b-4de3-992d-127e6126fef6", "version": 1, "attachmentLevel": "vendor", "vendorId": "cb128933-fe50-4bf3-9276-bb941794b69b", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "LibreWolf is maintained entirely by volunteers; there is no paid workforce, no supply chain, and no labour transparency reporting (nor any obligation for such reporting).", "explanation": "LibreWolf's contributors are volunteers motivated by privacy values. There are no employees, no supply chain, and no commercial labour relationships. This is a positive in terms of labour concerns (no precarious employment, no contractor exploitation) but also means the project sustainability relies entirely on volunteer time.", "lastVerifiedAt": "2026-05-03" }, { "id": "429a0b29-3814-485e-b6db-6abf807bcec9", "flagGroupId": "4ec6bfc2-6681-4136-abc2-a62c9b5ff395", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b311c3ac-7396-4a6d-a0e4-685b92faae5d", "valence": "strength", "tier": 1, "headline": "Element can be used with a self-hosted Matrix homeserver, giving organisations complete control over their message data with no third-party involvement.", "explanation": "Matrix is a decentralised, federated protocol. The homeserver (Synapse or Dendrite) can be run on infrastructure controlled by the organisation. When deployed this way, no messages pass through Element/Matrix Foundation servers. The entire data processing chain is under the deploying organisation's control. End-to-end encryption (Olm/Megolm protocols) means messages are encrypted between clients, so even a self-hosted homeserver operator cannot read E2E-encrypted messages. This makes Element/Matrix one of the strongest options for organisations requiring data sovereignty.", "lastVerifiedAt": "2026-05-03" }, { "id": "35d3b046-49c9-4843-8aff-2ecd36154b9c", "flagGroupId": "17b43265-dfcd-4965-a296-38eeae38383d", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "54fecb34-a5af-481e-95ee-bfc9baf6d525", "valence": "concern", "tier": 1, "headline": "Microsoft Edge has been documented sending browsing URLs and identifiers to Microsoft's Bing servers without adequate disclosure; in 2023 security researchers found Edge transmitting page URLs typed in the address bar to Bing.", "explanation": "In January 2023, security researchers reported that Microsoft Edge was transmitting the full URL of every page visited to Bing's servers via an \"Experimentation and Configuration Service\" for A/B testing. This data was sent alongside a persistent identifier, effectively linking browsing history to device identity. This behaviour was not clearly disclosed in Edge's privacy policy. Microsoft stated this was related to a feature test and was not intended. In 2021, researchers (Dr. Douglas Leith, Trinity College Dublin) found that Edge sent hardware identifiers and browsing data to Microsoft servers. Edge's Bing integration, news feed, and Copilot features create multiple vectors for browsing data to reach Microsoft.", "lastVerifiedAt": "2026-05-03" }, { "id": "190d0619-808c-4be5-bfd3-2a0ae02c0174", "flagGroupId": "7b476b91-2c18-42ef-9fb7-1b11393d1d9c", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "54fecb34-a5af-481e-95ee-bfc9baf6d525", "valence": "concern", "tier": 2, "headline": "Edge's built-in Copilot AI sidebar can be invoked to analyse the current page and transmits page content to Microsoft's Azure OpenAI servers; this is an opt-in feature but is prominently surfaced to users.", "explanation": "Microsoft Edge includes a Copilot sidebar (Microsoft's AI assistant powered by GPT-4/Azure OpenAI) that can summarise the current page, answer questions about it, and compare products. When used, the page content is transmitted to Microsoft's servers for AI processing. Edge has been updated multiple times to make Copilot more prominent and easier to accidentally invoke. For users who handle confidential business or personal information in their browser, inadvertent Copilot activation could result in sensitive content being sent to Microsoft. The feature is described as opt-in but its prominent UI placement increases accidental use.", "lastVerifiedAt": "2026-05-03" }, { "id": "51d8475a-651f-432c-860b-f2458ac3df75", "flagGroupId": "35f2aa35-95e7-4334-b561-52e7f1e4c79c", "version": 1, "attachmentLevel": "vendor", "vendorId": "321b2428-cc10-429d-bb40-98e2f9d235b2", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Edge telemetry, Bing search data, and Copilot interactions are processed by Microsoft, a US company subject to CLOUD Act and FISA Section 702.", "explanation": "All Edge telemetry, Bing searches initiated from Edge, and Copilot interactions are processed by Microsoft Corporation, a US company. This data is subject to CLOUD Act compulsion by US law enforcement and FISA Section 702 intelligence demands. Microsoft's Transparency Report documents law enforcement data requests across its products. For users in sensitive roles (journalists, lawyers, activists), the US jurisdiction of all Edge-related data processing is a material consideration.", "lastVerifiedAt": "2026-05-03" }, { "id": "c29c6258-cde0-4c03-9c19-298beb7fe231", "flagGroupId": "993b9f0a-5de1-4804-a6c6-5724868fddd3", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "54fecb34-a5af-481e-95ee-bfc9baf6d525", "valence": "context", "tier": 3, "headline": "Microsoft Edge is built on Chromium (open source) but Microsoft's added features (Bing, Copilot, news feed, telemetry) are proprietary; it participates in Chromium's de-facto browser monoculture.", "explanation": "Edge uses the Chromium rendering engine, which is open source. However, all of Microsoft's additions — telemetry, Bing integration, Copilot, Clarity analytics — are proprietary and not disclosed in source code. Edge's adoption of Chromium contributes to the same browser engine monoculture concern as Chrome: if Edge is the default browser on all Windows machines and uses Chromium, it further marginalises non-Chromium browsers (Firefox, Safari). Edge supports the Chrome Web Store extension ecosystem.", "lastVerifiedAt": "2026-05-03" }, { "id": "4c930c09-ece5-4b24-9474-8c9c690355e7", "flagGroupId": "072c6460-010e-4645-9472-89d7ce6fd6da", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "54fecb34-a5af-481e-95ee-bfc9baf6d525", "valence": "concern", "tier": 2, "headline": "Microsoft Edge is bundled as the default browser on all Windows 10/11 installations and Windows reinstalls; Microsoft has made it deliberately difficult to change the default browser on Windows.", "explanation": "Edge is pre-installed as the default browser on all new Windows 10 and 11 machines. Microsoft Windows makes changing the default browser more complex than prior versions of Windows, requiring users to navigate multiple settings screens. During Windows updates and after new user setup, Edge may be re-set or prompted as the default. Microsoft has also integrated Edge promotions into Windows Start menu and taskbar. This bundling and the friction in changing defaults has been criticised by regulators and browser competitors as anti-competitive. The European Commission has designated Microsoft as a DMA gatekeeper and Windows PC OS is subject to interoperability obligations.", "lastVerifiedAt": "2026-05-03" }, { "id": "3684caf4-ea0d-447a-b2c2-d545560ee88d", "flagGroupId": "afb36cec-9eea-40ac-b895-d33444d328db", "version": 1, "attachmentLevel": "vendor", "vendorId": "321b2428-cc10-429d-bb40-98e2f9d235b2", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Edge's server-side services (Bing, Copilot, telemetry) run on Microsoft Azure, which is matched 100% with renewable energy; Microsoft has committed to carbon negative operations by 2030.", "explanation": "The client-side browser software has no direct energy footprint. Edge's server-side dependencies (Bing search index, Copilot/Azure OpenAI inference, telemetry processing) run on Microsoft Azure, which is matched with renewable energy. Microsoft's carbon negative by 2030 commitment covers Azure. AI inference workloads (Copilot) have significantly higher energy costs than traditional search.", "lastVerifiedAt": "2026-05-03" }, { "id": "1300be27-9039-45c0-ab48-105fa2637352", "flagGroupId": "0d3e848a-f1cc-427b-b45b-485d9a6819e4", "version": 1, "attachmentLevel": "vendor", "vendorId": "321b2428-cc10-429d-bb40-98e2f9d235b2", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Microsoft publishes annual diversity data and Human Rights Reports; the January 2023 layoffs (10,000 employees) affected Edge/browser engineering teams.", "explanation": "See video-conferencing__microsoft-teams__2026-05-03.yaml for full Microsoft labour context. Edge is developed by Microsoft's Browser team, which was affected by the 2023 layoff round. Microsoft publishes diversity data and human rights reports covering its global operations.", "lastVerifiedAt": "2026-05-03" }, { "id": "50d5cf08-b975-4978-af7d-c5383448c649", "flagGroupId": "99917c60-31d7-4d78-bf2c-a69f9210c7c7", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "54fecb34-a5af-481e-95ee-bfc9baf6d525", "valence": "strength", "tier": 3, "headline": "Microsoft Edge publishes a VPAT and is designed for screen reader compatibility with Windows Narrator, NVDA, and JAWS; immersive reader provides reading support tools for dyslexia.", "explanation": "Edge includes Microsoft's Immersive Reader feature (also found in Word and Teams) which reformats web pages for improved readability and provides tools for dyslexic users (font size, letter spacing, line spacing). Edge publishes a VPAT (Voluntary Product Accessibility Template) and supports keyboard navigation, screen reader compatibility with NVDA, JAWS, and Windows Narrator. Edge's Caret Browsing (F7) assists keyboard-only navigation of web content. Microsoft's accessibility focus in Edge is generally strong.", "lastVerifiedAt": "2026-05-03" }, { "id": "df9d4515-d69c-423f-a2a2-94bf7d26220d", "flagGroupId": "31ffc389-812a-48f0-a5ec-98310f9b6cb5", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b311c3ac-7396-4a6d-a0e4-685b92faae5d", "valence": "concern", "tier": 2, "headline": "The default matrix.org homeserver (used by many Element users) is operated by the Matrix Foundation and processes message metadata for all users who have not set up a private homeserver.", "explanation": "When users register on Element without specifying a homeserver, they are placed on matrix.org, operated by the Matrix Foundation. For these users, message metadata (room membership, timing, device fingerprints) is stored on Matrix Foundation servers. While E2E encryption protects message content, metadata is accessible to the Matrix Foundation. The matrix.org server has had stability and security incidents (including a 2019 server compromise). The matrix.org privacy policy applies to these users. Organisations should be aware that default Element use is not equivalent to self-hosted use.", "lastVerifiedAt": "2026-05-03" }, { "id": "17590942-174e-4038-9b94-a383c204638c", "flagGroupId": "430f117f-0a09-4599-af54-b54401c2382f", "version": 1, "attachmentLevel": "vendor", "vendorId": "39d5099b-bf13-4c19-9173-9e121ba5c972", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 2, "headline": "Mullvad is a Swedish company (EU jurisdiction, GDPR applies); the browser processes no user data through Mullvad's servers, so there is no meaningful data sovereignty risk from using the browser.", "explanation": "Amagicom AB is incorporated in Sweden and subject to Swedish law and GDPR. Unlike US browser vendors (Google, Microsoft, Apple), Mullvad is not subject to US CLOUD Act compulsion. More importantly, the Mullvad Browser itself processes no user data through Mullvad's infrastructure — browsing history, tabs, passwords are stored locally on the user's device. There is effectively no data sovereignty consideration for browser use (as opposed to Mullvad VPN, which does process traffic through Mullvad's servers).", "lastVerifiedAt": "2026-05-03" }, { "id": "d521af0b-4953-4097-9eca-c33e3d74e258", "flagGroupId": "87464608-63e3-4aa7-bb36-347d31c12e8d", "version": 1, "attachmentLevel": "vendor", "vendorId": "39d5099b-bf13-4c19-9173-9e121ba5c972", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 2, "headline": "Mullvad is an independent, privately held Swedish company with no VC investors, no advertising revenue, and a documented track record of refusing to cooperate with mass surveillance; Tor Project independence provides additional governance assurance.", "explanation": "Mullvad has a documented privacy track record: in 2023, Swedish police raided Mullvad's offices and attempted to seize servers. Mullvad stated its no-logs policy meant there was no user data to seize. Mullvad accepts payment by cash or cryptocurrency for anonymous subscriptions. The company has no VC investors or advertising model that would create pressure to monetise user data. The Tor Project's role as Mullvad Browser's developer provides additional credibility: the Tor Project is a non-profit with an explicit anti-surveillance mission.", "lastVerifiedAt": "2026-05-03" }, { "id": "9c528efd-d891-49e3-a3e7-b9b8eb0d6c13", "flagGroupId": "b6b0ed90-d960-4002-94b4-425380928836", "version": 1, "attachmentLevel": "vendor", "vendorId": "39d5099b-bf13-4c19-9173-9e121ba5c972", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Mullvad Browser has no server-side browser infrastructure; the environmental footprint is limited to the user's device, comparable to Firefox.", "explanation": "Mullvad Browser is a locally installed application with no server-side browser components. Its energy consumption is effectively the same as Firefox on the same hardware. Mullvad VPN's server infrastructure (separate from the browser) uses renewable energy; the company has published commitments about its VPN server sustainability.", "lastVerifiedAt": "2026-05-03" }, { "id": "a5252eb3-4e55-4f23-b5bf-0a576f065b79", "flagGroupId": "99b9e2c5-9d05-409a-880c-f7be472f85cc", "version": 1, "attachmentLevel": "vendor", "vendorId": "39d5099b-bf13-4c19-9173-9e121ba5c972", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Mullvad is a small Swedish company employing approximately 40 people; no labour controversies reported; Swedish labour law provides strong worker protections.", "explanation": "Amagicom AB employs a small team in Gothenburg, Sweden. Swedish labour law is among the strongest in the world for worker protection. As a private company, Mullvad publishes no diversity or pay equity reports. No labour controversies have been reported. The Tor Project (US non-profit) contributes developers to Mullvad Browser through a collaboration agreement.", "lastVerifiedAt": "2026-05-03" }, { "id": "7b1e3a36-2b1c-451f-8c2c-c49a248f131c", "flagGroupId": "e22d35a4-e91c-4716-8075-d23843d32668", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b311c3ac-7396-4a6d-a0e4-685b92faae5d", "valence": "strength", "tier": 1, "headline": "Self-hosted Matrix deployments allow organisations to place their messaging data in any jurisdiction, under their own infrastructure and legal regime.", "explanation": "Unlike SaaS messaging services that process data in a single vendor's infrastructure, Matrix's self-hosting model allows organisations to deploy a homeserver in any country. This means EU public sector organisations can host entirely within EU jurisdiction, UK government departments on UK-sovereign infrastructure, and so on. The French government (DINUM), German federal government (BSI), and military/intelligence agencies in multiple countries have deployed Element/Matrix for this reason. This is one of the strongest available data sovereignty positions for a collaboration tool.", "lastVerifiedAt": "2026-05-03" }, { "id": "93ddf00c-0195-42ac-97e6-99f1d262c352", "flagGroupId": "e8e21356-7532-4289-b5c8-39b227db4246", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "96a65b88-3c28-4d93-8ac2-e99256f2bc22", "valence": "strength", "tier": 2, "headline": "Ecosia states it does not build advertising profiles on users and anonymises search data within seven days.", "explanation": "Ecosia's privacy policy states that it does not sell personal data to advertisers and does not build advertising profiles on users. Search terms are not passed to advertisers. Ecosia states that it anonymises the data it collects within seven days. The service uses a first-party analytics tool (Matomo, self-hosted) rather than Google Analytics, and does not use third-party tracking cookies.", "lastVerifiedAt": "2026-05-07" }, { "id": "f5f03791-38ef-464f-9b60-df1e498bb636", "flagGroupId": "ff9019ce-e9bf-4a94-b127-a6a8437ac460", "version": 1, "attachmentLevel": "vendor", "vendorId": "040575dd-cf89-43c8-a868-879e91216137", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 2, "headline": "Kirby is developed by a German company (EU jurisdiction) and the self-hosted CMS processes no data through the vendor; EU organisations can deploy entirely on EU infrastructure.", "explanation": "bastian allgeier GmbH is a German company subject to German law, EU regulations, and GDPR. Unlike US-based SaaS providers, Kirby itself processes no visitor data. The deploying organisation controls all data through their hosting provider choice. EU organisations can deploy Kirby on EU-based hosting with full GDPR compliance without any cross-border data transfer to the vendor.", "lastVerifiedAt": "2026-05-03" }, { "id": "995155e4-f4e0-4cdd-8b7c-f628105d0f26", "flagGroupId": "61304ded-11a3-4d32-9e07-341145797179", "version": 1, "attachmentLevel": "vendor", "vendorId": "040575dd-cf89-43c8-a868-879e91216137", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Kirby is maintained primarily by a single developer (Bastian Allgeier) via a small company; this concentration creates a key-person risk — if Allgeier were unable to continue development, there is no formal succession plan.", "explanation": "Kirby is the product of one person's vision and primary effort. While bastian allgeier GmbH employs a small supporting team, Bastian Allgeier is the primary architect and maintainer. This creates a key-person risk that does not exist with larger open-source projects governed by foundations or companies with multiple core developers. The MIT licence for the source code means a community fork could continue development, but there is no formal governance structure or succession plan. For organisations building critical systems on Kirby, this concentration of maintenance responsibility is worth understanding.", "lastVerifiedAt": "2026-05-03" }, { "id": "5e4c924b-fe81-45e0-9c41-237dde624ea4", "flagGroupId": "cb2dd96e-7f34-40b7-9b7f-264df97afbb7", "version": 1, "attachmentLevel": "vendor", "vendorId": "040575dd-cf89-43c8-a868-879e91216137", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Kirby is maintained by bastian allgeier GmbH, a micro-company of fewer than 10 people; no labour or supply chain transparency reporting exists or would be expected.", "explanation": "bastian allgeier GmbH is a micro-enterprise. No labour reporting obligations apply. No supply chain concerns arise from a software company of this size. No labour controversies have been reported.", "lastVerifiedAt": "2026-05-03" }, { "id": "805c02ec-3c01-47c6-9cf5-4e4da1707375", "flagGroupId": "4c8e51c8-7361-4800-ad44-ccec3950d5d3", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b311c3ac-7396-4a6d-a0e4-685b92faae5d", "valence": "strength", "tier": 1, "headline": "Matrix is an open, standardised, federated messaging protocol; any client can communicate with any other Matrix user on any homeserver, with no central gatekeeper or vendor dependency.", "explanation": "The Matrix protocol is specified as an open standard at spec.matrix.org. Any organisation can implement the protocol and create compatible clients or homeservers. Matrix is federated: users on different homeservers can communicate seamlessly, similar to how email works across different providers. Element is one of dozens of Matrix clients; alternatives include Cinny, FluffyChat, SchildiChat, and others. The Element client source code (Web, iOS, Android, Desktop) is published under the Apache 2.0 license. The server software (Synapse, Dendrite) is also open source. This is the highest possible standard of openness and interoperability.", "lastVerifiedAt": "2026-05-03" }, { "id": "e1750c12-9b66-41fd-9137-962aec106467", "flagGroupId": "de29794e-43de-4c2f-8133-11edf99e107c", "version": 1, "attachmentLevel": "vendor", "vendorId": "04146bf6-39f9-44a7-b121-639b17db1158", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 2, "headline": "The Matrix protocol is governed by the Matrix Foundation (a UK Community Interest Company), independent of Element as a company, preventing any single company from controlling the protocol standard.", "explanation": "The Matrix.org Foundation C.I.C. (Community Interest Company) governs the Matrix specification independently of Element. The Foundation includes a Spec Core Team that manages protocol development. This means Element cannot unilaterally modify the Matrix protocol to lock in users or exclude competitors. Any company or individual can implement Matrix without Element's permission. This is a structurally stronger independence guarantee than, for example, Slack's or WhatsApp's proprietary protocols. The Foundation's CIC status means it must operate for the benefit of the community rather than shareholders.", "lastVerifiedAt": "2026-05-03" }, { "id": "81e6017e-1d4b-4520-b152-30b030cdda32", "flagGroupId": "beca44bc-fc34-437a-9a1f-6976c61be3a5", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "7a263049-c560-4e1f-b143-e639e22c5ead", "valence": "concern", "tier": 2, "headline": "Squarespace collects analytics data on website visitors by default and may use third-party analytics; website owners must configure GDPR-compliant cookie consent before collecting visitor data in the EU.", "explanation": "Squarespace's built-in website analytics track visitor page views, referrers, and geographic data. Squarespace also allows integration with Google Analytics and other third-party tracking tools. When Squarespace or integrated third-party analytics are active without a configured cookie consent mechanism, EU website operators are likely violating GDPR. Squarespace provides a Cookie Notice feature but does not enforce GDPR-compliant consent (opt-in prior to analytics cookies) by default. Website owners using Squarespace bear responsibility for GDPR compliance for their visitors' personal data.", "lastVerifiedAt": "2026-05-03" }, { "id": "88528eda-5d79-44f5-84ee-b442332f3df1", "flagGroupId": "b8985213-dde3-49ee-a6b1-3f157a05ee40", "version": 1, "attachmentLevel": "vendor", "vendorId": "2af133fb-8ce5-4bd7-99d8-d083e370ae25", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Squarespace is a US company; all website data, visitor analytics, and customer data are hosted on US infrastructure with no EU data residency option.", "explanation": "Squarespace's infrastructure is in the United States. Website owners publish their content on Squarespace's US-based servers. There is no option to select EU data centre location for website hosting. For EU organisations with GDPR obligations, this means visitor personal data (collected via analytics or contact forms) is transferred to and processed in the US. Squarespace relies on Standard Contractual Clauses (SCCs) for GDPR-compliant data transfers but remains subject to US law (CLOUD Act, FISA 702).", "lastVerifiedAt": "2026-05-03" }, { "id": "d6070181-057d-4e31-ae51-2f8983c6f862", "flagGroupId": "a2e95207-613a-478a-98b4-8ee2e476f849", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "7a263049-c560-4e1f-b143-e639e22c5ead", "valence": "concern", "tier": 1, "headline": "Squarespace allows content export only to WordPress-format XML; this does not export design, templates, or e-commerce data, making full migration to another platform extremely difficult.", "explanation": "Squarespace's export feature produces a WordPress-compatible XML file for text content (pages, blog posts). However, this export does not include: Squarespace's visual design and template customisations, images hosted on Squarespace (which must be downloaded separately), e-commerce products and orders, form submissions, or site structure metadata. Rebuilding a Squarespace website on another platform requires substantial manual effort. This is a characteristic of all-in-one website builders and creates significant switching costs. The XML content export is the only standardised export available.", "lastVerifiedAt": "2026-05-03" }, { "id": "a6ae9658-4537-450f-89b8-9bf8b2514c6f", "flagGroupId": "9ca4d92c-5cc1-4c47-a4bb-15b32085513f", "version": 1, "attachmentLevel": "vendor", "vendorId": "2af133fb-8ce5-4bd7-99d8-d083e370ae25", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Squarespace was acquired by Permira private equity in 2024 for ~$6.9 billion; PE ownership typically involves financial pressure to improve margins and plan for an eventual exit, which may affect product quality or pricing.", "explanation": "Permira is a UK-based private equity firm with a portfolio of technology companies. PE acquisitions of SaaS companies commonly involve cost-cutting (layoffs, support quality reduction), price increases, and eventual re-sale or IPO. These dynamics introduce risk for website owners who have built their online presence on Squarespace's platform. The inability to easily export and redeploy a Squarespace website amplifies this risk: if Squarespace's service quality degrades or prices increase significantly post-acquisition, website owners have limited options to migrate cost-effectively.", "lastVerifiedAt": "2026-05-03" }, { "id": "75dfdac9-12e2-44e5-a0d7-c8e90d0c268d", "flagGroupId": "1e23edd8-c926-4c38-b91a-2ac24fa2d418", "version": 1, "attachmentLevel": "vendor", "vendorId": "2af133fb-8ce5-4bd7-99d8-d083e370ae25", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Squarespace has not published detailed sustainability or carbon footprint data; its infrastructure runs on AWS and Google Cloud, both of which have renewable energy commitments.", "explanation": "Squarespace has not published an annual sustainability or ESG report. Its infrastructure runs on major cloud providers (AWS, Google Cloud), both of which have published renewable energy commitments (AWS: 100% renewable by 2025, Google: carbon-free 24/7 by 2030). Squarespace's own sustainability commitments are not publicly documented. Following privatisation, reporting obligations have decreased compared to its period as a public company.", "lastVerifiedAt": "2026-05-03" }, { "id": "f15a31d0-9bf1-4d4c-87d3-84dc24604d2b", "flagGroupId": "34d25ab9-5f7e-4be7-a7f9-94297b603bc0", "version": 1, "attachmentLevel": "vendor", "vendorId": "2af133fb-8ce5-4bd7-99d8-d083e370ae25", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Squarespace conducted layoffs in 2023 (~300 employees, ~17% of staff) prior to the Permira acquisition; as a private company post-2024, workforce transparency has decreased.", "explanation": "In February 2023, Squarespace laid off approximately 300 employees (around 17% of its workforce) amid a broader tech sector downturn. This occurred while the company was still publicly listed. Following the 2024 Permira acquisition and delisting from NYSE, Squarespace is no longer required to file public financial reports and has reduced transparency obligations. Previous diversity and workforce data from SEC filings is no longer publicly updated.", "lastVerifiedAt": "2026-05-03" }, { "id": "e4f442a6-0792-481c-9f90-e4911a0cfc16", "flagGroupId": "e36bf153-a002-4fc2-9d4f-542854e96cdf", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "7a263049-c560-4e1f-b143-e639e22c5ead", "valence": "context", "tier": 3, "headline": "Squarespace templates are generally accessible and include built-in ARIA and semantic HTML, but Squarespace does not provide automated WCAG compliance checking tools for website owners building their sites.", "explanation": "Squarespace's platform templates use semantic HTML and ARIA attributes at a basic level. The company has improved accessibility of its editor interface over time. However, Squarespace does not provide built-in tools for website owners to check their site's WCAG compliance. Content entered by website owners (images without alt text, poor colour contrast) can easily create accessibility violations. Squarespace's accessibility statement for the Squarespace.com platform exists but does not cover the accessibility of all possible websites built on the platform.", "lastVerifiedAt": "2026-05-03" }, { "id": "939d3328-a873-4db5-aec5-af6b2e94b9db", "flagGroupId": "fed33c23-b078-4ae8-8f7f-8f66b4f2fb3d", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b311c3ac-7396-4a6d-a0e4-685b92faae5d", "valence": "context", "tier": 3, "headline": "Matrix's federated architecture means there is no central data centre; energy consumption is distributed across all homeserver operators; Element Matrix Services' own infrastructure uses UK and EU cloud providers.", "explanation": "Because Matrix is federated, there is no single large data centre backing Element/Matrix comparable to Slack's or Teams' centrally operated infrastructure. For self-hosted deployments, energy consumption is the responsibility of the deploying organisation. Element Matrix Services' managed hosting uses AWS and other cloud providers; UK and EU regions typically have better renewable energy commitments than global averages. No specific environmental impact report has been published by Element.", "lastVerifiedAt": "2026-05-03" }, { "id": "1efdad69-7bcd-4c8c-bbe7-50ecce172284", "flagGroupId": "a988bba9-b88f-4837-a6e0-3fdfb0c261fd", "version": 1, "attachmentLevel": "vendor", "vendorId": "04146bf6-39f9-44a7-b121-639b17db1158", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Element is a small UK-based company with a globally distributed team; it does not publish diversity, pay equity, or supply chain transparency reports.", "explanation": "Element employs approximately 100 people, distributed globally with a concentration in the UK, Germany, and North America. As a private company, it is not subject to reporting requirements that apply to large public companies. No major labour controversies have been reported. The company's developer culture is public-facing via its Matrix open source contributions. The open-source community contributors to Matrix (outside Element) are not employee relationships.", "lastVerifiedAt": "2026-05-03" }, { "id": "33b53493-97d1-4952-b690-04edd6fd24a8", "flagGroupId": "8df644ce-0979-424b-9643-a1652b49694e", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "831de1b0-4b82-4854-909b-c085ab265084", "valence": "strength", "tier": 2, "headline": "Substack allows writers to export their full subscriber email list at any time, including email addresses, subscription status, and payment history — giving writers genuine ownership of their audience.", "explanation": "One of Substack's distinguishing features is that writers can export their subscriber list (including email addresses) at any time via a CSV download. This gives writers genuine portability — they can migrate to another email newsletter platform (Ghost, Buttondown, Mailchimp, Beehiiv) and take their subscriber list with them. This is a meaningful data portability strength compared to platforms that do not allow subscriber export. Subscriber email addresses remain the property of the relationship between writer and subscriber, not Substack's.", "lastVerifiedAt": "2026-05-03" }, { "id": "f5c28403-bea3-41d7-b559-f581f9f3d23a", "flagGroupId": "a146dc83-cfd7-422e-a2ce-73d0684ea295", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "831de1b0-4b82-4854-909b-c085ab265084", "valence": "concern", "tier": 2, "headline": "Substack uses email open tracking pixels by default, allowing writers (and Substack) to track which readers open each newsletter and their reading behaviour; no opt-out is provided for readers.", "explanation": "Substack newsletters include tracking pixels that record when an email is opened and link click tracking that records which links readers click. This is standard email marketing practice but is relevant for readers who value privacy. Readers cannot opt out of open tracking within Substack. The data is used by Substack to provide writers with engagement analytics and is also accessible to Substack's own data systems. Privacy-focused email clients (Apple Mail's Mail Privacy Protection, Proton Mail, Tutanota) block tracking pixels, but most readers are unaware of this tracking.", "lastVerifiedAt": "2026-05-03" }, { "id": "7c0d9e3b-8e4d-4050-b9a2-c9dd41495255", "flagGroupId": "db639658-618b-4583-a1f4-9ef87229a01b", "version": 1, "attachmentLevel": "vendor", "vendorId": "78c37a8e-4d3f-44c3-bf98-dd84b308d1e8", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Substack is a US company; all content, subscriber data, and payment records are hosted in the US, subject to US law and CLOUD Act; EU writers using Substack must address GDPR compliance independently.", "explanation": "Substack hosts all content on US infrastructure. For EU writers who collect personal data from EU subscribers (email addresses, payment details), Substack acts as a data processor. Substack offers a Data Processing Agreement (DPA) under GDPR. However, because Substack is a US company, the CLOUD Act means US law enforcement can compel access to subscriber data. For journalists protecting source confidentiality, or for publications that attract government attention, this US jurisdiction is a relevant consideration.", "lastVerifiedAt": "2026-05-03" }, { "id": "4905013d-c681-4624-b018-14a2157919c5", "flagGroupId": "d0dd525a-0275-4f13-bc4d-14c1112fad89", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "831de1b0-4b82-4854-909b-c085ab265084", "valence": "strength", "tier": 2, "headline": "Substack allows writers to export their full content archive (all posts as HTML/PDF) and subscriber list (CSV) at any time, providing good portability for migrating to self-hosted alternatives.", "explanation": "Beyond subscriber list export, Substack allows writers to export their full post archive as HTML files. This content can be migrated to Ghost, WordPress, or other publishing platforms. Substack's export completeness (content + subscribers) is better than most SaaS content platforms and comparable to what a platform should minimally provide. The migration process to Ghost (a common destination) is supported by Ghost's importer, which can import Substack content and subscriber lists.", "lastVerifiedAt": "2026-05-03" }, { "id": "14d77119-ec09-4e61-8708-db5534f664fe", "flagGroupId": "d38c5ee4-7313-4662-8855-c3ed356f67d9", "version": 1, "attachmentLevel": "vendor", "vendorId": "78c37a8e-4d3f-44c3-bf98-dd84b308d1e8", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "In late 2023 Substack faced a major controversy when it declined to remove Nazi and white-nationalist publications generating subscription revenue for the platform; dozens of prominent writers departed in protest.", "explanation": "In November-December 2023, The Atlantic and other outlets reported that Substack was hosting neo-Nazi and white-nationalist newsletters that were earning subscription revenue. Substack's co-founders published a response stating they would not remove legal speech even if it expressed views they found repugnant, arguing for a \"writer-led\" platform. This position was criticised by writers and readers as prioritising revenue over harm. Dozens of prominent writers (including lawyers, journalists, and academic figures) announced they were leaving Substack in protest. The controversy revealed the tension between Substack's \"free speech\" platform positioning and its responsibility for content its payment system supports. Substack subsequently updated its moderation policies and removed some of the publications at issue.", "lastVerifiedAt": "2026-05-03" }, { "id": "f9ce16ad-30db-49bf-921d-a5b4c908e98f", "flagGroupId": "d4ac468a-a236-4ef6-836a-d9eeea4db551", "version": 1, "attachmentLevel": "vendor", "vendorId": "78c37a8e-4d3f-44c3-bf98-dd84b308d1e8", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Substack has not published sustainability or carbon footprint data; its infrastructure uses AWS, which has renewable energy commitments.", "explanation": "Substack has not published an environmental impact or sustainability report. Its platform runs on AWS infrastructure. AWS has committed to 100% renewable energy by 2025 and net-zero by 2040. Substack's environmental footprint is primarily its server and email infrastructure costs. Email delivery at scale has an energy cost, but email is significantly less energy-intensive per user than video streaming.", "lastVerifiedAt": "2026-05-03" }, { "id": "3ac45944-3e30-4d7d-a88b-34b627175283", "flagGroupId": "33624dab-6504-41b4-a5ab-f92fee8f1c82", "version": 1, "attachmentLevel": "vendor", "vendorId": "78c37a8e-4d3f-44c3-bf98-dd84b308d1e8", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Substack employs approximately 100 people and does not publish diversity or workforce transparency data; as a venture-backed private company its labour reporting obligations are minimal.", "explanation": "Substack is a small private company with approximately 100 employees. It does not publish workforce demographics, pay equity data, or supply chain information. No significant labour controversies have been publicly reported. The company's main \"labour\" dynamic is its relationship with the writers and creators on the platform — Substack takes 10% of their subscription revenue.", "lastVerifiedAt": "2026-05-03" }, { "id": "62e1502b-5b0e-482e-9816-7c658cdad8fa", "flagGroupId": "be7cf7b6-44be-402b-b044-3d750af9d118", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "831de1b0-4b82-4854-909b-c085ab265084", "valence": "context", "tier": 3, "headline": "Substack's newsletter reading experience is accessible (clean HTML email, web reader with standard fonts) but the writing editor has limited accessibility and no WCAG conformance statement has been published.", "explanation": "Substack's published newsletters are delivered as clean HTML emails and are readable via screen readers at a basic level. The web reader interface (substack.com/p/...) uses semantic HTML and is broadly navigable by keyboard. However, Substack's writing editor (similar to a rich text editor) has not been audited for WCAG compliance and has known screen reader compatibility limitations. No WCAG conformance statement or VPAT has been published by Substack.", "lastVerifiedAt": "2026-05-03" }, { "id": "6bef610d-fb50-40d2-b463-89c4598aeb46", "flagGroupId": "6d82ccbd-9c28-4e73-9a23-77259509723b", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b311c3ac-7396-4a6d-a0e4-685b92faae5d", "valence": "context", "tier": 3, "headline": "Element Web has undergone significant accessibility improvements since 2022, with ARIA labels and keyboard navigation; mobile clients have basic screen reader support but no published WCAG audit.", "explanation": "Element Web (the browser client) received systematic accessibility improvements through 2022-2023, including improved ARIA role assignments, keyboard navigation, and focus management. These changes improved screen reader compatibility with NVDA, JAWS, and VoiceOver. The Element iOS and Android apps support platform accessibility features at a basic level. Element has not published a formal WCAG conformance statement. The complexity of encrypted group communication (key verification flows) can present cognitive accessibility challenges.", "lastVerifiedAt": "2026-05-03" }, { "id": "1d6a9e26-4313-4f7b-a4a4-85c0e1f89295", "flagGroupId": "0f3b66c3-e87e-4880-8417-81762e4cedb4", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "800c082c-af5a-4407-af43-a8177962d4b3", "valence": "concern", "tier": 2, "headline": "Wix's privacy policy permits sharing of user data with third-party service providers and business partners; website owners must separately manage GDPR compliance for visitor data collected through Wix forms and analytics.", "explanation": "Wix's privacy policy discloses sharing of platform user data with service providers for analytics, advertising, and business operations. Wix serves targeted advertising to free-tier users browsing websites built on Wix (not to website visitors generally, but the Wix platform can show ads on free-tier sites). Website owners using Wix are responsible for their own visitors' GDPR compliance — they must configure cookie consent, provide a privacy policy, and ensure any contact forms or analytics comply with applicable law. Wix provides GDPR compliance tools (cookie banner, privacy policy template) but these are not automatically configured.", "lastVerifiedAt": "2026-05-03" }, { "id": "e73bfb2d-e94d-49ce-a534-a4511ad0994c", "flagGroupId": "7bdb6934-51a5-4de8-9da6-11b81a516880", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "800c082c-af5a-4407-af43-a8177962d4b3", "valence": "concern", "tier": 2, "headline": "Wix displays Wix-branded promotional content and advertising on free-tier websites; this embeds Wix branding and may be used for Wix's own customer acquisition.", "explanation": "Wix's free tier places a Wix-branded banner on published websites and may display Wix's own promotional content. While this is a common freemium model, organisations or individuals using Wix Free are effectively providing Wix with marketing space on their own website. The free tier is not suitable for professional or organisational use cases. This is less of a privacy concern and more of a commercial model concern, but it represents a condition of free use worth documenting.", "lastVerifiedAt": "2026-05-03" }, { "id": "eb0964f0-f51a-4e82-b6d1-c2eae0010d5a", "flagGroupId": "1cb29eb4-262d-4a53-987e-d69ce9703aa8", "version": 1, "attachmentLevel": "vendor", "vendorId": "662fbfa5-a648-4e10-a7b1-a4e754a5ce85", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Wix is headquartered in Israel and listed in the US; website and visitor data may be processed in Israel or the US, subject to Israeli privacy law and US CLOUD Act; EU adequacy for Israel was in place but the updated adequacy decision was being reviewed as of 2024.", "explanation": "Wix is primarily an Israeli company (incorporated under Israeli law, HQ in Tel Aviv). Israel has held a European Commission adequacy decision for data transfers from the EU under GDPR since 2011. This decision was under review as the Commission updated its adequacy assessments for third countries. Additionally, Wix's US listing and US subsidiary operations mean Wix is also subject to US law. For EU organisations, the combination of Israeli and US jurisdiction creates a different risk profile than a purely EU-based hosting provider. Wix offers a Data Processing Agreement (DPA) for GDPR compliance.", "lastVerifiedAt": "2026-05-03" }, { "id": "566d08b3-fbd1-489c-9fb9-19adff2b002b", "flagGroupId": "621acfac-5840-4b51-920b-226c3bacf21d", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "800c082c-af5a-4407-af43-a8177962d4b3", "valence": "concern", "tier": 1, "headline": "Wix does not provide a meaningful content export feature; website designs and structures cannot be exported, and blog content can only be exported as a basic RSS feed.", "explanation": "Wix's content portability is lower than even Squarespace's. Wix does not offer a WordPress-compatible XML export. Blog content can be exported as an RSS feed. Pages built with Wix's drag-and-drop editor have no export format. E-commerce data (products, orders) can be exported as CSV with some limitations. Wix websites are built using Wix's proprietary rendering engine and template system; this content cannot be migrated to any other platform without manually recreating the website. The Wix App Market apps and their data are typically not exportable. This is one of the highest-switching-cost website builder platforms.", "lastVerifiedAt": "2026-05-03" }, { "id": "a0aaf523-954a-464f-9ee6-ecbbf9b2c63b", "flagGroupId": "f7a8ee7a-7db3-4891-86ba-ae946b315e60", "version": 1, "attachmentLevel": "vendor", "vendorId": "662fbfa5-a648-4e10-a7b1-a4e754a5ce85", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Wix is publicly traded (NASDAQ) with standard corporate governance; its Israeli incorporation and operations create different governance and legal accountability than a US or EU company.", "explanation": "Wix is listed on NASDAQ and subject to SEC reporting requirements, providing financial transparency. However, the company is incorporated in Israel and its primary R&D operations are in Tel Aviv. Israel's corporate governance standards are high, but Israeli companies listed in the US operate under a hybrid regime. Israeli courts and Israeli data protection law (Privacy Protection Act 1981, updated 2023) govern the company's operations in Israel. For EU customers, the implications of Israeli jurisdiction differ from EU or US-incorporated providers.", "lastVerifiedAt": "2026-05-03" }, { "id": "18b75ca5-a007-401e-af22-a4db9c93bb12", "flagGroupId": "6133c49f-ac2a-42e9-ae54-a68cb5711afa", "version": 1, "attachmentLevel": "vendor", "vendorId": "662fbfa5-a648-4e10-a7b1-a4e754a5ce85", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Wix has not published a detailed sustainability or carbon footprint report; its infrastructure uses major cloud providers (Google Cloud Platform, AWS) which have renewable energy commitments.", "explanation": "Wix's infrastructure runs on Google Cloud Platform and AWS. Wix has not published its own sustainability report or carbon emissions data. The environmental footprint of Wix-hosted websites depends on Google Cloud and AWS's energy mix in the relevant regions. Both providers have renewable energy commitments. Wix has made some public statements about sustainability but without audited data or specific targets.", "lastVerifiedAt": "2026-05-03" }, { "id": "13748bc4-659f-4d83-9de8-bdeda240eb3f", "flagGroupId": "d55d9465-1cb6-4b58-a90e-2fd05aff0eca", "version": 1, "attachmentLevel": "vendor", "vendorId": "662fbfa5-a648-4e10-a7b1-a4e754a5ce85", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Wix employs approximately 5,000 people, mostly in Israel; the company conducted layoffs in 2022 (~900 employees) and is subject to Israeli labour law with limited international reporting transparency.", "explanation": "Wix employs approximately 5,000 people, with the majority located in Israel (Tel Aviv R&D hub). In June 2022 Wix laid off approximately 900 employees (~17% of its workforce) in a round affecting both Israeli and US operations. Wix files with the SEC and publishes some diversity data in its 20-F annual report. Israeli labour law governs the majority of its workforce. No formal supply chain or human rights report has been published by Wix.", "lastVerifiedAt": "2026-05-03" }, { "id": "9dd241dd-2345-4be0-aef0-ecf339b1575b", "flagGroupId": "8f74be45-3bd3-40c7-81ec-5b1d502b77c4", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "800c082c-af5a-4407-af43-a8177962d4b3", "valence": "strength", "tier": 3, "headline": "Wix provides a built-in Accessibility Wizard tool that audits website accessibility and suggests fixes; Wix has published a VPAT for its editor and claims WCAG 2.1 AA conformance for the website builder platform.", "explanation": "Wix offers an Accessibility Wizard in its website editor that scans for common accessibility issues (missing alt text, poor contrast, improper heading structure) and provides suggestions for improvement. Wix has published a VPAT (Voluntary Product Accessibility Template) for the Wix editor itself. The Wix editor is tested with screen readers (NVDA, JAWS, VoiceOver). This is more proactive accessibility tooling than most competitor website builders provide. Note that Wix's tools assist website owners in building accessible sites, but cannot guarantee WCAG compliance for all website content.", "lastVerifiedAt": "2026-05-03" }, { "id": "f69ebe40-ffb9-4c2e-a0d4-dce7462677ea", "flagGroupId": "5344d55f-cfc0-4260-9cad-0f2513e77f80", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "f1726a97-7cfa-4e41-b529-c4762118d11a", "valence": "strength", "tier": 1, "headline": "Self-hosted WordPress processes all data on the operator's own server; no data is shared with WordPress.org or Automattic by default, giving operators complete control over visitor and user data.", "explanation": "A self-hosted WordPress installation runs entirely on the website owner's web hosting. No page views, user registrations, form submissions, or content is sent to WordPress.org or Automattic. The only exception is WordPress's automatic update check, which sends the WordPress version to WordPress.org's update server. Website owners choose their own hosting provider, determining the jurisdiction and data processing environment. This gives maximum data sovereignty. GDPR compliance is entirely the operator's responsibility; WordPress provides tools (data export, user deletion, privacy policy template) to assist.", "lastVerifiedAt": "2026-05-03" }, { "id": "3b24396c-04a9-4341-8fbe-f85c31ccb1f7", "flagGroupId": "3676b631-fedc-419f-9808-65fd25d06081", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "742b99cf-06b3-44d3-b84d-8923703fe1ff", "valence": "caution", "tier": 2, "headline": "Brave Sync (optional cross-device sync) data is stored on Brave's servers; Brave is a US company subject to the CLOUD Act. Brave does not publish a transparency report.", "explanation": "Brave offers optional cross-device synchronisation via Brave Sync. Brave states that Sync data is end-to-end encrypted and Brave cannot read its content. However Brave Software, Inc. is a US private company subject to the CLOUD Act and FISA. Unlike Mozilla, Brave does not publish a government data requests transparency report, making it impossible to assess the frequency of law enforcement demands. Organisations with high-sensitivity requirements should not enable Brave Sync, or should self-host a Brave Sync server (the sync server is open source).", "lastVerifiedAt": "2026-05-02" }, { "id": "ddf119da-0a2f-4b98-bfbd-75a7a2256167", "flagGroupId": "9173b1b4-a25d-40c0-b396-fab1e664acf8", "version": 1, "attachmentLevel": "vendor", "vendorId": "0fea79ad-ac19-478d-8af7-b2e46cf11871", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "In November 2023 OpenAI's board fired CEO Sam Altman without notice; he was reinstated five days later after an employee revolt and Microsoft pressure, exposing deep governance dysfunction.", "explanation": "On November 17, 2023, OpenAI's board fired CEO Sam Altman, stating he had not been \"consistently candid\" with the board. Over the following five days, nearly all OpenAI employees threatened to resign, Microsoft indicated it would hire Altman and the departing staff, and the board reversed course, reinstating Altman on November 21 with a restructured board. Three of the four board members who voted to fire Altman were replaced. The episode revealed that the nonprofit oversight mechanism — designed to ensure AI safety over commercial interests — was effectively dismantled by commercial and investor pressure within 120 hours. Helen Toner, one of the board members involved, subsequently wrote publicly that the board had received concerning information about OpenAI's safety culture. The incident raises serious questions about whether OpenAI's governance can meaningfully constrain commercial decision-making.", "lastVerifiedAt": "2026-05-02" }, { "id": "4b25e186-d06a-4c3c-a91b-8ea3d1b7e634", "flagGroupId": "21bdf2c9-9d07-4a8c-9f74-776f0b3e35e0", "version": 1, "attachmentLevel": "vendor", "vendorId": "0fea79ad-ac19-478d-8af7-b2e46cf11871", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "OpenAI's proposed conversion from a nonprofit-controlled capped-profit structure to a Delaware Public Benefit Corporation has drawn criticism from co-founders and AI safety researchers as undermining its original mission.", "explanation": "In late 2024 OpenAI announced a proposed transition from its unusual capped-profit structure (controlled by a nonprofit) to a Delaware Public Benefit Corporation (PBC). Critics — including co-founder Elon Musk (who sued OpenAI), other former co-founders, and AI safety researchers — argued the conversion would effectively transfer control from the nonprofit mission to commercial shareholders. OpenAI's nonprofit would receive a significant equity stake, but would no longer hold the unique controlling position it had under the original structure. The proposed conversion was subject to review by the California and Delaware attorneys general. The tension between mission (safe AI for humanity) and commercial interests (OpenAI has Microsoft as a 49%-profit-share partner) is fundamental to evaluating ChatGPT as a service provider.", "lastVerifiedAt": "2026-05-02" }, { "id": "434d099a-afd1-43a3-9e91-8ba6af2a8be0", "flagGroupId": "35a78ca6-ebc8-4e33-90b6-d749d8a11381", "version": 1, "attachmentLevel": "vendor", "vendorId": "0fea79ad-ac19-478d-8af7-b2e46cf11871", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "A January 2023 Time Magazine investigation found OpenAI's Kenyan content labelling contractors were paid under $2 per hour to review graphic, violent, and sexually abusive content for RLHF training.", "explanation": "A January 2023 investigation by Time Magazine documented that OpenAI used Kenyan workers employed by Sama (a data labelling contractor) to review and label graphic content — including child sexual abuse material, graphic violence, and terrorism content — used to train ChatGPT's safety filters. Workers were paid between $1.32 and $2 per hour and reported lasting psychological harm. OpenAI ended the Sama contract early following the investigation. The incident highlights the human cost of AI model safety work and the use of low-wage labour in the Global South for tasks that are essential to the product but structurally invisible in the supply chain. OpenAI has not published a comprehensive supply chain labour standards policy.", "lastVerifiedAt": "2026-05-02" }, { "id": "6418964d-09a8-4bd5-a50d-ea7c71e0b2db", "flagGroupId": "d578f045-6dfd-4e88-8387-c7e6451a7b3e", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "742b99cf-06b3-44d3-b84d-8923703fe1ff", "valence": "strength", "tier": 1, "headline": "Brave blocks ads, trackers, fingerprinting scripts, and bounce tracking by default without requiring any extensions, providing the strongest out-of-the-box privacy protection of any mainstream browser.", "explanation": "Brave blocks ads and third-party trackers by default using Brave's own blocklist, which is updated daily and covers tracking pixels, social media buttons, and advertising networks. Brave also blocks browser fingerprinting scripts and canvas fingerprinting attempts, blocks bounce tracking redirects, and upgrades HTTP connections to HTTPS where possible. All of this is enabled by default — no extensions or configuration required. Independent tests by organisations including EFF's Cover Your Tracks consistently rate Brave as one of the best mainstream browsers for tracker blocking. The default-on nature of these protections is particularly valuable for non-technical users who would not configure privacy extensions themselves.", "lastVerifiedAt": "2026-05-02" }, { "id": "c03f00c1-5aa6-423f-beaa-419b1bfa9a84", "flagGroupId": "ee7210a9-addf-4faf-af98-e9fdedc72476", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "742b99cf-06b3-44d3-b84d-8923703fe1ff", "valence": "concern", "tier": 2, "headline": "In June 2020 it was discovered that Brave was silently inserting affiliate referral codes into cryptocurrency exchange URLs typed by users; Brave admitted the practice and removed it.", "explanation": "In June 2020 a Twitter user discovered that when they typed cryptocurrency exchange URLs (Binance, Coinbase, Ledger, and others) directly into the Brave address bar, Brave was automatically rewriting the URLs to include Brave's affiliate referral codes. This meant Brave would earn referral commissions on user transactions at these exchanges without the users' knowledge or consent. Brave CEO Brendan Eich acknowledged the practice and characterised it as a mistake in implementation, stating the intent was only to add referral codes when using Brave's own features (new-tab shortcuts), not when users typed URLs directly. Brave removed the behaviour. The incident is significant because it revealed that Brave's advertising revenue model created an incentive to modify URLs in ways that benefited Brave financially without user disclosure — the opposite of the privacy-first positioning the browser markets itself on.", "lastVerifiedAt": "2026-05-02" }, { "id": "af704a84-793e-4703-9b15-a546fd9acb55", "flagGroupId": "e0f01ef1-50f8-4f5a-b532-5f0a057d4968", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "742b99cf-06b3-44d3-b84d-8923703fe1ff", "valence": "strength", "tier": 2, "headline": "Brave's sync server is open source and can be self-hosted, allowing organisations to eliminate Brave's servers from their data chain entirely.", "explanation": "Brave's sync server component is open source and available on GitHub. Organisations can deploy their own sync server and point Brave installations at it, meaning no sync data is held by Brave Software, Inc. This self-hosting option, combined with Brave's default ad/tracker blocking, makes Brave a strong choice for organisations that want both strong default privacy and full data sovereignty for sync functionality.", "lastVerifiedAt": "2026-05-02" }, { "id": "f77d270a-81fb-44d2-a75d-fc4a2e29a1a9", "flagGroupId": "824becdc-bfef-4390-82fc-fc1ada2724af", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "742b99cf-06b3-44d3-b84d-8923703fe1ff", "valence": "strength", "tier": 1, "headline": "Brave's browser client is open source under the Mozilla Public License 2.0, allowing independent security review of privacy and ad-blocking implementations.", "explanation": "Brave's core browser (brave-browser) is published on GitHub under the Mozilla Public License 2.0 and builds on the open source Chromium project. The Brave Shields ad-blocking system, fingerprint protection, and Sync client are included in the open source codebase. Independent security researchers can audit these systems directly. The Brave Ads component has additional proprietary elements related to the BAT advertising network infrastructure, but the client-side privacy features are fully auditable.", "lastVerifiedAt": "2026-05-02" }, { "id": "1b3ca58e-72d6-4224-a632-bc4f296d3529", "flagGroupId": "2105643e-d6f2-4dc1-b852-3e0a7e8cb9bf", "version": 1, "attachmentLevel": "vendor", "vendorId": "805f8300-eaa0-46c5-88cc-a3f6b294fa83", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Brave's CEO Brendan Eich resigned from Mozilla in 2014 following public controversy over his 2008 donation to Proposition 8, which sought to ban same-sex marriage in California.", "explanation": "Brendan Eich co-founded Brave Software after resigning as Mozilla CEO in April 2014. His resignation followed public controversy when it became known that he had donated $1,000 in 2008 to support California's Proposition 8 campaign, which sought to constitutionally ban same-sex marriage. The disclosure prompted calls from employees and users for his resignation; Eich stepped down after eleven days as CEO. Eich has not publicly retracted the donation or the views associated with it. This flag is presented as factual context for the editor; organisations with specific diversity and inclusion values relevant to LGBTQ+ equality should consider this information when evaluating Brave as a recommended tool.", "lastVerifiedAt": "2026-05-02" }, { "id": "e8f454ab-8623-4bc3-b7f3-ea9f6b1cbb8d", "flagGroupId": "cfb2fc6a-b5c8-40a8-861f-89d00677f616", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "742b99cf-06b3-44d3-b84d-8923703fe1ff", "valence": "caution", "tier": 2, "headline": "Brave's BAT (Basic Attention Token) advertising model monetises user attention via cryptocurrency; the 2020 affiliate URL rewriting incident shows how this model can create conflicts with user interests.", "explanation": "Brave's business model centres on the Basic Attention Token (BAT), an ERC-20 cryptocurrency. Users who opt into Brave Rewards see private ads and receive BAT tokens in return; advertisers pay in BAT; Brave earns a share of ad revenue. Brave Search has a similar premium subscription model. The cryptocurrency dependency introduces several concerns: BAT's value is volatile and tied to speculative crypto markets; the advertising revenue model creates incentives that may conflict with user interests (as the 2020 affiliate URL incident demonstrated); and Brave's long-term sustainability depends on the continued viability of the BAT token ecosystem. The opt-in nature of Brave Rewards means this does not affect users who do not participate, but it is structurally significant for evaluating Brave as a vendor.", "lastVerifiedAt": "2026-05-02" }, { "id": "f55319b5-571c-4aa3-9f14-d58b1343bbc0", "flagGroupId": "1961f9d9-d10c-4a36-9648-6060b97b0e4e", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "742b99cf-06b3-44d3-b84d-8923703fe1ff", "valence": "context", "tier": 3, "headline": "The BAT token uses the Ethereum network (proof-of-stake since 2022); Brave's own infrastructure footprint is small; no sustainability report is published.", "explanation": "Ethereum's \"Merge\" in September 2022 switched the network from energy-intensive proof-of-work to proof-of-stake, reducing Ethereum's energy consumption by approximately 99.95%. BAT transactions on Ethereum post-Merge have a substantially lower energy footprint than before. Brave's own server infrastructure (for sync, telemetry, Brave Search) is modest compared to cloud services. Brave does not publish a sustainability or carbon report. The environmental flag for Brave is relatively minor compared to cloud-heavy services.", "lastVerifiedAt": "2026-05-02" }, { "id": "58bec71b-58e2-41c3-852d-ed59cbe57d47", "flagGroupId": "d0bdbf41-afd1-4753-86a5-5d5c222ac456", "version": 1, "attachmentLevel": "vendor", "vendorId": "805f8300-eaa0-46c5-88cc-a3f6b294fa83", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Brave Software is a small private company; it does not publish financial accounts, headcount data, or labour practice reports, limiting independent assessment.", "explanation": "As a private company, Brave Software, Inc. is not required to publish financial accounts or detailed operational reports. No information about worker pay ratios, benefits, diversity data, or labour practices is publicly available. The company has not been the subject of documented labour disputes or regulatory actions. The absence of published information means this dimension cannot be positively assessed; the flag records the opacity rather than a specific concern.", "lastVerifiedAt": "2026-05-02" }, { "id": "dc3b13c4-02df-42b3-be70-acb2cf03694d", "flagGroupId": "22dc959f-5dc2-4d47-9d81-4bfcd9a133ed", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "742b99cf-06b3-44d3-b84d-8923703fe1ff", "valence": "context", "tier": 3, "headline": "Brave inherits Chromium's accessibility APIs and screen reader support but does not publish independent accessibility documentation or a VPAT.", "explanation": "Because Brave is built on Chromium, it inherits the Chromium accessibility infrastructure including support for screen readers (JAWS, NVDA, VoiceOver) and keyboard navigation. In practice Brave generally works well with screen readers on Windows and macOS. However Brave does not publish an accessibility conformance report (VPAT) or independent WCAG audit, and does not maintain a dedicated accessibility documentation page. For organisations with specific accessibility requirements, the absence of a published VPAT means Brave cannot be formally evaluated against accessibility standards.", "lastVerifiedAt": "2026-05-02" }, { "id": "340655da-65a4-43dd-8103-5e32f20996d1", "flagGroupId": "1541ea25-7999-4560-b729-332f82e752f0", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "dee03ced-10e9-4462-b306-803943094a9f", "valence": "concern", "tier": 1, "headline": "Google Chrome is operated by an advertising company whose business model depends on targeted advertising; when users are signed into Chrome, browsing history is synced to Google's servers and used to inform ad targeting.", "explanation": "When a user is signed into Chrome with a Google account, browsing history, bookmarks, passwords, open tabs, and extension data are synchronised to Google's servers. This data feeds Google's advertising profile for the user, which informs targeting across Google Search, Gmail, YouTube, and the Google Display Network. Chrome also sends browsing data to Google for Safe Browsing URL checks (in standard mode), search suggestion generation, and spelling correction. Even without sign-in, Chrome sends telemetry data (crash reports, usage statistics) to Google by default. The fundamental conflict of interest — a browser operated by an advertising company that profits from user data — is an inherent structural concern not addressable by individual privacy settings.", "lastVerifiedAt": "2026-05-02" }, { "id": "991e470b-2a1f-444d-b69f-6fc3c78afe99", "flagGroupId": "6c3586db-d96b-450f-8060-5bd68c5f43cd", "version": 1, "attachmentLevel": "vendor", "vendorId": "b98cc30c-e967-443d-9ade-e9c5079aa10d", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Mozilla has committed to climate action goals and runs minimal server infrastructure for Firefox; the primary environmental impact is the user's own device energy use.", "explanation": "Firefox is primarily a client-side application. Mozilla's server infrastructure (for Sync, crash reporting, and telemetry) is minimal compared to cloud platforms. Mozilla has published climate action commitments and participates in the Principles for Digital Development. The Green Web Foundation lists some Mozilla infrastructure as green-hosted. For most organisations, the environmental footprint of using Firefox is dominated by device energy use rather than Mozilla's servers.", "lastVerifiedAt": "2026-05-02" }, { "id": "0521821c-f16e-46ab-b1ef-83fea00a0140", "flagGroupId": "460da46b-143f-4c55-9147-9b4a5b230578", "version": 1, "attachmentLevel": "vendor", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 1, "headline": "In August 2024 a US federal judge ruled that Google holds an illegal monopoly in the general search market, a finding directly relevant to Chrome's role as a search distribution mechanism.", "explanation": "In August 2024 Judge Amit Mehta of the US District Court for the District of Columbia ruled that Google illegally maintained a monopoly in the US general search market in violation of the Sherman Antitrust Act. The DOJ case found that Google paid approximately $20 billion per year (in 2022) to device manufacturers and browsers — including Apple — to be set as the default search engine, foreclosing competition. Chrome is integral to this strategy: by defaulting to Google Search and being the world's most used browser, Chrome is a key distribution mechanism for Google's search monopoly. The remedy phase was ongoing at the time of this research; potential remedies include forcing Google to divest Chrome.", "lastVerifiedAt": "2026-05-02" }, { "id": "fe1cf871-26c0-4d60-8512-95aaece1e7dd", "flagGroupId": "115ca2a2-e841-4080-ba98-edc112bb9ed8", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "dee03ced-10e9-4462-b306-803943094a9f", "valence": "caution", "tier": 2, "headline": "Google's Privacy Sandbox initiative — which replaces third-party cookies with in-browser ad interest tracking — has been scrutinised by the UK ICO and EU authorities and remains controversial.", "explanation": "Google's Privacy Sandbox initiative proposes to eliminate third-party cookies (a form of cross-site tracking) and replace them with new browser-based APIs (including Topics API) that enable ad targeting based on interest categories computed within the browser. While framed as a privacy improvement, the Topics API still enables ad targeting and keeps Google in control of the ad attribution stack. The UK Competition and Markets Authority (CMA) and the ICO scrutinised Privacy Sandbox following concerns that it could entrench Google's advertising dominance. In July 2024 Google reversed its plan to deprecate third-party cookies in Chrome, citing \"ongoing challenges in reconciling divergent feedback from the industry, regulators, and developers.\" The episode illustrates Chrome's complex role as both a consumer tool and an advertising infrastructure component.", "lastVerifiedAt": "2026-05-02" }, { "id": "fabacd81-c7b6-4135-9995-665847546698", "flagGroupId": "c83067a3-59bc-4334-88c4-3da5db46abe6", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "dee03ced-10e9-4462-b306-803943094a9f", "valence": "concern", "tier": 2, "headline": "Chrome sync data held by Google (a US company) is subject to US CLOUD Act and FISA Section 702; Google publishes a biannual transparency report on government data requests.", "explanation": "Google LLC is a US company subject to the CLOUD Act and FISA Section 702. Chrome sync data — browsing history, bookmarks, passwords stored in Google Password Manager — can be compelled by US law enforcement or intelligence agencies. Google publishes a detailed Transparency Report disclosing aggregate government data requests, which is a transparency positive. However the legal exposure is inherent and cannot be mitigated for users who sync Chrome data to Google accounts.", "lastVerifiedAt": "2026-05-02" }, { "id": "aa696227-f7fb-45e3-812c-00bb3ac00b4e", "flagGroupId": "21e8725e-9907-4894-92a5-a80696911a17", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "dee03ced-10e9-4462-b306-803943094a9f", "valence": "caution", "tier": 2, "headline": "Chrome is built on the open source Chromium project but adds proprietary Google-specific features (Safe Browsing, crash reporting, sync) that are closed source; Chrome itself is not open source.", "explanation": "The Chromium project — the rendering engine and browser core underlying Chrome — is open source under a BSD licence and maintained largely by Google engineers. However Chrome (the product Google ships) adds proprietary components on top: the auto-update mechanism, crash reporting system, Safe Browsing client-side logic, and Google account sync infrastructure are not open source. This means independent security researchers can audit Chromium but not the full Chrome binary. Organisations wanting a fully open source Chromium-based browser should use Chromium directly or a derivative such as ungoogled-chromium.", "lastVerifiedAt": "2026-05-02" }, { "id": "da5c7526-6b4b-4066-9eaf-3c2bf4e395f1", "flagGroupId": "99831947-4f92-4d57-8add-a2f6b53fb786", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "dee03ced-10e9-4462-b306-803943094a9f", "valence": "caution", "tier": 2, "headline": "Chrome's Manifest V3 extension platform transition has restricted the capabilities available to extension developers, reducing the effectiveness of widely used privacy-protection and ad-blocking tools.", "explanation": "Google has been transitioning Chrome's extension platform from Manifest V2 to Manifest V3, with Manifest V2 support ending in mid-2024. Manifest V3 replaces the blocking webRequest API (used by uBlock Origin and similar privacy/security extensions) with the more limited declarativeNetRequest API, which processes fewer request types and limits the number of blocking rules. Independent researchers and extension developers documented that Manifest V3 materially reduces the effectiveness of ad blockers and privacy tools. The transition benefits Google, whose advertising business is adversely affected by ad-blocking. Firefox has committed to maintaining Manifest V2 support longer, and Manifest V3 has been criticised as a conflict of interest.", "lastVerifiedAt": "2026-05-02" }, { "id": "84a774d2-6e33-4e22-a4b2-576fe368a1ef", "flagGroupId": "1a38d5fb-08be-4e6f-972e-956d6d956dda", "version": 1, "attachmentLevel": "vendor", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "serviceId": null, "valence": "caution", "tier": 2, "headline": "Alphabet's dual-class share structure gives co-founders Larry Page and Sergey Brin majority voting control, concentrating governance authority in two individuals with minimal external accountability.", "explanation": "Alphabet's Class B shares (10 votes per share, held by founders) give Larry Page and Sergey Brin approximately 51% of total voting power despite owning significantly less of the economic equity. This means institutional shareholders, employee shareholders, and public investors have limited ability to force governance changes at Alphabet regardless of their economic ownership. No external shareholder or board member can override founder decisions without their consent. This structure is relevant when evaluating Chrome's long-term trajectory: product decisions (including Manifest V3 and Privacy Sandbox) ultimately trace back to a founder-controlled governance structure.", "lastVerifiedAt": "2026-05-02" }, { "id": "a082cefc-3bd2-47b2-a4c2-407279a9ea6d", "flagGroupId": "5bda7795-0e98-4696-bdb3-777938a28890", "version": 1, "attachmentLevel": "vendor", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Google matched 100% of global electricity consumption with renewable energy purchases in 2023 and aims to operate on 24/7 carbon-free energy by 2030.", "explanation": "Google has matched 100% of its global electricity consumption with renewable energy purchases (via Power Purchase Agreements and RECs) since 2017. Its more ambitious goal is to operate on 24/7 carbon-free energy across all data centre regions by 2030 — meaning no grid-average emissions averaging, but actual renewable energy consumed at every hour. Google publishes an annual Environmental Report with detailed carbon and energy data. Chrome itself is a client-side application; the main energy concern is Google's data centre infrastructure supporting sync and services.", "lastVerifiedAt": "2026-05-02" }, { "id": "40205e12-6e32-4778-92f6-1502ba44a2c7", "flagGroupId": "f713951b-6679-40e6-b37a-de0558a4392f", "version": 1, "attachmentLevel": "vendor", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 3, "headline": "Google cut approximately 12,000 employees (~6% of workforce) in January 2023 and has been criticised for opaque treatment of a large contract and temporary workforce that outnumbers direct employees.", "explanation": "In January 2023 Google announced a global workforce reduction of approximately 12,000 employees (about 6% of its direct workforce). Additionally, Google employs a large \"extended workforce\" of contractors, temps, and vendors estimated at over 100,000 people (at times outnumbering direct employees). These contract workers typically receive fewer benefits and protections than direct employees. In 2019 Google dismissed 48 contract workers involved in a labour organising drive, leading to NLRB complaints. These labour practices are not specific to Chrome but are relevant when evaluating Google as a vendor.", "lastVerifiedAt": "2026-05-02" }, { "id": "a2dac34c-9a48-43bc-89ee-fb703e3d53e0", "flagGroupId": "7a2d6cbc-7c26-4cd5-b460-6ba702202395", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "dee03ced-10e9-4462-b306-803943094a9f", "valence": "strength", "tier": 2, "headline": "Chrome provides strong screen reader support across platforms, built-in live caption generation for audio/video in the browser, and accessibility APIs well-supported by assistive technology vendors.", "explanation": "Chrome implements comprehensive accessibility APIs on all supported platforms and works well with JAWS, NVDA, VoiceOver, and TalkBack. Chrome includes a built-in Live Caption feature (available since Chrome 89) that generates real-time captions for any audio or video playing in the browser, including video calls and media, without any server connection (on-device processing). Chrome also supports forced colours mode, high contrast, zoom, and keyboard navigation throughout the browser UI.", "lastVerifiedAt": "2026-05-02" }, { "id": "95ffd328-33db-4b0f-96da-9bdcf43dd5ca", "flagGroupId": "d9c45514-f188-4735-b85a-ecda192f793f", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "8518f97c-9014-43f3-b553-dbdf131ce864", "valence": "strength", "tier": 1, "headline": "Firefox enables Enhanced Tracking Protection in Standard mode by default, blocking known third-party tracking cookies, social media trackers, cryptominers, and fingerprinters.", "explanation": "Firefox's Enhanced Tracking Protection (ETP) is enabled by default in Standard mode for all users. Standard mode blocks known tracking cookies (using the disconnect.me list), social media tracking pixels, cryptominer scripts, and fingerprinting scripts. Strict mode (which can be enabled manually) also blocks all third-party cookies and additional fingerprinting methods. This default-on protection represents a meaningful privacy baseline that Chrome does not provide by default. Firefox also offers Total Cookie Protection (enabled in Strict ETP mode) which partitions cookies per first-party site to prevent cross-site tracking.", "lastVerifiedAt": "2026-05-02" }, { "id": "4e4e7108-ed6f-472d-89ce-da65b159bb0b", "flagGroupId": "7d0671c4-cf68-4834-8e45-dbd4b93d2f7f", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "8518f97c-9014-43f3-b553-dbdf131ce864", "valence": "strength", "tier": 2, "headline": "Firefox does not send browsing history to Mozilla for advertising purposes; sync data (if used) is encrypted client-side before reaching Mozilla's servers.", "explanation": "Unlike Chrome, Mozilla Corporation is not an advertising company and does not monetise Firefox user browsing data for advertising. Firefox's optional Sync feature — which synchronises bookmarks, history, and passwords across devices — encrypts all synced data client-side using the user's Firefox Account password before it reaches Mozilla's servers, so Mozilla cannot read synced content. Firefox does send anonymised telemetry (crash reports, feature usage data) to Mozilla to improve the browser; this can be opted out. The structural absence of advertising motivation for data collection is a meaningful privacy advantage over Chrome.", "lastVerifiedAt": "2026-05-02" }, { "id": "4627d38e-1537-498c-973d-d46971373444", "flagGroupId": "1844670f-19ee-4efa-90e7-f353708c9e92", "version": 1, "attachmentLevel": "vendor", "vendorId": "b98cc30c-e967-443d-9ade-e9c5079aa10d", "suiteId": null, "serviceId": null, "valence": "caution", "tier": 2, "headline": "Mozilla derives approximately 80-90% of its revenue from a default search partnership with Google — the company whose browser Firefox most directly competes with — creating a structural financial dependency.", "explanation": "Mozilla Corporation's revenue is dominated by the Google default search partnership: when users use Firefox's default search (Google), Mozilla receives a revenue share. This has historically accounted for 80-90% of Mozilla Corporation's total revenue. The deal gives Google significant financial leverage over Mozilla: terminating or reducing the deal would severely damage Mozilla's ability to fund Firefox development. This creates a potential conflict of interest — Mozilla may be reluctant to take positions or implement features that damage its relationship with Google, despite Google being its primary commercial competitor in the browser market. Mozilla has been diversifying revenue (Mozilla VPN, subscriptions) but the Google dependency remains dominant.", "lastVerifiedAt": "2026-05-02" }, { "id": "44512388-afc8-42c6-901c-8a0581c2336a", "flagGroupId": "9fdc869a-4ef6-465d-a548-7c30faaf7ae6", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "8518f97c-9014-43f3-b553-dbdf131ce864", "valence": "caution", "tier": 2, "headline": "Firefox Sync data is held by Mozilla Corporation, a US company subject to CLOUD Act and FISA; however sync data is client-side encrypted and Mozilla cannot read its content.", "explanation": "If a user enables Firefox Sync, their encrypted data is stored on Mozilla's servers (a US company). While CLOUD Act and FISA apply to Mozilla, the client-side encryption means Mozilla cannot produce decrypted browsing history, bookmarks, or passwords to law enforcement even if compelled — unless the user's password is also obtained. This is a materially stronger position than services that hold plaintext user data. Organisations with elevated sensitivity can self-host the Firefox Account sync server (fxa-self-host), eliminating Mozilla entirely from the data chain.", "lastVerifiedAt": "2026-05-02" }, { "id": "cf10abdf-e3bc-41bc-a5b3-1e54f7056b3a", "flagGroupId": "e6feaad4-b3d9-4c2f-8bad-417958f3caa6", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "8518f97c-9014-43f3-b553-dbdf131ce864", "valence": "strength", "tier": 1, "headline": "Firefox is fully open source under the Mozilla Public License 2.0; the entire browser codebase — client, rendering engine, and sync infrastructure — is auditable and forkable.", "explanation": "Firefox is released under the Mozilla Public License 2.0 (MPL 2.0), an OSI-approved weak copyleft licence. The complete Firefox source code — including the Gecko rendering engine, SpiderMonkey JavaScript engine, and Firefox client — is published on Mozilla's Phabricator and GitHub repositories. MPL 2.0 allows commercial use, modification, and redistribution; modified files must be released under MPL 2.0 but the overall project can be combined with proprietary code. Independent security researchers can audit all privacy and encryption implementations directly. Firefox has a long history of independent security research and documented vulnerability disclosure processes.", "lastVerifiedAt": "2026-05-02" }, { "id": "92d354ff-7fe5-448c-a5f9-a9ed35dadfd4", "flagGroupId": "73b8cdbd-af20-4aa5-9b27-939573d1eeec", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "8518f97c-9014-43f3-b553-dbdf131ce864", "valence": "strength", "tier": 2, "headline": "Firefox is the primary browser maintaining Manifest V2 extension support alongside V3, preserving the capabilities of privacy and security extensions that Chrome has restricted.", "explanation": "Unlike Chrome, Firefox has committed to continuing to support Manifest V2 extensions beyond Chrome's deprecation deadline. This preserves the effectiveness of extensions such as uBlock Origin (the most widely used ad and tracker blocker), which rely on the blocking webRequest API removed from Chrome's Manifest V3. Firefox uses its own extension API (WebExtensions) and has implemented Manifest V3 while retaining the blocking webRequest API that Chrome removed. This makes Firefox the primary mainstream browser where powerful ad blocking and privacy extensions continue to function as designed.", "lastVerifiedAt": "2026-05-02" }, { "id": "8db6a0bb-f095-489e-9163-d76987b9ff9d", "flagGroupId": "6d5f5da4-5f49-4b2d-aa50-276f6e0720d6", "version": 1, "attachmentLevel": "vendor", "vendorId": "b98cc30c-e967-443d-9ade-e9c5079aa10d", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 2, "headline": "The Mozilla Foundation's nonprofit structure means Firefox cannot be acquired by a commercial entity; the foundation's mission is legally committed to protecting the open internet.", "explanation": "Mozilla Foundation is a US 501(c)(3) nonprofit corporation. Its assets are legally restricted to furthering its public benefit mission — \"ensuring the internet is a global public resource, open and accessible to all.\" A commercial acquisition of the Foundation itself is not legally permissible under US nonprofit law. Mozilla Corporation (the for-profit subsidiary) could theoretically be sold, but the Foundation's ownership and mission would constrain any such transaction. This structural protection is meaningful when compared to browsers operated by publicly traded companies subject to investor-driven decisions (Google Chrome, Microsoft Edge) or private companies (Brave Software).", "lastVerifiedAt": "2026-05-02" }, { "id": "d8468b99-05da-4961-8f68-6552ec2bf51b", "flagGroupId": "8ae22eae-9fef-442f-8ad8-77c51c0cde5e", "version": 1, "attachmentLevel": "vendor", "vendorId": "b98cc30c-e967-443d-9ade-e9c5079aa10d", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Mozilla cut approximately 25% of its global workforce in 2020 and a further 12% in early 2023; Firefox browser development capacity has been significantly reduced.", "explanation": "In August 2020 Mozilla laid off approximately 250 staff (around 25% of Mozilla Corporation's workforce) as a result of COVID-19 revenue disruption. In January 2023 Mozilla carried out a further restructuring cutting approximately 12% of employees (~50 people). These reductions have been documented to affect Firefox engineering teams, and they have raised concerns in the open source community about the long-term development capacity of Firefox. Mozilla's browser engine team (Gecko, SpiderMonkey) has been specifically affected. The browser market dynamics — with Chrome at ~65% market share — make Firefox's viability a genuine open internet concern, given that Firefox is currently the only major browser not based on either Chromium (Google) or WebKit (Apple).", "lastVerifiedAt": "2026-05-02" }, { "id": "8f3e2ecf-e70c-4546-aed7-d668240cae78", "flagGroupId": "0bab154a-949a-4658-888e-266af2723cc1", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "8518f97c-9014-43f3-b553-dbdf131ce864", "valence": "strength", "tier": 2, "headline": "Firefox supports JAWS, NVDA, and Windows Narrator via native accessibility APIs and implements WAI-ARIA throughout the browser UI; it remains a preferred browser for screen reader users on Windows.", "explanation": "Firefox has long been a preferred browser for NVDA and JAWS screen reader users on Windows, and continues to maintain strong compatibility with these tools. Firefox implements MSAA, IAccessible2, and UI Automation accessibility interfaces on Windows, and NSAccessibility on macOS. The browser UI is fully keyboard-navigable. Mozilla actively maintains accessibility fixes in Firefox and treats regressions as priority bugs. Firefox also supports reader mode for simplified article viewing, high contrast mode, and zoom. Compared to Chrome, Firefox has historically had stronger accessibility for complex document structures in ARIA, though Chrome has narrowed the gap.", "lastVerifiedAt": "2026-05-02" }, { "id": "fb69ab78-79a2-45ed-8a00-74ad6a650137", "flagGroupId": "38befdc7-1c57-449e-b76f-5b3bf4bf80ac", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "0565b547-574f-4c6c-aa4b-8a5f9cb5f84a", "valence": "strength", "tier": 2, "headline": "Ghost never serves advertisements to site visitors on any plan tier; the Ghost(Pro) and self-hosted platforms do not include ad tracking or third-party advertising scripts.", "explanation": "Unlike WordPress.com (which serves third-party ads on free and Personal plan sites), Ghost does not include advertising on any Ghost site on any plan. Ghost(Pro) and self-hosted Ghost sites are free of advertising tracking scripts in the platform itself. Ghost's business model (subscription revenue from Ghost(Pro)) does not depend on advertising, eliminating the structural conflict between publisher interests and visitor privacy that ad-funded platforms face. Publishers retain full control over what scripts are added to their own site; no advertising is injected by the platform.", "lastVerifiedAt": "2026-05-02" }, { "id": "c1bb1f08-b71b-4125-8c7d-6d7c4bc2b087", "flagGroupId": "4c2d7f87-771b-40e8-8d6c-b8d396510bbb", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "0565b547-574f-4c6c-aa4b-8a5f9cb5f84a", "valence": "context", "tier": 2, "headline": "Ghost Foundation is incorporated in Singapore, outside US and EU jurisdiction; however Ghost(Pro) infrastructure provider(s) and regions determine the practical government access exposure.", "explanation": "As a Singapore-incorporated nonprofit, Ghost Foundation is not subject to the US CLOUD Act or directly to EU GDPR as a data controller in the same way as US companies. Singapore has its own Personal Data Protection Act (PDPA) and is not on the EU's adequacy list, though Standard Contractual Clauses can be used for EU data transfers. The practical government access exposure for Ghost(Pro) depends on which cloud infrastructure provider Ghost uses and in which regions — this information is not publicly disclosed in detail. Organisations with elevated sensitivity can eliminate this uncertainty entirely by self-hosting Ghost on infrastructure in their chosen jurisdiction.", "lastVerifiedAt": "2026-05-02" }, { "id": "251b56c3-de83-4351-8d15-01663b6d37e5", "flagGroupId": "e2abc0ca-4e3d-4355-9f3a-3ad8b8311659", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "0565b547-574f-4c6c-aa4b-8a5f9cb5f84a", "valence": "strength", "tier": 1, "headline": "Ghost can be fully self-hosted under the MIT licence on any server infrastructure, giving complete data sovereignty with no obligations to Ghost Foundation.", "explanation": "The Ghost CMS platform is licensed under the MIT licence — the most permissive major open source licence — which allows any organisation to download, run, modify, and redistribute Ghost without any restrictions. A self-hosted Ghost installation puts all site content, subscriber data, and member information under the organisation's direct control on their chosen infrastructure. Ghost provides official Docker images and detailed deployment documentation. Self-hosting requires server administration capability but is well-supported by the community and multiple managed hosting providers (Digital Ocean, AWS, Hetzner) offer one-click Ghost deployment.", "lastVerifiedAt": "2026-05-02" }, { "id": "c4818d2e-33b8-4677-b0e4-853732a6861f", "flagGroupId": "9114c7dc-65d0-4e32-b219-6c3aa415fc5c", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "0565b547-574f-4c6c-aa4b-8a5f9cb5f84a", "valence": "strength", "tier": 1, "headline": "Ghost is released under the MIT licence — the most permissive OSI-approved licence — providing maximum freedom to use, modify, distribute, and self-host without restriction.", "explanation": "Ghost CMS is released under the MIT licence, which grants users the right to use, copy, modify, merge, publish, distribute, sublicense, and sell copies of the software without restriction. Unlike GPL (which requires derivative works to remain GPL), MIT allows Ghost to be used in any context including proprietary hosting. The entire Ghost codebase — including Ghost core, Ghost Admin, and the Portal membership client — is published on GitHub. Independent security researchers can audit all aspects of the platform. The permissive licence also means organisations can fork Ghost and maintain their own version if the Foundation's direction ever diverges from their needs.", "lastVerifiedAt": "2026-05-02" }, { "id": "fa67101c-6e01-4064-ae8c-3d274ecc7f58", "flagGroupId": "11c74b67-28be-47f7-b1f0-42b8f8aea4d5", "version": 1, "attachmentLevel": "vendor", "vendorId": "fba33f72-d285-4e1f-ae1c-81f544cb383b", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 2, "headline": "Ghost Foundation publishes an annual open report disclosing revenue, team size, platform usage statistics, and project direction — an unusually high level of financial transparency for a software vendor.", "explanation": "Ghost Foundation publishes an annual \"Open Report\" sharing key metrics including total Annual Recurring Revenue (ARR), number of Ghost(Pro) customers, number of active self-hosted installations, team headcount, and strategic priorities. This level of financial and operational transparency is rare among software vendors (open source or otherwise) and allows organisations evaluating Ghost to assess the Foundation's health and sustainability with real data rather than inference. The combination of nonprofit structure, MIT licence, and open reporting represents a strong governance and transparency model.", "lastVerifiedAt": "2026-05-02" }, { "id": "954b1a15-5e39-4500-9092-02af990c9c9d", "flagGroupId": "6eb21678-b3c6-4023-a9b3-d1d28d56a155", "version": 1, "attachmentLevel": "vendor", "vendorId": "fba33f72-d285-4e1f-ae1c-81f544cb383b", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 2, "headline": "Ghost Foundation's nonprofit structure means it cannot be acquired by a commercial entity; profits are legally restricted to funding Ghost's development.", "explanation": "Ghost Foundation is a company limited by guarantee — a nonprofit legal structure — incorporated in Singapore. This structure does not have shareholders; there are no equity stakes to sell. A conventional commercial acquisition is not legally possible. Any surplus revenue must be reinvested into the Foundation's mission of building sustainable publishing tools. This provides structural protection against the acquisition scenarios that have disrupted other CMS platforms (e.g., Tumblr acquired and declined under Yahoo/Verizon, then Automattic). Combined with the MIT licence (which protects users even in a hypothetical dissolution scenario), Ghost's governance model is among the strongest in the CMS category.", "lastVerifiedAt": "2026-05-02" }, { "id": "5e12ae71-d39f-4a70-be00-bcbbc2667e0f", "flagGroupId": "6a172c08-29b8-443b-8a8c-7540d46cd4e8", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "0565b547-574f-4c6c-aa4b-8a5f9cb5f84a", "valence": "strength", "tier": 2, "headline": "Self-hosted Ghost allows organisations to deploy on certified renewable-energy infrastructure; Ghost Foundation has not published energy data for Ghost(Pro).", "explanation": "Because Ghost CMS is fully self-hostable under MIT, organisations can deploy on Green Web Foundation-certified hosting (e.g., Hetzner in Germany, OVHcloud with renewable energy options) or on cloud regions powered by renewable energy PPAs. For the hosted Ghost(Pro) service, Ghost Foundation has not published energy source or carbon data. The combination of self-hosting freedom and the Foundation's small operational footprint (compared to large SaaS platforms) makes Ghost relatively low environmental risk, but specific data is not available for Ghost(Pro).", "lastVerifiedAt": "2026-05-02" }, { "id": "0a6285a0-50e5-4780-8fdb-d7748d48e73e", "flagGroupId": "c723363c-6fa8-4c8b-8612-80ccbb13f2eb", "version": 1, "attachmentLevel": "vendor", "vendorId": "fba33f72-d285-4e1f-ae1c-81f544cb383b", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 2, "headline": "Ghost Foundation is a small fully-remote team (~30 people) and has historically published open salary information and internal pay scales in its open reports.", "explanation": "Ghost Foundation's annual open reports have historically included team headcount and occasionally pay scale information, reflecting an unusually transparent approach to workforce data for a software company. The Foundation is small (approximately 25-35 people at last report) and fully distributed. No labour disputes, union organising activity, or regulatory actions have been documented. The nonprofit structure and mission-aligned funding model reduce the investor-pressure-driven workforce instability seen at commercial SaaS companies.", "lastVerifiedAt": "2026-05-02" }, { "id": "ccf29445-5b18-41c7-bca4-c77213a99da9", "flagGroupId": "330fb72c-e2b3-4f9b-8e2b-32f316a5ed9b", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "0565b547-574f-4c6c-aa4b-8a5f9cb5f84a", "valence": "context", "tier": 3, "headline": "Ghost's admin interface and default themes support keyboard navigation, but no formal WCAG conformance report or VPAT is published; accessibility parity with WordPress remains to be independently verified.", "explanation": "Ghost's admin interface (Ghost Admin) uses React with keyboard navigation support and semantic HTML. Default themes (Casper, Source) are designed with clean semantic markup. However Ghost Foundation has not published a VPAT or commissioned a WCAG conformance audit. Community feedback suggests the admin interface is usable with screen readers but not as thoroughly tested as WordPress's admin. For organisations with strict accessibility requirements (e.g., public sector accessibility regulations), the absence of a published conformance report means Ghost cannot be formally assessed against WCAG standards without independent testing.", "lastVerifiedAt": "2026-05-02" }, { "id": "99b404c0-a156-4c9f-b287-6c5b06e7b662", "flagGroupId": "a111418a-37c8-452a-b5c7-e79686555acb", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cab10b8f-1a87-4cb1-9eae-c78d06933b49", "valence": "concern", "tier": 2, "headline": "WordPress.com Free and Personal plan sites display advertisements to visitors without the site owner's consent, and visitor data is processed for ad targeting purposes.", "explanation": "On WordPress.com Free and Personal plan sites, Automattic displays advertisements to visitors without the option for site owners to disable them. These ads are served by third-party ad networks and involve the processing of visitor data (IP address, browser, usage data) for advertising purposes. Site owners have no control over the ads shown. Removing ads requires upgrading to the Premium plan or higher. Organisations operating public-facing websites on the Free or Personal tier are therefore running a site that serves third-party advertising to their visitors — potentially in conflict with their privacy policies or values.", "lastVerifiedAt": "2026-05-02" }, { "id": "a5f25217-cd8c-4225-8171-80c553e89e6d", "flagGroupId": "d77e4d7f-cedb-4a94-8d5e-5d9c49668db8", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cab10b8f-1a87-4cb1-9eae-c78d06933b49", "valence": "concern", "tier": 2, "headline": "WordPress.com is operated by Automattic, a US company; all site content, user data, and visitor logs are subject to CLOUD Act and FISA Section 702.", "explanation": "Automattic, Inc. is a US-incorporated company, placing all data processed through WordPress.com — including site content, user accounts, visitor IP addresses and logs, and payment data — under US legal jurisdiction. The CLOUD Act permits US law enforcement to compel Automattic to disclose this data regardless of where the servers are located. Automattic publishes transparency reports and has a history of being transparent about law enforcement requests (citing WordPress's press freedom heritage). However the underlying legal exposure is inherent to Automattic's US incorporation and cannot be mitigated by transparency reporting.", "lastVerifiedAt": "2026-05-02" }, { "id": "fcd52b3e-a8b1-4337-baf3-b9f32a190ff9", "flagGroupId": "25d120db-5eca-47f0-b15f-98179b9be5aa", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cab10b8f-1a87-4cb1-9eae-c78d06933b49", "valence": "caution", "tier": 1, "headline": "WordPress.com does not offer self-hosting; organisations that want full data sovereignty with WordPress must use the separate WordPress.org software on their own hosting.", "explanation": "WordPress.com is a managed hosted service; self-hosting is not available at any plan tier. This is distinct from WordPress.org, which is the open source software that can be downloaded and installed on any hosting provider. Organisations that want the WordPress CMS with full data sovereignty should use WordPress.org software on their own servers or a hosting provider in a jurisdiction of their choice. The confusion between WordPress.com and WordPress.org is a common source of misunderstanding; editors should ensure the service description makes this distinction clear.", "lastVerifiedAt": "2026-05-02" }, { "id": "c6e30b64-81f3-4a4b-92b1-a25484e1a538", "flagGroupId": "abb4d2d7-f563-4041-b659-d2118e2e0dc9", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cab10b8f-1a87-4cb1-9eae-c78d06933b49", "valence": "strength", "tier": 2, "headline": "WordPress.com is powered by the GPL 2.0 open source WordPress software; the complete WordPress codebase is publicly auditable and forkable under a strong copyleft licence.", "explanation": "The WordPress content management system — the software underlying WordPress.com — is released under GNU General Public License v2 (GPL 2.0), one of the oldest and most widely used copyleft open source licences. GPL 2.0 requires that derivative works also be released under GPL, providing long-term openness guarantees. The complete WordPress codebase is maintained on GitHub and is auditable by independent security researchers. WordPress plugins and themes are also required to be GPL-compatible. This open source foundation is a significant strength that distinguishes WordPress from fully proprietary CMS platforms.", "lastVerifiedAt": "2026-05-02" }, { "id": "987d6f71-eb52-48ca-94b0-5fe59f8a2e96", "flagGroupId": "7b24e123-c984-4299-8adc-eb0c1a636578", "version": 1, "attachmentLevel": "vendor", "vendorId": "c5add581-0060-4e31-9f02-398cef66c4a3", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "In 2024 Matt Mullenweg (Automattic CEO and WordPress.org admin) unilaterally blocked WP Engine — a major WordPress hosting competitor — from accessing WordPress.org plugin updates, exposing a structural governance conflict in the WordPress ecosystem.", "explanation": "In September 2024 Matt Mullenweg publicly attacked WP Engine (a large WordPress managed hosting company) over its use of the WordPress trademark without a licence fee, and subsequently blocked WP Engine customers from accessing WordPress.org's plugin and theme repositories (essential free services used by hundreds of thousands of sites). The block effectively threatened millions of WP Engine customers' WordPress installations. Mullenweg took this action unilaterally as administrator of WordPress.org — a role he holds personally, not as Automattic CEO. The dispute revealed that a single individual (who also leads a direct commercial competitor) controls access to the community infrastructure of the world's largest CMS. The episode prompted significant community concern about WordPress.org governance and the conflict of interest inherent in Mullenweg's dual role.", "lastVerifiedAt": "2026-05-02" }, { "id": "5adfbe2d-fa68-4dcb-9e50-20ba30118bcd", "flagGroupId": "463008a4-776b-4744-812b-8b0afcad708d", "version": 1, "attachmentLevel": "vendor", "vendorId": "c5add581-0060-4e31-9f02-398cef66c4a3", "suiteId": null, "serviceId": null, "valence": "caution", "tier": 3, "headline": "Automattic is a private company without published financial accounts; its long-term financial health and independence cannot be independently assessed.", "explanation": "Automattic is a private company that does not publish financial accounts. Revenue, profitability, and employee count are not publicly disclosed. The most recently disclosed valuation ($7.5B in 2021) is based on secondary market transactions and may not reflect current fair value. Automattic has taken on significant venture capital and has made major acquisitions (Tumblr, Pocket Casts, Day One). The company's financial position is not transparent to WordPress.com customers who depend on the platform.", "lastVerifiedAt": "2026-05-02" }, { "id": "0fc9ee37-2104-4a12-9cb7-abaa8ba243cf", "flagGroupId": "d2c08300-33d4-4299-96d9-cfb4739a3dfb", "version": 1, "attachmentLevel": "vendor", "vendorId": "c5add581-0060-4e31-9f02-398cef66c4a3", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Automattic does not publish sustainability or carbon data; the energy sources powering WordPress.com infrastructure are not publicly disclosed.", "explanation": "Automattic, unlike major cloud providers, does not publish sustainability reports, carbon emissions data, or energy mix information. The hosting infrastructure underlying WordPress.com (which includes dedicated data centres and third-party hosting partnerships) is not disclosed in detail. Organisations with supply chain carbon accounting requirements cannot include WordPress.com in their carbon footprint calculation.", "lastVerifiedAt": "2026-05-02" }, { "id": "881d7ced-a053-4242-92ca-564135d2a8eb", "flagGroupId": "3758f247-df36-4376-af4b-3edb65d50a3b", "version": 1, "attachmentLevel": "vendor", "vendorId": "c5add581-0060-4e31-9f02-398cef66c4a3", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Automattic is a fully distributed company with approximately 1,900 employees across 100+ countries; it does not publish detailed labour practice or pay equity data.", "explanation": "Automattic operates without a physical headquarters, employing approximately 1,900 staff in over 100 countries (as publicly reported). This distributed model has been cited as a positive for work-life balance and geographic inclusion. However Automattic does not publish pay equity reports, diversity data, or detailed labour practice documentation. No significant labour disputes or regulatory actions have been documented.", "lastVerifiedAt": "2026-05-02" }, { "id": "a19f84b6-3dbc-4ed9-bc1f-e7a3e712578b", "flagGroupId": "361fc799-a89b-4192-b913-780a8da1c4cf", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cab10b8f-1a87-4cb1-9eae-c78d06933b49", "valence": "strength", "tier": 2, "headline": "WordPress has a dedicated accessibility team and targets WCAG 2.1 AA for both the admin interface and published themes; WordPress.com inherits this commitment.", "explanation": "The WordPress project maintains an Accessibility Team that reviews the WordPress admin interface (wp-admin), the Gutenberg block editor, and bundled themes for WCAG 2.1 AA compliance. The WordPress Accessibility Coding Standards require all core code contributions to meet WCAG 2.1 AA. WordPress.com, built on WordPress core, inherits these standards for its admin interface. The Twenty Twenty-* default themes are designed with accessibility as a primary requirement. This is a stronger accessibility baseline than most proprietary CMS platforms.", "lastVerifiedAt": "2026-05-02" }, { "id": "0792ae34-e915-4292-8f30-0c4815499674", "flagGroupId": "dd7ebc91-a7e9-47a7-b93c-1e2166b8c41a", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "6073324d-6e64-4ada-85fb-aef2299521af", "valence": "strength", "tier": 1, "headline": "DuckDuckGo does not store search histories, does not build user advertising profiles, and does not use past search behaviour to personalise results — providing significantly stronger privacy than Google Search by design.", "explanation": "DuckDuckGo's core privacy commitment is not storing personally identifiable information about users' search behaviour. Each search is treated independently: no search history is stored, no cookie identifies the user across searches, and no profile is built for advertising. Ads shown in DuckDuckGo results are based purely on the keyword in the current search (contextual advertising), not on the user's history. This model eliminates the primary privacy concern with Google Search — the accumulation of a lifetime of search queries into an advertising profile. DuckDuckGo's privacy policy commits to these practices and the company has maintained them as the core of its product identity since 2008.", "lastVerifiedAt": "2026-05-02" }, { "id": "335e051f-615e-4b5f-857a-eea34f9f64dc", "flagGroupId": "8c24653d-476b-49a9-93e1-218f1eb04172", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "6073324d-6e64-4ada-85fb-aef2299521af", "valence": "caution", "tier": 2, "headline": "DuckDuckGo draws search results partly from Microsoft/Bing; some user queries reach Microsoft's servers, meaning DuckDuckGo is not a fully independent no-Microsoft-data search option.", "explanation": "DuckDuckGo aggregates search results from multiple sources including its own web crawl (via DuckBot) and Microsoft/Bing's index. For queries where DuckDuckGo relies on Bing results, the query is sent to Microsoft's servers. Microsoft has a separate privacy policy governing this data; Microsoft has stated it does not use DuckDuckGo-originated queries for ad targeting, but this is a contractual claim by a US company subject to CLOUD Act and FISA Section 702. Users who want a search engine with no reliance on Microsoft infrastructure should consider Brave Search (which has its own independent index) or Startpage (which proxies Google results).", "lastVerifiedAt": "2026-05-02" }, { "id": "bc3ca942-66f3-4c2e-bba8-9057516abc9c", "flagGroupId": "945577d1-63c4-44fe-be9b-a0004d9287d3", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "6073324d-6e64-4ada-85fb-aef2299521af", "valence": "caution", "tier": 2, "headline": "DuckDuckGo is a US company subject to CLOUD Act and FISA Section 702; it does not publish a government data requests transparency report.", "explanation": "Duck Duck Go, Inc. is a US company incorporated in Delaware and subject to US law. The CLOUD Act permits law enforcement to compel DuckDuckGo to disclose data it holds about users. Because DuckDuckGo does not store search histories or user profiles, there is significantly less data to produce — limiting the practical scope of compelled disclosure. However DuckDuckGo does not publish a transparency report disclosing how many government data requests it has received and complied with. The combination of minimal data retention and US jurisdiction means the risk is lower than for Google, but not zero.", "lastVerifiedAt": "2026-05-02" }, { "id": "4be245c3-64a7-42b5-81ac-2ab2a1e400bd", "flagGroupId": "4ff53e2d-4b5e-413d-821d-e6873cd2d905", "version": 1, "attachmentLevel": "vendor", "vendorId": "8e89f0f5-0327-4b8c-b624-7ffa93dd6e00", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "In May 2022 it was disclosed that DuckDuckGo's Privacy Browser allowed Microsoft tracker scripts to load on websites, exempting Microsoft from its own tracker blocking — a result of its search syndication agreement.", "explanation": "In May 2022 security researcher Zach Edwards disclosed that the DuckDuckGo Privacy Browser (the mobile browser app, separate from the DuckDuckGo search engine) was blocking most third-party trackers but explicitly exempting Microsoft's tracker scripts (including from LinkedIn and Bing) from its blocking. This meant users visiting websites with Microsoft advertising or tracking code were not protected against Microsoft tracking despite DuckDuckGo's privacy branding. DuckDuckGo CEO Gabriel Weinberg acknowledged this and stated it resulted from a contractual constraint in the Microsoft search syndication agreement, which he said did not apply to Search. DuckDuckGo subsequently committed to removing the exemption. This incident is significant because it revealed that DuckDuckGo's privacy promises were commercially constrained by the Microsoft relationship in ways not disclosed to users.", "lastVerifiedAt": "2026-05-02" }, { "id": "f3c16a46-3e2a-4d85-b00e-103f771d537f", "flagGroupId": "33624746-ae51-43c7-87f0-98dd29181bef", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "6073324d-6e64-4ada-85fb-aef2299521af", "valence": "caution", "tier": 2, "headline": "DuckDuckGo offers no self-hosting option and no EU data residency selection; all queries are processed on DuckDuckGo's US-based infrastructure.", "explanation": "DuckDuckGo is a US-hosted service with no self-hosting option and no selectable EU data residency. While DuckDuckGo collects minimal data, queries still pass through DuckDuckGo's servers (and for some queries, Microsoft's servers) in the US. Organisations with regulatory requirements for EU data processing should note this; in practice the minimal data retention mitigates residency concerns significantly, but the infrastructure jurisdiction remains US.", "lastVerifiedAt": "2026-05-02" }, { "id": "7be801a3-e26b-4d4a-9bf5-0f27e8d58ccb", "flagGroupId": "2af47834-6d00-4acc-bbe0-7de4a581912b", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "6073324d-6e64-4ada-85fb-aef2299521af", "valence": "caution", "tier": 3, "headline": "DuckDuckGo's search ranking algorithm and index are proprietary; client-side browser tools are open source but the search engine core is closed source.", "explanation": "DuckDuckGo's browser extensions and mobile apps are open source (GitHub). However the search index, ranking algorithm, and result scoring systems are proprietary and not auditable. DuckDuckGo explains how its results work in help documentation (listing sources) but does not publish ranking methodology. This is less concerning than for Google Search (DuckDuckGo does not personalise results) but means organisations cannot independently verify result quality or audit for bias.", "lastVerifiedAt": "2026-05-02" }, { "id": "96804586-b162-449a-b0f7-4ae8f70f2153", "flagGroupId": "92b8fc9d-6ba0-4064-98e1-9a2542a6da7d", "version": 1, "attachmentLevel": "vendor", "vendorId": "8e89f0f5-0327-4b8c-b624-7ffa93dd6e00", "suiteId": null, "serviceId": null, "valence": "caution", "tier": 2, "headline": "DuckDuckGo is a small private company without published financial accounts; its long-term viability and independence cannot be independently assessed, and it could be acquired without public disclosure of financial terms.", "explanation": "DuckDuckGo is a private company that does not publish financial accounts, headcount data, or operational metrics. Its revenue (contextual search ads and placement fees) is undisclosed. As a private company, DuckDuckGo could be acquired by a larger technology company without shareholder approval or regulatory review in most jurisdictions. A future acquisition by a company with different privacy values (e.g., an advertising company) could fundamentally change DuckDuckGo's privacy model. This risk is lower if the company remains independent and profitable from its current model, but cannot be verified without published financial data.", "lastVerifiedAt": "2026-05-02" }, { "id": "07e30fbf-0309-4820-ab03-c3158c411576", "flagGroupId": "5c3b1af5-08a3-484a-a8f8-304253c9e2b0", "version": 1, "attachmentLevel": "vendor", "vendorId": "8e89f0f5-0327-4b8c-b624-7ffa93dd6e00", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "DuckDuckGo's search infrastructure is substantially smaller than Google's; it does not publish environmental or sustainability data, so carbon footprint cannot be independently assessed.", "explanation": "DuckDuckGo serves a fraction of Google's query volume and operates proportionally smaller infrastructure. The company does not publish sustainability reports or carbon data. Without this information it is not possible to assess the energy sources or carbon intensity of DuckDuckGo's operations. As a private company with no public reporting obligations, this data gap is expected but still relevant for organisations with supply chain carbon accounting requirements.", "lastVerifiedAt": "2026-05-02" }, { "id": "b08e7ab9-9642-4194-b324-8f84faca2578", "flagGroupId": "515f230d-234e-4ee2-8726-d97bbe79b13b", "version": 1, "attachmentLevel": "vendor", "vendorId": "8e89f0f5-0327-4b8c-b624-7ffa93dd6e00", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "DuckDuckGo is a small private company that does not publish headcount, pay, diversity, or labour practice data.", "explanation": "As a private company, DuckDuckGo is not required to disclose workforce data. The company is estimated to have a few hundred employees. No diversity reports, pay ratio data, or labour practice information is publicly available. No labour disputes or regulatory actions have been documented. The flag records the opacity rather than a specific concern.", "lastVerifiedAt": "2026-05-02" }, { "id": "ca450e2f-9d45-416c-ab17-83a4e6181821", "flagGroupId": "c69f5822-f6ef-46df-bafb-7f685790cf6b", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "6073324d-6e64-4ada-85fb-aef2299521af", "valence": "strength", "tier": 3, "headline": "DuckDuckGo's search interface uses simple, semantic HTML and is accessible via keyboard navigation and screen readers.", "explanation": "DuckDuckGo's search results page uses clean, semantic HTML without the complex JavaScript-heavy interface elements present in Google Search. The simple layout benefits screen reader users by reducing cognitive overhead from complex page structure. Keyboard navigation is functional throughout the interface. DuckDuckGo does not publish a formal VPAT or WCAG conformance report.", "lastVerifiedAt": "2026-05-02" }, { "id": "3f444934-562b-41e5-9478-8f5b6f48b225", "flagGroupId": "712a17e4-5adf-48b5-b6ae-023aaf72cbfc", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "e1030af7-7ee8-4bab-8ece-bb32d9142c4e", "valence": "concern", "tier": 1, "headline": "Google Search is operated by an advertising company whose core business model depends on using search queries and click behaviour to build user advertising profiles; queries may reveal extremely sensitive personal information.", "explanation": "Every search query submitted to Google is retained and associated with the user's account (if signed in), their IP address, device identifiers, and a persistent cookie even when signed out. Google uses search history as a primary signal in its advertising profile for users — determining which ads to show across Google Search, Gmail, YouTube, and the Google Display Network. Search queries can reveal deeply sensitive information including medical symptoms, legal situations, financial distress, political views, and personal relationships. The business model of an ad-funded search engine is structurally dependent on this data collection; the conflict of interest is inherent and cannot be mitigated by individual settings for signed-in users.", "lastVerifiedAt": "2026-05-02" }, { "id": "5ff1b2fe-ce57-4d45-9508-757722934cb4", "flagGroupId": "99905ee8-bc80-49d7-afdb-2136e15959c0", "version": 1, "attachmentLevel": "vendor", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 1, "headline": "In August 2024 a US federal court found Google holds an illegal monopoly in general search; the DOJ's proposed remedies include forcing Google to share search index data or divest Chrome and Android.", "explanation": "In August 2024 Judge Amit Mehta of the US District Court for the District of Columbia ruled that Google has illegally maintained a monopoly in the US general search and search text advertising markets in violation of the Sherman Antitrust Act. The court found that Google paid approximately $20 billion per year (2022) to device manufacturers (including Apple) and browsers to secure default search placement, foreclosing competition. The DOJ's remedies phase opened in late 2024; proposed remedies include forcing Google to divest Chrome or Android, share search index data with competitors, or cease exclusive default search deals. The ruling is a landmark finding that Google's dominance in search is not merely the result of a superior product but of illegal exclusionary conduct.", "lastVerifiedAt": "2026-05-02" }, { "id": "f1741000-b12b-43ca-b8d2-f220242f2062", "flagGroupId": "24f9174f-5adb-4152-a892-deb0749a316a", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "e1030af7-7ee8-4bab-8ece-bb32d9142c4e", "valence": "concern", "tier": 2, "headline": "Google Search data held by a US company is subject to CLOUD Act and FISA Section 702; Google publishes a biannual transparency report but routinely receives tens of thousands of government data requests.", "explanation": "Google LLC is a US company subject to the CLOUD Act and FISA Section 702. Search history linked to a Google account can be compelled by US law enforcement or intelligence agencies. Google's Transparency Report shows it receives tens of thousands of law enforcement requests per year globally (including from non-US governments) and complies with a large proportion of them. FISA Section 702 national security demands do not appear in the report by law. The scale of data held by Google and the volume of government demands make this a tier-1 concern for users whose search queries contain sensitive information.", "lastVerifiedAt": "2026-05-02" }, { "id": "1ae56fe4-fd92-4930-a1ad-7bca01bc5867", "flagGroupId": "4a8908b5-f307-4201-901c-c88079f4ee38", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "e1030af7-7ee8-4bab-8ece-bb32d9142c4e", "valence": "concern", "tier": 2, "headline": "Google Search offers no data residency options; all search queries are processed on Google's global infrastructure controlled by a US company.", "explanation": "There is no mechanism for individual users or organisations to request that their Google Search queries be processed only in EU data centres or by a non-US Google entity. Google Workspace Enterprise offers EU data processing agreements, but Google Search as a consumer and default service has no such options. Users in the EU sending queries to Google Search are sending data to Google LLC, a US company, without meaningful data residency control. The EU-US Data Privacy Framework (successor to Privacy Shield) provides a legal basis for EU-US data transfers for GDPR purposes, but does not alter the underlying legal exposure under US law.", "lastVerifiedAt": "2026-05-02" }, { "id": "7e384adb-947a-4434-9a76-2cb3127c01fa", "flagGroupId": "bf3a0316-dc81-4841-ad65-642b2aab01a8", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "e1030af7-7ee8-4bab-8ece-bb32d9142c4e", "valence": "concern", "tier": 2, "headline": "Google's search ranking algorithm is entirely proprietary; leaked internal API documents in 2024 revealed ranking signals that Google had previously denied using.", "explanation": "Google's search ranking algorithm is a closely guarded trade secret. In May 2024, thousands of internal API documentation pages from Google's Content Warehouse API were leaked, revealing ranking signals that Google had not publicly disclosed — including the use of Chrome browser data (clicks) in ranking, attention signals, and other undisclosed factors. Google had previously denied using click data in ranking at conferences. The documents showed significant discrepancy between public-facing explanations of Google's algorithm and internal reality. For organisations that depend on Google Search for discoverability, the algorithmic opacity means they cannot understand or predict how their content is ranked or surfaced.", "lastVerifiedAt": "2026-05-02" }, { "id": "b5fddd30-2e5f-4f29-a6a7-467bdccc93d7", "flagGroupId": "f656bd16-6349-437e-b0ea-3824d95bf8d0", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "e1030af7-7ee8-4bab-8ece-bb32d9142c4e", "valence": "concern", "tier": 2, "headline": "The European Commission has repeatedly fined Google for abuse of dominant position in search, and designated Google under the Digital Markets Act as a gatekeeper with ongoing compliance obligations.", "explanation": "The European Commission has issued three major antitrust fines against Google totalling over €8.25 billion (Google Shopping 2017: €2.42B; Android 2018: €4.34B; AdSense 2019: €1.49B). The Google Shopping case directly concerned Google's use of its search engine to favour its own comparison shopping service over competitors. In 2023 Google was designated a gatekeeper under the Digital Markets Act; DMA compliance obligations include providing fair access to its search ranking for third-party services and not self-preferencing its own products. Enforcement is ongoing.", "lastVerifiedAt": "2026-05-02" }, { "id": "40b04250-470e-4eaf-9f6c-36138fd81ef8", "flagGroupId": "163ac237-9dd4-4f74-bf0f-504a89aae4e5", "version": 1, "attachmentLevel": "vendor", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Google matches data centre electricity consumption with renewable energy purchases and aims for 24/7 carbon-free energy by 2030; AI-enhanced Search (AI Overviews) significantly increases the energy cost per search query.", "explanation": "Google has matched 100% of its global electricity consumption with renewable energy since 2017 and is pursuing a more ambitious 24/7 carbon-free energy goal. However Google acknowledged in its 2024 Sustainability Report that AI workloads significantly increased its total energy consumption and carbon emissions, making the 24/7 goal harder to achieve. Google Search's AI Overviews feature (formerly Search Generative Experience), which uses large language models to generate answers to queries, substantially increases the energy cost per search compared to traditional keyword search. Independent estimates suggest AI-enhanced searches can consume 10× or more energy than traditional searches.", "lastVerifiedAt": "2026-05-02" }, { "id": "53eae637-b6a7-4c36-a493-f96d71523174", "flagGroupId": "ca477ef7-c15c-4dd0-8eda-e6377b69ae9d", "version": 1, "attachmentLevel": "vendor", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Google uses a large \"extended workforce\" of content moderators, raters, and data labellers — many employed by third-party contractors — whose work directly supports Google Search quality, with limited public transparency on working conditions.", "explanation": "Google Search quality depends significantly on human raters and content moderators employed through third-party staffing agencies. These workers review search results, label training data, and moderate content, but are not Google employees and do not receive equivalent benefits, job security, or pay. Working conditions for content moderators at large technology companies have been documented as psychologically taxing (exposure to harmful content). The scale of Google's extended workforce and the use of contract labour for core functions like search quality rating is a relevant labour practice concern.", "lastVerifiedAt": "2026-05-02" }, { "id": "e9eb42bb-fc78-4b22-a852-1389e5c7980b", "flagGroupId": "f108119a-71c5-43e7-9c55-e79134b550d3", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "e1030af7-7ee8-4bab-8ece-bb32d9142c4e", "valence": "strength", "tier": 3, "headline": "Google Search is accessible via keyboard navigation and screen readers; the interface is simple and widely tested with assistive technologies.", "explanation": "Google's search interface is one of the most-used applications on the web and has been extensively optimised for keyboard navigation and screen reader compatibility. Search results use semantic HTML and ARIA landmarks. The interface works well with JAWS, NVDA, and VoiceOver. Google also provides an accessible search experience via its APIs for developers building accessible search integrations.", "lastVerifiedAt": "2026-05-02" }, { "id": "df37c463-c474-4d27-9f7b-beaa8786000c", "flagGroupId": "21f99292-658a-42a2-a2fa-ef9bc0256969", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9", "valence": "strength", "tier": 2, "headline": "Jitsi Meet does not require an account or personal data to start or join a meeting on meet.jit.si.", "explanation": "Unlike most hosted video conferencing services, Jitsi Meet on meet.jit.si allows participants to join meetings using only a meeting URL and a chosen display name — no email address, phone number, or account registration is required. Meeting rooms are created ephemerally; 8x8 does not create persistent user profiles for anonymous participants. Organisers who want features such as lobby management or moderation controls can optionally create a free 8x8 account, but this is not required for basic use.", "lastVerifiedAt": "2026-05-02" }, { "id": "e49d389c-5d5b-4286-b137-f909d58ba9ff", "flagGroupId": "edc96bcc-e8c7-48c7-9337-a6057d664f81", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9", "valence": "caution", "tier": 2, "headline": "meet.jit.si is operated by 8x8, Inc., a US company whose infrastructure falls within reach of the US CLOUD Act and FISA.", "explanation": "8x8, Inc. is incorporated in Delaware and headquartered in California, placing it squarely under US jurisdiction. The CLOUD Act (2018) permits US law enforcement to compel 8x8 to disclose data stored on servers it controls — including meeting metadata, IP addresses, and any content not protected by end-to-end encryption — even when servers are located outside the US. FISA Section 702 authorises intelligence agencies to collect data from US cloud providers without a conventional warrant. 8x8 does not currently publish a comprehensive transparency report specifically covering meet.jit.si. Organisations with elevated sensitivity should self-host Jitsi Meet on infrastructure outside US jurisdiction to eliminate this exposure.", "lastVerifiedAt": "2026-05-02" }, { "id": "eae85dde-bc60-4689-b472-53aa624f9c98", "flagGroupId": "8cf65064-e36b-49a7-9904-0789ce419d17", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9", "valence": "caution", "tier": 2, "headline": "Jitsi Meet encrypts all media in transit by default (DTLS-SRTP) but true end-to-end encryption — where 8x8 cannot access meeting content — is opt-in, experimental, and limited to Chromium-based browsers.", "explanation": "All audio and video transmitted through meet.jit.si is encrypted in transit using DTLS-SRTP, an industry-standard WebRTC security layer. However this encryption only protects data between each participant and the Jitsi Videobridge server operated by 8x8; the server decrypts and re-encrypts media as it routes streams, meaning 8x8 theoretically has access to meeting content. Jitsi also provides an optional end-to-end encryption mode that uses the Web Cryptography API (Insertable Streams), under which the server cannot read meeting content. This E2EE mode is currently limited to Chromium-based browsers (Chrome, Edge, Brave) and is not available on Firefox or Safari. For the highest privacy posture, self-hosting with E2EE enabled is recommended.", "lastVerifiedAt": "2026-05-02" }, { "id": "5aaf1099-4ba5-4166-9a23-dc59f44bd80f", "flagGroupId": "91619487-a7ff-4e4d-b5ba-7eb38dbfdaff", "version": 1, "attachmentLevel": "vendor", "vendorId": "805f8300-eaa0-46c5-88cc-a3f6b294fa83", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Brave Software employs approximately 200 people; as a private company it publishes no diversity or workforce transparency data.", "explanation": "Brave operates with approximately 200 employees, primarily in engineering and product development. No significant labour controversies have been reported beyond the founder's personal history noted above. No diversity or pay equity data is published.", "lastVerifiedAt": "2026-05-03" }, { "id": "d6cc1556-aab2-451e-a098-cfe06b0ea5b7", "flagGroupId": "413fa56c-94ee-4f01-b70d-049b04e0c06d", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9", "valence": "strength", "tier": 2, "headline": "meet.jit.si does not store meeting content; no recordings, transcripts, or media are retained after a meeting ends unless the user explicitly enables cloud recording.", "explanation": "By default meet.jit.si does not record or retain any meeting audio, video, or chat content. Meeting rooms are ephemeral: once all participants disconnect the room is gone. 8x8's privacy policy states it collects operational data (IP addresses, browser type) for service delivery but does not retain meeting content. The contrast with services that default to persistent cloud recording is significant for organisations handling sensitive discussions. If cloud recording is deliberately enabled by a meeting organiser, recordings are stored by 8x8; users should review 8x8's data retention policy in that scenario.", "lastVerifiedAt": "2026-05-02" }, { "id": "e932c291-2e65-4b4b-9ae2-2f11518ff7a2", "flagGroupId": "4fa5ead1-bb67-4508-afc8-34e5c1345609", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9", "valence": "strength", "tier": 1, "headline": "Jitsi Meet can be fully self-hosted on any server infrastructure, placing all meeting data entirely under the organisation's control and in any jurisdiction.", "explanation": "The complete Jitsi Meet stack — including the Jitsi Videobridge media server, Jicofo conference focus component, and Prosody XMPP server — is available as open source (Apache 2.0) and can be deployed on any Linux server or cloud infrastructure. A self-hosted instance means no data transits any third-party servers: meeting audio, video, metadata, and chat stay entirely within the organisation's chosen infrastructure and jurisdiction. This is the strongest available data sovereignty posture for a video conferencing tool. 8x8 provides official Docker images and documentation for deployment. Self-hosting requires server administration capability but is well-documented and has an active community.", "lastVerifiedAt": "2026-05-02" }, { "id": "edc54c62-4985-44d1-84ea-403c89832b3d", "flagGroupId": "d7926e9d-42ec-4152-9077-3c5087bfa3f4", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9", "valence": "caution", "tier": 2, "headline": "Using meet.jit.si means meeting traffic passes through 8x8's US-operated infrastructure; data residency options for the free hosted service are not user-selectable.", "explanation": "When organisations use meet.jit.si rather than a self-hosted instance, meeting metadata and media are processed on 8x8's infrastructure. 8x8 does not offer EU or regional data-residency selection for the free meet.jit.si service. Organisations subject to data residency requirements (e.g., GDPR Chapter V adequacy obligations, UK GDPR, sector-specific rules) should either self-host or review 8x8's commercial 8x8 Video Meetings offering, which may offer regional data processing agreements.", "lastVerifiedAt": "2026-05-02" }, { "id": "3048488f-c91d-4a3c-8748-995d4a06fb18", "flagGroupId": "db12dbe5-3c03-440d-8f2f-efb1b3161e91", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9", "valence": "strength", "tier": 1, "headline": "The entire Jitsi Meet stack is released under the Apache 2.0 licence — the most permissive OSI-approved licence — allowing any organisation to audit, modify, and deploy it without restriction.", "explanation": "All components of the Jitsi Meet platform (web client, iOS app, Android app, Jitsi Videobridge, Jicofo, Jitsi Meet Torture test suite) are published on GitHub under the Apache 2.0 licence. Apache 2.0 is an OSI-approved permissive free software licence that allows commercial and non-commercial use, modification, and redistribution without copyleft requirements. Independent security researchers can audit the encryption implementation and data-handling code directly. The Apache 2.0 licence also provides patent protection: contributors grant users a licence to any patents covering their contribution, reducing legal risk for organisations that deploy Jitsi.", "lastVerifiedAt": "2026-05-02" }, { "id": "ff48e42f-ea9b-42dd-8724-a8442fa2148c", "flagGroupId": "9c94e927-b7f2-407f-bdca-3ac8bf28a98b", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9", "valence": "strength", "tier": 2, "headline": "Jitsi Meet uses only open standards (WebRTC, XMPP) for media transport and signalling; no proprietary protocols are used.", "explanation": "Jitsi Meet's entire media stack is built on WebRTC — the W3C and IETF open standard for real-time communications in the web browser — and uses XMPP for signalling via the Prosody server component. No proprietary transport protocols are used. This means any standards-compliant WebRTC client can interoperate with Jitsi's infrastructure, and the signalling layer is well-documented and auditable. The choice of open standards also means browser vendors' independent security implementations (for DTLS-SRTP key exchange) provide a layer of verification independent of Jitsi code. This is in direct contrast to video conferencing platforms that use proprietary protocols for their native clients.", "lastVerifiedAt": "2026-05-02" }, { "id": "ac91086e-1d15-4a74-9262-b9f0e08c88b3", "flagGroupId": "1534ef7b-1425-4b64-8058-faa7d49bb0ed", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9", "valence": "strength", "tier": 1, "headline": "The Apache 2.0 licence legally protects all organisations that self-host Jitsi Meet: 8x8 cannot revoke the licence, relicense the already-published code, or prevent forks.", "explanation": "Under the Apache 2.0 licence, once code is published the licence grant to users is irrevocable. Even if 8x8 were to change Jitsi Meet's licence going forward (which it could do for new code), all previously released versions would remain available under Apache 2.0 and could be forked and maintained by the community. Historical precedents (e.g., HashiCorp's BSL switch, Redis Labs relicensing) show that popular projects with strong communities do fork when the upstream licence changes. The Jitsi community is active; the project has a track record of community contributions independent of 8x8 staff. This makes Jitsi Meet structurally resistant to vendor lock-in in a way that proprietary tools are not.", "lastVerifiedAt": "2026-05-02" }, { "id": "37cf877f-5bad-4e33-ad33-8f8ac7ee4d39", "flagGroupId": "d4f0ef2c-b622-42b6-aae7-75b0a5dd068c", "version": 1, "attachmentLevel": "vendor", "vendorId": "16ff5198-9241-4943-8c83-cfed67dfba3a", "suiteId": null, "serviceId": null, "valence": "caution", "tier": 2, "headline": "8x8 is an investor-driven US public company with a history of operating losses; commercial pressure may reduce investment in the open source Jitsi project over time.", "explanation": "8x8's primary commercial interest is its paid cloud communications platform, not the open source Jitsi Meet project. The Jitsi project is maintained by 8x8 engineers whose positions depend on 8x8's financial health and strategic priorities. 8x8 has reported net operating losses consistently in recent years and has made significant workforce reductions in 2023. An organisation's long-term plans for Jitsi Meet should account for the possibility that 8x8 reduces investment in or deprioritises the open source project; the Apache 2.0 licence means this is manageable (community fork or internal maintenance) but would require proactive planning.", "lastVerifiedAt": "2026-05-02" }, { "id": "c91c643a-1e1e-4a73-b3b3-fe4f889c7c84", "flagGroupId": "3c8d6f8b-5c6e-4a7d-8bdf-c1a280b9a89b", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9", "valence": "strength", "tier": 2, "headline": "Organisations self-hosting Jitsi Meet can choose renewable-energy infrastructure, making it possible to operate a near-zero-carbon video conferencing service.", "explanation": "Because Jitsi Meet is fully self-hostable, organisations can deploy it on infrastructure certified by the Green Web Foundation or powered by renewable energy purchase agreements. Major cloud providers (Hetzner, OVHcloud, AWS renewable regions, Google Cloud carbon-free zones) provide options. No video conferencing service hosted by a third party offers this level of environmental control. For meet.jit.si specifically, 8x8 does not publish data about the energy sources powering its infrastructure, so the environmental impact of using the hosted service cannot be independently assessed.", "lastVerifiedAt": "2026-05-02" }, { "id": "5b9ae708-9060-48a5-a9f3-56872f05f503", "flagGroupId": "08b616ae-b22b-4add-81c5-efc7213840ba", "version": 1, "attachmentLevel": "vendor", "vendorId": "16ff5198-9241-4943-8c83-cfed67dfba3a", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "8x8 cut approximately 12% of its global workforce in fiscal 2023–24, a pattern of restructuring driven by sustained operating losses.", "explanation": "8x8 has carried out multiple rounds of workforce reductions in recent years reflecting persistent net operating losses. In early calendar 2023 8x8 announced a restructuring affecting approximately 12% of its global headcount. These cuts affect the engineering teams responsible for maintaining the Jitsi Meet open source project as well as 8x8's commercial products. For organisations evaluating Jitsi Meet, the workforce instability at 8x8 is a relevant factor when assessing the sustainability of open source maintenance — though the Apache 2.0 licence significantly mitigates this risk compared to a proprietary vendor in the same position.", "lastVerifiedAt": "2026-05-02" }, { "id": "dfd4b415-9abb-47d7-bf6a-569090bbe5c3", "flagGroupId": "7baaa080-1b01-40f4-8422-cd68d548369e", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9", "valence": "strength", "tier": 2, "headline": "Jitsi Meet requires no software installation; participants can join any meeting from a web browser by following a link, removing a significant access barrier.", "explanation": "Jitsi Meet is a fully browser-based application. Participants require no account, no app download, and no client installation to join a meeting — they simply follow a link. This is a meaningful accessibility advantage over tools that require account creation or app installation, which can exclude participants who cannot install software on managed devices or who are unfamiliar with account-creation flows. The web client works across all major modern browsers (Chrome, Firefox, Safari, Edge) on desktop and Android. iOS is supported via the dedicated app or the mobile browser with some limitations.", "lastVerifiedAt": "2026-05-02" }, { "id": "cff55397-822c-4521-bf33-aa23e33055a0", "flagGroupId": "42967373-2a9f-4b29-b4d9-9c56b3fa2c88", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9", "valence": "caution", "tier": 2, "headline": "Jitsi Meet does not include built-in automated captions; live transcription requires a third-party integration, creating an accessibility gap for d/Deaf and hard-of-hearing users.", "explanation": "Unlike Zoom, Google Meet, and Microsoft Teams — which all include automated live captions at no extra cost — Jitsi Meet does not provide built-in automated speech-to-text captioning. Real-time captions can be integrated via third-party transcription services (e.g., Otter.ai, Microsoft Azure Cognitive Services with a custom integration, or a Whisper-based self-hosted transcriber), but this requires additional configuration and potentially additional cost. For organisations with d/Deaf or hard-of-hearing staff, attendees, or legal obligations under disability access legislation, the absence of built-in captions is a meaningful gap that must be addressed before deploying Jitsi Meet as a primary conferencing tool.", "lastVerifiedAt": "2026-05-02" }, { "id": "0c674d48-eb97-420c-9bcb-b7403db10367", "flagGroupId": "f38d5b30-062e-4095-a67c-7c22d144fe7f", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "768c092a-97cd-4e1f-9b28-51dc59f68959", "valence": "concern", "tier": 1, "headline": "The FTC found Zoom misled users by claiming end-to-end encryption when it held keys allowing access to meeting content.", "explanation": "In November 2020 the US Federal Trade Commission entered a consent order against Zoom, finding the company had, since at least 2016, falsely claimed to offer end-to-end, 256-bit encryption. In practice Zoom held the cryptographic keys that would allow it to access the content of meetings. The FTC also found Zoom falsely stated that cloud-stored recordings were encrypted immediately after a meeting ended, when in fact some were stored unencrypted for up to 60 days. The consent order required Zoom to implement a robust security programme and submit to third-party audits.", "lastVerifiedAt": "2026-05-02" }, { "id": "114dd278-f9b1-4e96-8135-3abb7410c766", "flagGroupId": "11c72160-03ee-45ba-bf8c-db1a252021cc", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "768c092a-97cd-4e1f-9b28-51dc59f68959", "valence": "concern", "tier": 1, "headline": "Zoom settled an $85 million class action lawsuit alleging it shared user data with Facebook and Google and failed to prevent Zoombombing attacks.", "explanation": "A federal class action lawsuit alleged that Zoom shared personal data with Facebook, Google, and LinkedIn without adequate disclosure, and failed to take reasonable steps to prevent intrusive disruptions of meetings by uninvited participants (Zoombombing). In August 2021 Zoom agreed to pay $85 million to settle the claims; a federal judge gave final approval to the settlement in April 2022. As part of the settlement Zoom agreed to privacy and data-handling training for employees and implementation of security measures.", "lastVerifiedAt": "2026-05-02" }, { "id": "9d020eeb-948e-4637-8800-067511b55399", "flagGroupId": "cbbeec82-5fda-4235-96d3-313da7eaf91b", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "768c092a-97cd-4e1f-9b28-51dc59f68959", "valence": "caution", "tier": 2, "headline": "In August 2023 Zoom reversed terms-of-service changes that had appeared to grant broad rights to use customer content for AI training, following public backlash.", "explanation": "In March 2023 Zoom updated its terms of service to include language granting itself a broad, royalty-free, sublicensable licence to use customer content including audio and video for machine learning and AI model training. When a Hacker News post highlighted this language in August 2023, Zoom faced immediate public and press criticism. CEO Eric Yuan acknowledged a process failure and Zoom updated its terms on 11 August 2023 to state explicitly it would not use customer content to train generative AI models. The incident was reversed but reveals the company's willingness to expand data use rights unilaterally, reversing only when public pressure applied.", "lastVerifiedAt": "2026-05-02" }, { "id": "f5c7d008-6b4f-485d-a12a-0a53c03be368", "flagGroupId": "36c1b43e-40a9-4abb-a9e6-468e29c2159c", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "768c092a-97cd-4e1f-9b28-51dc59f68959", "valence": "caution", "tier": 2, "headline": "Zoom collects significant device and usage metadata including IP addresses, device identifiers, and meeting-usage patterns for product analytics and improvement.", "explanation": "Zoom's privacy policy states the company collects information about devices accessing the service including device type, operating system, application IDs, unique device identifiers, crash data, and IP addresses. Usage data including meeting participation, feature usage, and network quality metrics is collected. This data is used for product improvement, troubleshooting, and (for paid plans that allow it) analytics on meeting activity. Metadata about meetings — including who attended and for how long — is available to meeting hosts and admins.", "lastVerifiedAt": "2026-05-02" }, { "id": "c3f489ed-854d-47a9-b0b8-9205c9040b36", "flagGroupId": "2416c1a7-b1cc-43a8-8139-5cf85e4f4de0", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "768c092a-97cd-4e1f-9b28-51dc59f68959", "valence": "context", "tier": 2, "headline": "Zoom publishes semi-annual transparency reports on government data requests; US law enforcement requests represent the largest share.", "explanation": "Zoom publishes transparency reports at six-monthly intervals documenting the number and type of government requests received for user data across jurisdictions. The reports distinguish between search warrants, subpoenas, court orders, preservation requests, and emergency requests. US requests are consistently the largest category. Zoom states it reviews each request for legal sufficiency, notifies affected users where legally permitted, and challenges overbroad requests.", "lastVerifiedAt": "2026-05-02" }, { "id": "2646299a-f3f0-4d34-a8c4-176af5524d03", "flagGroupId": "e0182c7d-1620-4ed0-941d-20f59df58540", "version": 1, "attachmentLevel": "vendor", "vendorId": "856693d2-5b3b-4a56-8105-6310ad10c7a4", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 1, "headline": "Zoom is a US-incorporated company and is subject to the CLOUD Act, which permits US law enforcement to compel disclosure of data held anywhere in the world.", "explanation": "Zoom Video Communications, Inc. is incorporated under Delaware law and headquartered in San Jose, California. Under the US CLOUD Act (Clarifying Lawful Overseas Use of Data Act, 2018), US law enforcement can compel a US-based provider to disclose data stored outside the United States, without requiring a mutual legal assistance treaty process. This means that EU-based or UK-based users whose data is processed through Zoom's platform are potentially subject to US law enforcement access regardless of where their data is physically stored.", "lastVerifiedAt": "2026-05-02" }, { "id": "a2a8cf43-daab-4723-be60-4d483c36d5ea", "flagGroupId": "ec4a8f64-47ab-4ae7-a2d5-59b519171342", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "768c092a-97cd-4e1f-9b28-51dc59f68959", "valence": "caution", "tier": 2, "headline": "Zoom offers data residency options (EU, US, AU, CA, IN, JP) but these are only available on paid Business, Business Plus, and Enterprise plans.", "explanation": "Zoom allows organisations on paid plans to select the geographic region where their at-rest data is stored, including the European Union. Free and Pro plan users have no control over where their data is stored. Data residency applies to certain categories of at-rest data (meeting recordings, chat, whiteboards); it does not apply to all metadata, and does not affect CLOUD Act exposure since Zoom's parent company remains US-incorporated.", "lastVerifiedAt": "2026-05-02" }, { "id": "96abcb8a-b0a4-4a84-b32b-45cc130754d0", "flagGroupId": "2a1f2bda-e503-4e47-9d02-79f0dc4448d4", "version": 1, "attachmentLevel": "vendor", "vendorId": "856693d2-5b3b-4a56-8105-6310ad10c7a4", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Zoom publishes a semi-annual transparency report covering government data requests, content removals, and law enforcement guidelines.", "explanation": "Zoom's semi-annual transparency reports are published at zoom.com/en/trust/transparency/ and document government data requests by jurisdiction and request type, alongside Zoom's response rate. The reports also describe Zoom's government requests guide, which sets out the legal standards Zoom applies when evaluating requests.", "lastVerifiedAt": "2026-05-02" }, { "id": "d7e87977-2a6c-4d36-bcad-d0be93db0e51", "flagGroupId": "f539a33b-3f26-4599-85c4-a2161b34be4c", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "768c092a-97cd-4e1f-9b28-51dc59f68959", "valence": "concern", "tier": 2, "headline": "Zoom is a fully proprietary, closed-source platform; no source code is publicly available for independent security review.", "explanation": "Zoom does not publish the source code for its server infrastructure or client applications. Independent security researchers cannot audit the encryption implementation or data-handling logic without reverse-engineering the clients. This is materially relevant given the FTC's 2020 finding that Zoom misled users about encryption practices — independent code audit would have allowed earlier detection.", "lastVerifiedAt": "2026-05-02" }, { "id": "84c1d13f-867d-4d1c-adcd-659980417c6c", "flagGroupId": "c27fa032-3d56-4e94-8c4c-f549d7870f66", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "768c092a-97cd-4e1f-9b28-51dc59f68959", "valence": "caution", "tier": 2, "headline": "Zoom uses WebRTC for browser-based clients but its desktop and mobile clients use a proprietary transport protocol, limiting interoperability with non-Zoom systems.", "explanation": "Zoom's web client uses WebRTC, an open standard. However, Zoom's native desktop and mobile applications use a proprietary protocol (not SIP or H.323 by default), which means Zoom calls cannot be initiated from or received by standard video conferencing endpoints without a paid Zoom Phone or Zoom Rooms gateway add-on. Organisations running standards-based video infrastructure cannot interoperate with Zoom natively without a proprietary bridge.", "lastVerifiedAt": "2026-05-02" }, { "id": "5028bb4f-9fbf-4690-ad93-391f9f8a8c30", "flagGroupId": "440e7684-e55c-48fd-883b-c3b4e2784678", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "768c092a-97cd-4e1f-9b28-51dc59f68959", "valence": "context", "tier": 3, "headline": "Zoom allows account owners to request a data export (account data, chat history, meeting information); meeting recordings are downloadable in MP4 format.", "explanation": "Zoom provides a data export feature allowing account administrators to download account data including meeting metadata and chat messages in ZIP format. Cloud-recorded meetings can be downloaded as MP4 (video) and M4A (audio) files. However there is no bulk export of contacts to standard formats, and the export format for meeting metadata is Zoom-specific JSON rather than an interoperable standard.", "lastVerifiedAt": "2026-05-02" }, { "id": "54944873-2233-4bb0-a34f-a51157c42b4c", "flagGroupId": "40c99c22-7de5-4919-bfd8-0b586dfd0a35", "version": 1, "attachmentLevel": "vendor", "vendorId": "856693d2-5b3b-4a56-8105-6310ad10c7a4", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Zoom is a publicly traded corporation (NASDAQ: ZM); founder Eric Yuan retains approximately 25% of voting power via Class B super-voting shares despite holding roughly 13% of economic equity.", "explanation": "Zoom Video Communications, Inc. has been publicly traded since its April 2019 IPO on NASDAQ. The company uses a dual-class share structure: Class A shares carry one vote each (publicly traded) while Class B shares carry ten votes each and are held by early investors and the founder. Eric Yuan's Class B holdings give him approximately 25% of total voting power as of 2025, ensuring founder control persists despite public ownership. Public company status brings reporting obligations and shareholder accountability mechanisms that private companies lack.", "lastVerifiedAt": "2026-05-02" }, { "id": "391e850a-6748-4c0d-b95d-ef9e89e1ab8c", "flagGroupId": "4db61ab2-3f95-46e3-895f-038f86ea8328", "version": 1, "attachmentLevel": "vendor", "vendorId": "856693d2-5b3b-4a56-8105-6310ad10c7a4", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "The 2023 terms-of-service incident, in which Zoom introduced broad AI-training rights then reversed only after public backlash, illustrates reactive rather than proactive governance on user data.", "explanation": "In March 2023 Zoom silently added language to its terms of service granting broad rights to use customer content for AI model training. The change went unnoticed until August 2023, when it was surfaced on Hacker News and covered widely in the technology press. Zoom reversed the change only after sustained public and media criticism, with CEO Eric Yuan characterising it as a process failure. The pattern — quietly expanding data-use rights, then reversing under pressure — reflects reactive rather than principled governance and creates ongoing uncertainty about future terms changes.", "lastVerifiedAt": "2026-05-02" }, { "id": "806fc006-54df-4bae-9200-9ee9a7dce02f", "flagGroupId": "781fb893-99d7-4d97-9937-6a7729c4d600", "version": 1, "attachmentLevel": "vendor", "vendorId": "856693d2-5b3b-4a56-8105-6310ad10c7a4", "suiteId": null, "serviceId": null, "valence": "caution", "tier": 3, "headline": "Zoom published its first Environmental, Social, and Governance report in 2023 but does not publish independently verified Scope 3 emissions data.", "explanation": "Zoom's 2023 ESG report discloses Scope 1 and Scope 2 greenhouse gas emissions data. Scope 3 emissions (supply chain, customer use of product) are noted as an area Zoom intends to develop but are not currently fully reported or independently verified. The report does not include third-party assurance from an accredited auditor on the emissions data.", "lastVerifiedAt": "2026-05-02" }, { "id": "2cf75abe-7e97-4161-86a8-4b6ce30b7358", "flagGroupId": "b318491a-33cc-4b68-92f9-5cac59a486cc", "version": 1, "attachmentLevel": "vendor", "vendorId": "856693d2-5b3b-4a56-8105-6310ad10c7a4", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "In February 2023 Zoom laid off approximately 1,300 employees, representing roughly 15% of its total workforce.", "explanation": "Zoom announced in February 2023 that it would reduce its global headcount by approximately 15%, affecting around 1,300 employees. The cuts followed a period of hypergrowth during the COVID-19 pandemic and subsequent contraction in demand. Zoom CEO Eric Yuan stated publicly that he would reduce his own salary and forfeit his bonus in connection with the restructuring. The layoffs were implemented across functions globally.", "lastVerifiedAt": "2026-05-02" }, { "id": "09a0e838-066e-4313-b6d0-4f736169807b", "flagGroupId": "6cd98d1f-865f-4e8b-b54d-9f76afaa8c72", "version": 1, "attachmentLevel": "vendor", "vendorId": "856693d2-5b3b-4a56-8105-6310ad10c7a4", "suiteId": null, "serviceId": null, "valence": "caution", "tier": 3, "headline": "Zoom does not publish a supply chain transparency report or responsible sourcing policy covering its hardware and infrastructure suppliers.", "explanation": "Zoom's ESG report discusses direct employment practices but does not include a supply chain transparency report covering hardware manufacturers, data centre operators, or third-party infrastructure providers used to deliver the service. Supply chain transparency is not a prominently stated priority in Zoom's public ESG commitments.", "lastVerifiedAt": "2026-05-02" }, { "id": "1c6eef2a-49e3-4e88-9de6-a889fed6583e", "flagGroupId": "81fdd773-2870-4249-b8d1-baa294c33b0f", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "768c092a-97cd-4e1f-9b28-51dc59f68959", "valence": "strength", "tier": 2, "headline": "Zoom provides live automated captions at no additional cost on all plan tiers, and supports keyboard navigation and screen readers across desktop applications.", "explanation": "Zoom includes automated live transcription (captions) during meetings on all plan tiers, including Free. Manual live transcription can be assigned to a participant or a third-party captioning service. Zoom's desktop applications support keyboard navigation for meeting controls, and the company documents screen reader support for the desktop client. The Zoom web client and mobile apps have more limited accessibility feature parity.", "lastVerifiedAt": "2026-05-02" }, { "id": "49babefc-8b9d-4f33-8cc3-8c97c2344c1d", "flagGroupId": "f9672a04-237f-450d-bd0f-6ca2511f6733", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "768c092a-97cd-4e1f-9b28-51dc59f68959", "valence": "caution", "tier": 3, "headline": "Zoom publishes an accessibility page and Voluntary Product Accessibility Template (VPAT) but independent WCAG conformance audits are not publicly available.", "explanation": "Zoom provides an accessibility statement and a VPAT for its products but does not publish independently conducted WCAG conformance test reports. The VPAT is a self-reported document describing how each accessibility standard criterion is met, not met, or partially met. Independent testing by organisations such as Deque or Level Access would provide stronger assurance.", "lastVerifiedAt": "2026-05-02" }, { "id": "71a4b559-0a6e-4c76-9eb0-9b09393ff9f5", "flagGroupId": "77b96762-1a19-4723-be0d-37fdcc39ad9b", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "1b342130-fdab-4b9b-ac97-87058d39cb1a", "valence": "concern", "tier": 1, "headline": "Microsoft Teams is operated by a US company and is subject to the CLOUD Act and FISA Section 702, which can compel disclosure of customer data regardless of where it is stored.", "explanation": "Microsoft Corporation is incorporated in Washington state, placing it under US jurisdiction. The CLOUD Act (2018) permits US law enforcement to compel Microsoft to disclose Teams data held on servers anywhere in the world, including EU data centres. FISA Section 702 authorises intelligence agencies to collect data from US cloud providers without a conventional warrant. Microsoft has acknowledged CLOUD Act obligations in its government request response documentation. Microsoft publishes a detailed biannual Law Enforcement Requests Report disclosing aggregate government request data, which is a transparency positive compared to many peers. However the underlying legal exposure cannot be mitigated by Microsoft's EU Data Boundary initiative, as US law applies to the corporation regardless of data location.", "lastVerifiedAt": "2026-05-02" }, { "id": "2845f6b6-5666-4353-9220-180088c04154", "flagGroupId": "69798db4-c6c7-401a-95a8-b9e56f74c772", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "1b342130-fdab-4b9b-ac97-87058d39cb1a", "valence": "concern", "tier": 2, "headline": "German and other EU data protection authorities have found Microsoft Teams non-compliant with GDPR, leading some public sector and educational institutions to prohibit its use.", "explanation": "Between 2020 and 2023, data protection authorities in Germany, the Netherlands, Denmark, and other EU member states investigated or issued guidance on Microsoft Teams usage. The German Conference of Data Protection Authorities (DSK) found that Microsoft 365 (including Teams) did not meet GDPR requirements in its default configuration, citing concerns about telemetry data transfers to the US and the scope of Microsoft's data processing. Several German federal states issued guidance restricting or prohibiting the use of Teams in schools. The Dutch Data Protection Authority similarly investigated Teams telemetry data. Microsoft has responded by publishing EU Data Boundary commitments and updating its Standard Contractual Clauses, but enforcement action and authority guidance continue to evolve.", "lastVerifiedAt": "2026-05-02" }, { "id": "7ad2a5c3-2efc-43ad-ac22-3a9bb3a2262b", "flagGroupId": "7db696cd-9417-41e2-86fc-78f13b569f2f", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "1b342130-fdab-4b9b-ac97-87058d39cb1a", "valence": "caution", "tier": 2, "headline": "Microsoft Teams Copilot — an AI meeting summarisation and chat assistant — processes meeting transcripts and message content; customers must understand data flows before enabling it.", "explanation": "Microsoft Teams Copilot (launched 2023, generally available 2024) provides AI-powered meeting summaries, action item extraction, and chat assistance using large language models. To function, Copilot processes meeting transcripts and chat messages. Microsoft states that customer data is not used to train foundational Microsoft AI models and that Copilot processing occurs within the Microsoft 365 compliance boundary. However the feature involves processing sensitive meeting content in ways that may not be obvious to participants and raises questions about transcript retention, secondary use, and AI-to-AI data flows. Copilot is an add-on requiring explicit purchase and enablement; it is not enabled by default.", "lastVerifiedAt": "2026-05-02" }, { "id": "64cd10e2-1412-460f-a390-bc218c2746a5", "flagGroupId": "94a5d59c-291d-4df8-9a59-14620ac3f13e", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "1b342130-fdab-4b9b-ac97-87058d39cb1a", "valence": "caution", "tier": 2, "headline": "Microsoft's EU Data Boundary commits to storing and processing EU Teams data within the EU, but does not eliminate CLOUD Act exposure because Microsoft Corporation remains a US-incorporated entity.", "explanation": "In response to GDPR enforcement concerns, Microsoft announced the EU Data Boundary for the Microsoft Cloud in 2022, launched in January 2023. Under this commitment, Microsoft 365 (including Teams) data for EU customers is stored and processed within the EU and EFTA countries, with limited exceptions for Microsoft's global operational support staff. This substantially reduces GDPR data transfer concerns. However it does not address CLOUD Act exposure: US law can still compel Microsoft Corporation to disclose EU-stored data. Microsoft has stated it will legally challenge CLOUD Act requests it believes conflict with EU law, but the outcome of any such challenge is uncertain. The EU Data Boundary is a meaningful step but not a complete resolution of EU data sovereignty concerns.", "lastVerifiedAt": "2026-05-02" }, { "id": "14397647-4867-432f-a02e-4562b0d7285d", "flagGroupId": "1fc48f8a-dcab-4175-8be6-b71576a37146", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "1b342130-fdab-4b9b-ac97-87058d39cb1a", "valence": "concern", "tier": 1, "headline": "Microsoft Teams offers no self-hosted deployment option; all customer data is processed on Microsoft's cloud infrastructure.", "explanation": "Microsoft Teams does not support on-premises or self-hosted deployment. (Microsoft retired the on-premises Skype for Business Server product in 2019 with end of mainstream support in 2025.) All Teams data — messages, files, meetings, transcripts — is processed on Microsoft's cloud infrastructure. Organisations that cannot use cloud services due to regulatory requirements (e.g., certain classified government sectors) must use alternative products. There is no roadmap indication from Microsoft that a self-hosted Teams option is planned.", "lastVerifiedAt": "2026-05-02" }, { "id": "1c6d4d21-e58c-4383-9001-f044f2b36312", "flagGroupId": "27b833be-4fcd-445c-97ee-e98b4e198c42", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "1b342130-fdab-4b9b-ac97-87058d39cb1a", "valence": "concern", "tier": 1, "headline": "Microsoft Teams is entirely closed source; no server or client code is available for independent security review.", "explanation": "Microsoft Teams does not publish source code for its server infrastructure, web client, desktop applications, or mobile apps. Independent security review relies entirely on Microsoft's own audits, third-party penetration tests commissioned by Microsoft, and compliance certifications (SOC 2 Type II, ISO 27001). While Microsoft publishes more compliance documentation than most closed source peers, the absence of open source means independent verification of encryption implementation and data-handling behaviour is not possible.", "lastVerifiedAt": "2026-05-02" }, { "id": "3e520148-7995-4644-a33d-f2f53ffbbcbc", "flagGroupId": "a2290b40-7c7b-4523-92fa-82ca2d23e5c4", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "1b342130-fdab-4b9b-ac97-87058d39cb1a", "valence": "caution", "tier": 2, "headline": "Microsoft Teams data can be exported via Microsoft 365 compliance tools (eDiscovery, Content Search), but these tools are designed for compliance rather than user-friendly data migration.", "explanation": "Teams message history and meeting data can be exported using Microsoft 365's built-in eDiscovery and Compliance tools available on Business and Enterprise plans. However these tools export data in PST or proprietary formats optimised for legal review rather than migration to another platform. User-friendly export of personal message history is not available to individual users on standard plans. Migrating an entire Teams deployment to another platform (e.g., Mattermost, Element) requires specialist tools and significant administrative effort. Export of files stored in SharePoint/OneDrive backing Teams channels is more straightforward.", "lastVerifiedAt": "2026-05-02" }, { "id": "dd38497f-9428-4200-82a3-6411f26f3526", "flagGroupId": "4bbb63af-d3aa-46e1-9dbe-2d1cf667c96a", "version": 1, "attachmentLevel": "vendor", "vendorId": "321b2428-cc10-429d-bb40-98e2f9d235b2", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "The European Commission designated Microsoft as a Digital Markets Act gatekeeper in 2023; Microsoft voluntarily unbundled Teams from Microsoft 365 in Europe in 2023 to address antitrust concerns.", "explanation": "The European Commission designated Microsoft as a DMA gatekeeper in September 2023. Earlier in 2023, ahead of DMA enforcement, Microsoft voluntarily unbundled Teams from its Microsoft 365 suite in Europe (and later globally) to address antitrust concerns about tying. The European Commission had also opened a formal antitrust investigation into Teams bundling in 2023 following a complaint from Slack (Salesforce). The unbundling means Teams is now separately priced in Microsoft 365, giving organisations more granular purchase options. This is a regulatory-driven governance improvement for customers.", "lastVerifiedAt": "2026-05-02" }, { "id": "b81121f5-c0a4-4c79-b3a2-3ea44c43f232", "flagGroupId": "4dd2ed6b-669f-4ef2-b548-086a12dbe31a", "version": 1, "attachmentLevel": "vendor", "vendorId": "321b2428-cc10-429d-bb40-98e2f9d235b2", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Microsoft has committed to being carbon-negative by 2030 and runs Azure infrastructure — which hosts Teams — on a high proportion of renewable energy, publishing detailed emissions accounting.", "explanation": "Microsoft has committed to being carbon negative by 2030 and to removing all historical carbon emissions by 2050 via the Carbon Moonshot initiative. Azure, the infrastructure underlying Teams, is matched to 100% renewable energy via Power Purchase Agreements and Renewable Energy Certificates across all data centre regions. Microsoft publishes detailed annual Sustainability Reports including scope 1, 2, and 3 emissions, and publishes per-product carbon data for Microsoft Cloud including Teams. Compared to most SaaS vendors, Microsoft's environmental transparency and commitments are strong.", "lastVerifiedAt": "2026-05-02" }, { "id": "a400949c-3b2e-4c20-b948-24d42bbc76c6", "flagGroupId": "f6dab450-f790-4db4-b9cd-cc9eedac20ad", "version": 1, "attachmentLevel": "vendor", "vendorId": "321b2428-cc10-429d-bb40-98e2f9d235b2", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 3, "headline": "Microsoft cut approximately 10,000 employees (under 5% of workforce) in January 2023 and made further reductions across gaming and other divisions in 2024.", "explanation": "In January 2023 Microsoft announced a global workforce reduction of approximately 10,000 employees (around 4.4% of its total workforce of ~221,000), citing macroeconomic pressures and over-hiring. This followed a period of significant growth during the pandemic. Further cuts in 2024 affected Microsoft's gaming division following the Activision Blizzard acquisition. These reductions are proportionally smaller than those at some peers and have not materially affected Microsoft Teams product continuity. The flag is included for completeness; the risk to Teams service continuity from these reductions is low.", "lastVerifiedAt": "2026-05-02" }, { "id": "296972eb-0dcd-4cc8-b819-37fce8d3b0c0", "flagGroupId": "dfab2fc2-0b45-4404-b890-4e00d6f23353", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "1b342130-fdab-4b9b-ac97-87058d39cb1a", "valence": "strength", "tier": 2, "headline": "Microsoft Teams provides live captions, real-time transcription, screen reader support (JAWS, NVDA, Narrator), and keyboard navigation across desktop and web clients.", "explanation": "Teams includes live automated captions in meetings and calls on all paid plan tiers. Real-time transcription (generating a text transcript during a meeting) is available on Microsoft 365 Business plans. Teams fully supports major screen readers including JAWS, NVDA, and Windows Narrator, and implements ARIA landmarks for web accessibility. Microsoft publishes a detailed Accessibility Conformance Report (VPAT) for Teams against WCAG 2.1 AA. The desktop application on Windows has more mature accessibility than the macOS or Linux clients.", "lastVerifiedAt": "2026-05-02" }, { "id": "9a8eb041-301f-4cec-98cb-388f520ff079", "flagGroupId": "2811508e-99bc-4a1d-b93a-6c77f99f640c", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "04a52a12-967d-4ed3-aa11-2a4d7d285cbb", "valence": "caution", "tier": 2, "headline": "In May 2024 Slack's privacy policy language was found to permit use of customer data to train machine learning models; Slack subsequently clarified that message content is not used for generative AI training without explicit opt-in.", "explanation": "In May 2024 it emerged that Slack's privacy principles contained language permitting Slack to use customer data — including messages, files, and content — to develop AI and ML models. After significant backlash from customers and press coverage in Wired and other outlets, Slack issued a clarification stating that it does not train generative AI models (such as large language models) on customer message content or files without customers explicitly opting in to Slack AI. Slack stated that it does use aggregated, non-message usage data (e.g., feature interaction patterns) to improve the service. The episode revealed that Slack's privacy communication can lag behind policy changes and that customers need to actively monitor terms changes and confirm opt-out status for AI features.", "lastVerifiedAt": "2026-05-02" }, { "id": "1da9600e-b59a-4074-96e3-315e1c08a84f", "flagGroupId": "ffea3467-dfce-4d7c-bd0d-ce654e16eba8", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "04a52a12-967d-4ed3-aa11-2a4d7d285cbb", "valence": "concern", "tier": 1, "headline": "Slack is operated by a US company and its infrastructure falls within reach of the CLOUD Act and FISA Section 702; Slack does not publish a comprehensive transparency report.", "explanation": "Slack Technologies, LLC is incorporated in Delaware and operates under US law. The CLOUD Act (2018) permits US law enforcement to compel Slack to produce customer data regardless of where it is stored. FISA Section 702 authorises intelligence agencies to collect data from US cloud providers without a conventional warrant. Slack's privacy policy acknowledges it may be required to disclose data in response to lawful government requests. Unlike Google, Microsoft, or Apple, Slack does not publish a detailed biannual transparency report breaking down the volume and nature of government data requests received and complied with. The absence of a published transparency report makes it impossible to assess how frequently Slack data is disclosed to law enforcement or intelligence agencies.", "lastVerifiedAt": "2026-05-02" }, { "id": "ebd73245-6bce-4a8b-9a93-5d1022a6b685", "flagGroupId": "a1d29205-fdd0-40e1-bb5c-7e3ecad8e5b4", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "04a52a12-967d-4ed3-aa11-2a4d7d285cbb", "valence": "concern", "tier": 2, "headline": "In December 2022 Slack disclosed that an attacker stole GitHub integration tokens and accessed private Slack GitHub repositories, exposing code and hashed tokens.", "explanation": "In December 2022 Slack disclosed a security incident in which a threat actor used stolen employee tokens from a third-party vendor to access a limited number of Slack's private GitHub repositories. The attacker downloaded repository code and exposed some internally stored credential tokens (which Slack promptly rotated). Slack stated at the time that no customer data, production environments, or primary code repositories were accessed. However the incident highlighted supply-chain security risks in Slack's development infrastructure and the risk of credential theft via third-party vendors. This incident followed a 2015 breach in which Slack user database information including email addresses and hashed passwords was accessed.", "lastVerifiedAt": "2026-05-02" }, { "id": "9bab0c95-403c-4767-97dc-e498636a26af", "flagGroupId": "7e86d42a-f575-4d6d-b65d-c55dbb721a0e", "version": 1, "attachmentLevel": "vendor", "vendorId": "186ba367-1c4f-44a1-a97c-633ac117d48d", "suiteId": null, "serviceId": null, "valence": "caution", "tier": 2, "headline": "Salesforce's 2021 acquisition of Slack creates a risk that Slack workspace data may be combined with Salesforce CRM and marketing data in Salesforce's Data Cloud platform.", "explanation": "Since Salesforce's $27.7 billion acquisition of Slack in 2021, Salesforce has progressively integrated Slack into its broader platform. The Salesforce Data Cloud product is designed to unify customer data from multiple Salesforce products — including Salesforce CRM, Marketing Cloud, and Slack — for AI and analytics purposes. An organisation using both Salesforce CRM and Slack should carefully review its Salesforce data-sharing agreements and Slack privacy settings to understand what data flows between the two products and whether Slack conversation data could be surfaced in CRM or AI contexts. Organisations that do not use Salesforce CRM are less exposed, but the long-term direction of integration is a risk to monitor.", "lastVerifiedAt": "2026-05-02" }, { "id": "63e5a5a8-3624-497f-9478-d49535cdd28e", "flagGroupId": "3a42d6c6-2f48-4536-80af-5f4f98902a9e", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "04a52a12-967d-4ed3-aa11-2a4d7d285cbb", "valence": "concern", "tier": 1, "headline": "Slack offers no self-hosted deployment option; all plans require customer data to be processed on Slack's cloud infrastructure.", "explanation": "Unlike open source messaging alternatives (Mattermost, Matrix/Element), Slack has no self-hosted or on-premises deployment option on any plan tier — including Enterprise Grid. All customer messages, files, and metadata are stored and processed on infrastructure operated by Slack (using Amazon Web Services). Organisations with data residency, sovereignty, or regulatory requirements that preclude cloud-only storage have no way to satisfy them using Slack.", "lastVerifiedAt": "2026-05-02" }, { "id": "4a8917c8-566e-4649-946e-cbff63986fac", "flagGroupId": "83e860c6-8cc2-46e7-b6e4-e9a76ca852a4", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "04a52a12-967d-4ed3-aa11-2a4d7d285cbb", "valence": "caution", "tier": 2, "headline": "EU data residency (all data stored in EU AWS regions) is only available on the Enterprise Grid plan; Pro and Business+ customers cannot request EU-only data storage.", "explanation": "Slack offers EU data residency — where all primary customer data at rest and in transit is stored within the European Union (AWS Frankfurt) — but only on its highest-tier Enterprise Grid plan. Customers on Free, Pro, or Business+ plans cannot select EU data residency. Those customers' data may be stored in AWS US regions by default. The Enterprise Grid threshold makes EU data residency inaccessible to the vast majority of organisations, including most SMEs and nonprofits.", "lastVerifiedAt": "2026-05-02" }, { "id": "9ef8bfed-e45c-409e-a3d4-0acfec66a96c", "flagGroupId": "910f5716-e19a-4563-8ad9-b3b5e1958535", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "04a52a12-967d-4ed3-aa11-2a4d7d285cbb", "valence": "concern", "tier": 1, "headline": "Slack is entirely closed source; no server or client code is publicly available for independent security review.", "explanation": "Slack does not publish source code for its server infrastructure, web client, desktop applications, or mobile apps. Independent security researchers cannot audit the encryption implementation, data-handling logic, or AI feature behaviour without reverse engineering. This is particularly significant in the context of the 2024 AI/ML training controversy, where the opacity of Slack's internal systems made it impossible for customers to verify the company's reassurances directly.", "lastVerifiedAt": "2026-05-02" }, { "id": "12a564cf-2afb-4469-b2c9-e2719aa79323", "flagGroupId": "f5383d8d-26f4-4d19-b116-908e39012010", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "04a52a12-967d-4ed3-aa11-2a4d7d285cbb", "valence": "concern", "tier": 2, "headline": "Free and Pro plan users can only export their own messages; full workspace data export (all channels, all messages) requires Business+ or higher.", "explanation": "Slack's data export capabilities are severely gated by plan tier. On the Free plan, only public channel messages are exportable by workspace admins, and the free tier limits message history to the most recent 90 days (searchable). Pro plan admins can export public channel data but not private channels or direct messages without Slack's approval via a special request process. Full exports of all message history — including private channels and DMs — require Business+ or Enterprise Grid. This creates meaningful data lock-in: organisations on lower tiers accumulate messaging history they cannot fully export, and switching to another platform means either losing message history or upgrading to a more expensive tier solely to extract their data.", "lastVerifiedAt": "2026-05-02" }, { "id": "dbc3df71-e703-4ebf-a235-5989b79d7907", "flagGroupId": "0f04cb68-ccf6-423f-82f0-4876015cddfe", "version": 1, "attachmentLevel": "vendor", "vendorId": "186ba367-1c4f-44a1-a97c-633ac117d48d", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Slack is wholly owned by Salesforce, Inc. (NYSE: CRM); product direction and data policies are set by Salesforce's commercial priorities as a publicly traded company.", "explanation": "Salesforce acquired Slack in 2021 for $27.7 billion — one of the largest enterprise software acquisitions in history. Since the acquisition Slack has been progressively integrated into the Salesforce product family: Salesforce has launched Slack AI, integrated Slack with Salesforce Customer 360, and incorporated Slack into Salesforce Data Cloud. Slack's roadmap and data policies are now governed by Salesforce's priorities as a publicly traded corporation with institutional shareholders. There is no independent Slack board or governance structure that can override Salesforce decisions.", "lastVerifiedAt": "2026-05-02" }, { "id": "28cceeff-761c-4cf6-a640-aa2150f0e333", "flagGroupId": "a69ff46f-2a71-4e65-aaaa-b5057251d792", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "04a52a12-967d-4ed3-aa11-2a4d7d285cbb", "valence": "context", "tier": 3, "headline": "Slack runs on Amazon Web Services; AWS has a stated goal of 100% renewable energy by 2025 but has not achieved it in all regions; Slack does not publish separate carbon data.", "explanation": "Slack's infrastructure is hosted on Amazon Web Services. AWS has published a commitment to match 100% of electricity consumption with renewable energy by 2025, and publishes Carbon Intensity data by region. However not all AWS regions achieve this target, and the specific regions used by Slack for customer data processing are not disclosed in detail. Salesforce has committed to achieving net-zero emissions across its operations by 2040, but Slack is not addressed separately in Salesforce's sustainability reporting. Organisations with zero-carbon supply chain commitments cannot independently verify the carbon intensity of their Slack usage.", "lastVerifiedAt": "2026-05-02" }, { "id": "b4762a62-cfa9-4a12-a5ca-c24de4015dcb", "flagGroupId": "d56f1adb-2f66-430d-9f08-0e8abff514de", "version": 1, "attachmentLevel": "vendor", "vendorId": "186ba367-1c4f-44a1-a97c-633ac117d48d", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Salesforce cut approximately 8,000 employees (10% of workforce) in January 2023 and a further 700 roles in October 2024, including staff on the Slack team.", "explanation": "In January 2023 Salesforce CEO Marc Benioff announced a global workforce reduction of approximately 8,000 people (around 10% of the total workforce), citing over-hiring during the pandemic period. A further restructuring in late 2023 and additional reductions in 2024 affected more Salesforce employees. Slack, as a Salesforce division, was subject to these reductions. Slack product and engineering teams were affected. The cuts represent a significant shift from Salesforce's high-growth hiring period and reflect investor pressure on margins following the economic downturn of 2022-2023.", "lastVerifiedAt": "2026-05-02" }, { "id": "4dbf1d76-c911-4194-99da-80a570d0adf0", "flagGroupId": "3cd1b36c-6609-4508-aaa3-20129e9bca2d", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "04a52a12-967d-4ed3-aa11-2a4d7d285cbb", "valence": "strength", "tier": 2, "headline": "Slack supports keyboard navigation, screen readers (JAWS, NVDA, VoiceOver), and live captions in Slack Huddles audio/video calls.", "explanation": "Slack provides accessibility features including full keyboard navigation, documented support for major screen readers (JAWS, NVDA on Windows; VoiceOver on macOS and iOS), and high contrast mode. Slack Huddles — the audio and video call feature — includes live automated captions powered by automated speech recognition. Slack publishes an accessibility statement and a VPAT (Voluntary Product Accessibility Template) documenting its conformance to WCAG 2.1 criteria. The desktop app is more accessible than the mobile app.", "lastVerifiedAt": "2026-05-02" }, { "id": "a793a533-30d8-4fe0-a1e8-f39a87fe6823", "flagGroupId": "41e0ca4d-8649-41cb-ae46-3d0fd3af9f66", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "f1726a97-7cfa-4e41-b529-c4762118d11a", "valence": "concern", "tier": 2, "headline": "WordPress's plugin ecosystem (60,000+ plugins) introduces variable data handling practices; poorly maintained or malicious plugins can introduce privacy and security vulnerabilities.", "explanation": "WordPress's extensive plugin ecosystem is both its greatest strength and a significant risk vector. Plugins can collect and transmit data to third parties, introduce tracking code (analytics, advertising), or contain security vulnerabilities. The WordPress.org plugin directory does not guarantee security or privacy compliance for listed plugins. Website owners must audit each plugin they install for data handling, maintenance status, and security history. High-profile plugin vulnerabilities have historically affected millions of websites. Popular plugins like Jetpack (Automattic) phone home to Automattic's servers; many newsletter, SEO, and analytics plugins transmit data to third parties.", "lastVerifiedAt": "2026-05-03" }, { "id": "df8aaf9a-049d-41d3-b26f-ccc8daaf594d", "flagGroupId": "fd2ef9a9-c786-4231-bc07-d1b163d6d7dc", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "f1726a97-7cfa-4e41-b529-c4762118d11a", "valence": "strength", "tier": 1, "headline": "Self-hosted WordPress can be deployed on any hosting provider in any jurisdiction; EU organisations can host entirely on EU infrastructure compliant with GDPR.", "explanation": "WordPress.org software runs on any PHP/MySQL web hosting environment. EU organisations can choose EU-based, GDPR-compliant hosting providers (such as Hetzner, OVHcloud, or IONOS) to ensure all website data is processed in the EU. This is a significant advantage over SaaS website builders (Squarespace, Wix) where data jurisdiction is determined by the provider. Website owners have full choice of hosting jurisdiction.", "lastVerifiedAt": "2026-05-03" }, { "id": "64b39ea5-3fcd-4259-a580-440a4dc9cd15", "flagGroupId": "a878373c-d73c-4a72-9b6a-5ed93077e411", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "f1726a97-7cfa-4e41-b529-c4762118d11a", "valence": "strength", "tier": 1, "headline": "WordPress is licensed under GPL v2 and provides comprehensive content import/export in WordPress XML format, REST API access, and the ability to migrate between hosts with full data intact.", "explanation": "WordPress's GPL v2 licence means the software is free, open, and cannot be made proprietary by any organisation. Content can be exported via the WordPress Exporter tool (XML) covering all posts, pages, comments, custom fields, categories, and tags. WordPress supports content import from other platforms (Blogger, RSS, Movable Type, Squarespace XML). The REST API provides programmatic access to all content. WordPress databases can be migrated between hosting providers (migration plugins like Duplicator, All-in-One WP Migration make this straightforward). This is the highest content portability available in any CMS.", "lastVerifiedAt": "2026-05-03" }, { "id": "a692f8dd-a3b3-4c47-a096-8a80f890127a", "flagGroupId": "8150f870-bfb5-48fd-b2ca-5286e25c0d7a", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "strength", "tier": 1, "headline": "Proton Mail applies end-to-end encryption to email content, meaning Proton itself cannot read message contents.", "explanation": "According to Proton's privacy policy and transparency report, all emails are encrypted and Proton has no means to decrypt them. The company states that messages are encrypted on the sender's device before transmission and can only be opened by the intended recipient. This zero-access architecture means that even in the event of a server breach, message contents would remain unreadable to third parties.", "lastVerifiedAt": "2026-05-02" }, { "id": "38ac99c3-3178-4091-aaaa-623e3337a0ba", "flagGroupId": "6c93772c-e31b-42dd-99ad-fc86bee87a22", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "context", "tier": 2, "headline": "Proton Mail complied with 8,313 of 9,301 legal orders in 2025, all routed through Swiss legal channels.", "explanation": "Proton's transparency report shows that in 2025 it received 9,301 legal orders for Proton Mail user information, contested 988, and complied with 8,313. Proton states it only acts on requests validated by Swiss authorities and rejects direct requests from foreign law enforcement under Article 271 of the Swiss Criminal Code. Because email content is end-to-end encrypted, complied orders are limited to metadata and account-level information rather than message contents.", "lastVerifiedAt": "2026-05-02" }, { "id": "5d18e9ef-3793-4363-b1b2-33d694931e4d", "flagGroupId": "a95ef3f3-ce6c-43dc-974a-3fe5405e475e", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "strength", "tier": 1, "headline": "Proton states it does not sell advertising and cannot share user data due to its encryption architecture.", "explanation": "Proton's homepage states that it does not sell ads and that its end-to-end and zero-access encryption mean it lacks the technical means to access user data for sharing purposes. The company positions this as a structural constraint rather than a policy choice alone, arguing that the encryption model prevents data monetisation even if Proton were compelled or chose to do so.", "lastVerifiedAt": "2026-05-02" }, { "id": "fc41428e-3fce-4691-a29f-7e8366918c01", "flagGroupId": "4f6ca81c-1dbf-41d8-baa4-4d7c627d86f5", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "strength", "tier": 2, "headline": "Proton's Lumo AI assistant is designed so that conversation data does not train language models, with at-rest zero-access encryption applied to conversation history.", "explanation": "The Lumo security model blog post states that users should be able to share sensitive information with the AI assistant without fearing their data will train language models. Proton describes applying zero-access encryption to conversation history at rest and a custom encryption pathway (User-to-Lumo encryption) for data in transit to the language model. The post acknowledges that full end-to-end encryption for AI inference is not yet technically feasible at practical speeds, but describes compensating controls.", "lastVerifiedAt": "2026-05-02" }, { "id": "33417d41-3938-4fe8-8d21-47d3dfdef759", "flagGroupId": "00c7eaf7-4f4b-459f-b768-10a1e36ec972", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "c4a9124a-c45e-4f15-b75a-fecd4f697f88", "valence": "strength", "tier": 1, "headline": "Signal applies end-to-end encryption by default to all messages and calls using the open-source Signal Protocol.", "explanation": "Signal's homepage states that end-to-end encryption is applied to every message and every call, every time, powered by the open-source Signal Protocol. The service asserts it cannot read messages or listen to calls, and that no third party can either. Encryption is described not as an optional mode but as the default and only operating mode of the service.", "lastVerifiedAt": "2026-05-02" }, { "id": "19125eaa-a820-4a81-8795-c13450ab894c", "flagGroupId": "311d5c96-16ef-45a2-94aa-ec86f981226b", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "c4a9124a-c45e-4f15-b75a-fecd4f697f88", "valence": "strength", "tier": 1, "headline": "Signal states it operates with no advertisements, no affiliate marketers, and no user tracking.", "explanation": "Signal's homepage explicitly states there are 'no ads, no affiliate marketers, and no creepy tracking in Signal.' This indicates the service does not engage in behavioural profiling or data monetisation through advertising partnerships, which distinguishes it from many consumer messaging services that fund operations through targeted advertising.", "lastVerifiedAt": "2026-05-02" }, { "id": "a2e234ab-58c5-4265-86b2-b8a34d52cbf5", "flagGroupId": "514fd648-28b4-4573-b745-f27952d40147", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "c4a9124a-c45e-4f15-b75a-fecd4f697f88", "valence": "strength", "tier": 1, "headline": "Signal is structured as an independent nonprofit with no major tech company ownership, limiting commercial data-sharing incentives.", "explanation": "Signal's homepage describes the service as an independent nonprofit that is not tied to any major tech company and states it 'can never be acquired by one either.' The service is funded by grants and donations rather than advertising revenue. This organisational structure reduces structural incentives to share or sell user data to commercial third parties, which is a meaningful distinction from messaging services operated by large advertising-driven technology companies.", "lastVerifiedAt": "2026-05-02" }, { "id": "7d0c8efa-1b59-4eaf-b3e0-c733138ab06c", "flagGroupId": "b96210a2-cc5a-4403-8ce5-966463341885", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "c4a9124a-c45e-4f15-b75a-fecd4f697f88", "valence": "context", "tier": 2, "headline": "Signal is operated by the Signal Technology Foundation, a US-based nonprofit incorporated in California.", "explanation": "The Signal homepage describes Signal as 'an independent nonprofit' that is 'not tied to any major tech companies'. As a US-incorporated entity, Signal Technology Foundation is subject to US federal law, including potential compulsion under FISA Section 702 and the CLOUD Act, regardless of where data may be physically stored. This is relevant context for UK and EU users assessing their exposure to US legal jurisdiction.", "lastVerifiedAt": "2026-05-02" }, { "id": "f3ad7d7e-6935-4fca-a8b8-1de3c1074670", "flagGroupId": "fd5c594d-4080-42ee-9d4c-97416c281d06", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "c4a9124a-c45e-4f15-b75a-fecd4f697f88", "valence": "strength", "tier": 2, "headline": "Signal's end-to-end encryption means message content is technically inaccessible to Signal even under legal compulsion.", "explanation": "The Signal homepage states: 'We can't read your messages or listen to your calls, and no one else can either.' This is a consequence of end-to-end encryption using the open-source Signal Protocol. In practice, this means that even if Signal were served with a lawful demand under US law (e.g. FISA Section 702 or a CLOUD Act order), it would be technically unable to produce plaintext message content. This is a meaningful distinction from services that hold decryption keys. However, Signal may still hold some metadata (such as account registration information or last connection timestamps), which could be subject to legal compulsion.", "lastVerifiedAt": "2026-05-02" }, { "id": "99000062-5491-47a7-ac1a-ff9b5b9cc4fc", "flagGroupId": "1ce928b4-b3ec-4b42-800d-ae1ed8ea3992", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "c4a9124a-c45e-4f15-b75a-fecd4f697f88", "valence": "strength", "tier": 1, "headline": "Signal's core encryption is powered by the open-source Signal Protocol, as stated on the Signal homepage.", "explanation": "The Signal homepage explicitly states that end-to-end encryption is \"powered by the open source Signal Protocol\". The Signal Protocol is a widely reviewed cryptographic protocol whose source code is publicly available, enabling independent security audits and third-party implementations. This openness is a material differentiator from many proprietary messaging services.", "lastVerifiedAt": "2026-05-02" }, { "id": "138efe77-1ecc-4aa6-ba78-7dc9bc9dba1d", "flagGroupId": "77e00164-6074-400d-be6b-ccc3c9d142b0", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "c4a9124a-c45e-4f15-b75a-fecd4f697f88", "valence": "strength", "tier": 1, "headline": "Signal is operated by an independent nonprofit organization with no major tech company ownership.", "explanation": "Signal's homepage states that it is 'an independent nonprofit' that is 'not tied to any major tech companies.' This nonprofit structure distinguishes Signal from most messaging services, which are owned by large commercial entities. The nonprofit form typically limits profit-extraction incentives and may provide structural protections for the service's stated mission.", "lastVerifiedAt": "2026-05-02" }, { "id": "81b31c65-ea07-4866-a337-34db274dcb8d", "flagGroupId": "d9c309db-7a01-44a5-a918-9516cc6c54ea", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "c4a9124a-c45e-4f15-b75a-fecd4f697f88", "valence": "strength", "tier": 1, "headline": "Signal's homepage states the organization 'can never be acquired' by a major tech company.", "explanation": "Signal's homepage includes the explicit claim that it 'can never be acquired by one either,' referring to major tech companies. If this restriction is embedded in the organization's governing documents, it would represent a structural safeguard against the type of acquisition that has historically led to privacy or policy changes at other messaging services. The basis and enforceability of this claim warrants editorial verification.", "lastVerifiedAt": "2026-05-02" }, { "id": "0c79c5b8-ac67-472c-a01d-dd182a108278", "flagGroupId": "c7b5fd5b-f792-4663-84eb-ae8a104d2de8", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "c4a9124a-c45e-4f15-b75a-fecd4f697f88", "valence": "strength", "tier": 2, "headline": "Signal is funded by grants and individual donations rather than advertising or venture capital.", "explanation": "Signal's homepage states that 'development is supported by grants and donations from people like you' and includes a direct donation prompt. The homepage also explicitly states there are 'no ads, no affiliate marketers.' This donor-and-grant funding model means Signal does not rely on monetizing user data or attention, which is structurally distinct from ad-supported messaging services.", "lastVerifiedAt": "2026-05-02" }, { "id": "47f35f89-5880-4eb9-8a47-8027bc198f4a", "flagGroupId": "a3e1bf37-d37f-4399-86f0-c69dbf35e371", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "c4a9124a-c45e-4f15-b75a-fecd4f697f88", "valence": "strength", "tier": 2, "headline": "signal.org is classified as green-hosted by the Green Web Foundation, served via Cloudflare.", "explanation": "The Green Web Foundation's live check records signal.org as green-hosted, attributing this to Cloudflare as the hosting provider. This classification is based on Cloudflare's documented energy and emissions commitments rather than a Signal-specific renewable energy purchase or certificate.", "lastVerifiedAt": "2026-05-02" }, { "id": "967798ff-3923-46ae-9b94-518eb9c87f5a", "flagGroupId": "085f62fa-9f2e-4b6d-97cc-92a4918b6e35", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "c4a9124a-c45e-4f15-b75a-fecd4f697f88", "valence": "caution", "tier": 2, "headline": "Signal's green-hosting status is inherited from Cloudflare's infrastructure commitments, with no Signal-specific renewable energy verification available.", "explanation": "Because signal.org's green classification flows entirely from Cloudflare's corporate energy and emissions programme rather than from any renewable energy commitment made by Signal itself, the verifiability of the green claim is contingent on Cloudflare's disclosures. Cloudflare publishes an emissions inventory (2023), which provides some third-party grounding, but Signal has made no independently verifiable renewable energy commitment of its own. This means the strength of the green-hosting designation depends on how robustly Cloudflare's claims are substantiated.", "lastVerifiedAt": "2026-05-02" }, { "id": "3fb42a80-d4c5-46c9-a951-4d319a5e3aa3", "flagGroupId": "1d1342de-f454-4236-8897-c9c840f0b2ae", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "c4a9124a-c45e-4f15-b75a-fecd4f697f88", "valence": "concern", "tier": 3, "headline": "Signal publishes no emissions disclosure, sustainability report, or environmental policy of its own.", "explanation": "Signal's homepage contains no reference to energy use, carbon emissions, or environmental commitments. No Signal-authored sustainability report, emissions inventory, or environmental policy document was identified in the available sources. The only emissions data in the source inventory relates to Cloudflare, Signal's CDN provider, not to Signal as an organisation. For an independent nonprofit operating messaging infrastructure at scale, the absence of any Scope 1, 2, or 3 disclosure is a notable gap relative to peers that publish at least partial emissions data.", "lastVerifiedAt": "2026-05-02" }, { "id": "42557124-839f-4f45-8c82-08706588d392", "flagGroupId": "cc2d9649-6993-443b-b581-0a210972aca3", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "c4a9124a-c45e-4f15-b75a-fecd4f697f88", "valence": "strength", "tier": 2, "headline": "Signal is structured as an independent nonprofit, precluding acquisition by major tech companies.", "explanation": "Signal's homepage states that it is an independent nonprofit not tied to any major tech companies and that it cannot be acquired by one. Development is funded through grants and donations rather than advertising or investor returns. This structure may have implications for employment practices, as the organisation is not subject to the same shareholder-driven cost pressures as for-profit technology companies, though it also means workforce size and compensation data are less publicly scrutinised than at publicly traded peers.", "lastVerifiedAt": "2026-05-02" }, { "id": "31bfd695-7f0c-4a24-bfc0-7b645c931653", "flagGroupId": "661ae960-f1ce-41fb-945e-1d2d9f62b0ae", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "c4a9124a-c45e-4f15-b75a-fecd4f697f88", "valence": "concern", "tier": 2, "headline": "No accessibility statement or WCAG compliance information is present on the Signal homepage or within the provided source inventory.", "explanation": "The Signal homepage (signal.org) focuses on privacy and security features and contains no reference to accessibility commitments, WCAG compliance levels, or assistive technology support. No dedicated accessibility statement page was available in the source inventory. The absence of a public accessibility statement makes it impossible to assess Signal's formal accessibility posture from the provided materials.", "lastVerifiedAt": "2026-05-02" }, { "id": "f608d4c8-dbe8-482b-aaa2-9efc3161a95c", "flagGroupId": "6447655e-f184-4237-8e81-8e3f0c7b52b7", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "strength", "tier": 1, "headline": "Tuta states it does not use user communication data for AI training and has no plans to develop AI features that process personal data.", "explanation": "Tuta's privacy page includes an explicit statement on AI usage, stating the company does not plan to invest in AI that processes user data, and that user communication should remain private and not be processed by cloud-based AI models. This is a direct, affirmative policy statement rather than a silence on the topic.", "lastVerifiedAt": "2026-05-02" }, { "id": "96d29cbc-e09b-4db2-b128-dc86fa87546f", "flagGroupId": "5dbaee23-2190-4ad2-92a9-9db6d70dbafe", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "strength", "tier": 1, "headline": "Tuta applies end-to-end encryption to email content, calendar data, and contacts using post-quantum cryptography across all clients.", "explanation": "Tuta states that all user data is encrypted end-to-end, including email bodies, calendar entries, and contacts, using post-quantum cryptographic algorithms. The service operates its own full client stack (web, Android, iOS, desktop) without relying on third-party mail infrastructure such as Dovecot or Roundcube, which the company argues reduces the risk of data leakage to external dependencies. The encryption is described as zero-knowledge, meaning Tuta itself cannot access the plaintext content of stored data.", "lastVerifiedAt": "2026-05-02" }, { "id": "b3febd61-6ef8-463d-be03-9441cf9895a9", "flagGroupId": "3bd9dcd9-281c-4ca8-9c4a-d99d7bc9608e", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "strength", "tier": 1, "headline": "Tuta's client applications (web, Android, iOS, and all desktop clients) are described as open source and built entirely in-house.", "explanation": "The security page states that Tuta has built its entire client suite — web, Android, iOS, and all desktop clients — independently, and characterises the service as 'open source'. The page also notes that any third-party open source tools used are reviewed internally before adoption. This in-house, open source approach is presented as a deliberate security and transparency measure rather than incidental practice.", "lastVerifiedAt": "2026-05-02" }, { "id": "fe2a4961-e916-494a-86aa-aae9fa7dc61a", "flagGroupId": "fbc5a93a-b6e4-4e97-8ab5-4bfed429deaf", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "strength", "tier": 1, "headline": "Tuta states it does not use advertising-based tracking or behavioural profiling, and avoids third-party services such as Google reCaptcha or Google Push.", "explanation": "Tuta explicitly positions its business model as subscription-funded rather than advertiser-funded, and states it does not build user profiles for advertising purposes. The security page specifically identifies use of third-party services like Google reCaptcha and Google Push as practices that leak user information, and states Tuta avoids these. The company also states it built its own Android push notification system to avoid routing event data through Google's infrastructure.", "lastVerifiedAt": "2026-05-02" }, { "id": "8b9a82e9-9a5b-43d0-8f89-0b7e80e15436", "flagGroupId": "89e270f9-14da-483d-a9ef-acbcd85c143e", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "concern", "tier": 2, "headline": "No WCAG conformance level is stated or referenced in any available Tuta source material.", "explanation": "Across the homepage, privacy, terms, and security pages, Tuta makes no reference to WCAG 2.x or any other accessibility standard. Without a stated conformance level or audit result, it is not possible to assess the service's compliance with recognised accessibility standards from the available evidence alone.", "lastVerifiedAt": "2026-05-02" }, { "id": "e4f3d1ed-6285-4df7-903b-31fd08c16197", "flagGroupId": "e3d671bb-56ff-419b-b19c-f067d3105350", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "strength", "tier": 2, "headline": "Tuta describes its data collection as minimal, with email content and calendar data encrypted such that Tuta cannot access plaintext.", "explanation": "Tuta's public materials consistently describe a minimal data collection posture. Because content is end-to-end encrypted, Tuta states it cannot read email bodies, calendar entries, or contacts. The company contrasts this with surveillance-capitalist models that collect behavioural data for profiling. However, the available sources do not provide a detailed enumeration of what metadata (e.g., IP addresses, timestamps, sender/recipient addresses) is collected or retained, which limits the specificity of this flag.", "lastVerifiedAt": "2026-05-02" }, { "id": "f56ef924-037c-4b7e-b2b2-dae811ae3a0f", "flagGroupId": "a3fe6a71-fe50-4a53-8368-aa0b18971389", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "context", "tier": 2, "headline": "Tuta is headquartered in Germany and subject to German and EU law, including potential legal orders for account metadata disclosure.", "explanation": "Tuta (formerly Tutanota) is operated by Tuta Mail GmbH, based in Hanover, Germany, placing it under German jurisdiction and EU data protection law (GDPR). While E2E encryption means Tuta cannot provide plaintext email content in response to legal orders, metadata such as account registration information, IP address logs, and message timestamps may be accessible to authorities under German law. Germany is not a member of the Five Eyes intelligence alliance, which some privacy-focused users consider relevant. The available sources do not include a transparency report or specific disclosure of the volume or nature of government requests received.", "lastVerifiedAt": "2026-05-02" }, { "id": "b7077e1a-b967-4169-a5d5-e5c54f6e58f3", "flagGroupId": "1683ce77-7c3e-4449-a2d8-6db391a8b6b6", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "strength", "tier": 1, "headline": "Tuta states it does not sell user data or share it with advertisers, operating on a subscription revenue model.", "explanation": "Tuta explicitly contrasts its business model with advertising-funded services, stating that advertiser-funded services cannot offer truly private solutions because their priority is identifying target audiences from user data. Tuta's revenue model is described as subscription-based, which the company presents as structurally incompatible with data monetisation. No evidence of data sale or advertiser data sharing was found in the available sources.", "lastVerifiedAt": "2026-05-02" }, { "id": "b9e10fe4-0c34-412f-ac3c-cbb812b39ce6", "flagGroupId": "477f6dd9-2042-4f22-8835-1a552694a1bc", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "strength", "tier": 1, "headline": "Tutanota is operated by Tutao GmbH, a company incorporated and headquartered in Hanover, Germany, placing it under German and EU law.", "explanation": "The Terms and Conditions identify the operating entity as Tutao GmbH, with a registered address at Deisterstr. 17a, 30449 Hanover, Germany. Germany is an EU member state, meaning Tutao GmbH is subject to the GDPR and German telecommunications law (TKG), and is not subject to US extraterritorial frameworks such as FISA Section 702 or the CLOUD Act. The governing law clause in the Terms explicitly states that the German version of the Terms prevails in any dispute, reinforcing the German legal nexus.", "lastVerifiedAt": "2026-05-02" }, { "id": "4d889d68-d74a-4724-9a0b-12b58fd64494", "flagGroupId": "871bf33c-7f73-4a73-81a7-a3e74361813a", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "strength", "tier": 1, "headline": "As a German-incorporated entity, Tutao GmbH has no legal obligation to comply with US FISA Section 702 orders or CLOUD Act requests.", "explanation": "Because Tutao GmbH is incorporated in Germany with no identified US corporate presence, it falls outside the jurisdictional reach of US surveillance statutes including FISA Section 702 and the CLOUD Act, which apply to US persons and entities or those with a sufficient US nexus. Any government data requests directed at Tutao GmbH would need to proceed through German legal channels or EU mutual legal assistance treaty (MLAT) processes, which carry judicial oversight requirements. This is a material distinction from email providers incorporated in the United States.", "lastVerifiedAt": "2026-05-02" }, { "id": "e718e68b-5cd4-41a5-83cd-939fece5d45f", "flagGroupId": "5a6cdb5c-ddc3-400f-a8f3-3117c0fe03cd", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "strength", "tier": 2, "headline": "Tutao GmbH's Terms of Service and corporate address indicate operations based in Germany, but the provided sources do not contain an explicit contractual guarantee of EU-only data storage.", "explanation": "The Terms and Conditions confirm that Tutao GmbH is a German company operating under German law. The homepage and privacy page emphasise strong encryption and privacy protections. However, none of the provided source documents contain an explicit statement specifying the physical location of data centres or a contractual commitment that user data is stored exclusively within the EU or Germany. The encryption-first architecture (end-to-end and zero-knowledge) means that even if data were stored outside the EU, it would be encrypted and inaccessible to the provider, which partially mitigates residency concerns. Editors should seek Tutao's dedicated infrastructure or data centre documentation to confirm or deny an explicit residency guarantee.", "lastVerifiedAt": "2026-05-02" }, { "id": "d4ac4cf7-28db-4d0a-a5eb-2315ae00900c", "flagGroupId": "2c61dd3f-60ac-4259-9a6a-5dcc9c98a832", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "concern", "tier": 3, "headline": "None of the provided source documents contain a transparency report or statistics on government data requests received by Tutao GmbH.", "explanation": "The source inventory for this assessment does not include a transparency report or equivalent disclosure from Tutao GmbH. The homepage, privacy page, terms, and security page do not reference the number or nature of government data requests received, warrants complied with, or legal demands contested. The absence of such a document in the provided sources means this dimension cannot be positively assessed from the available evidence. Many privacy-focused email providers publish annual transparency reports; the editor should determine whether Tutao does so on a page not included in this source inventory.", "lastVerifiedAt": "2026-05-02" }, { "id": "cf0ff476-d5a8-4492-adb3-7e8159c7f223", "flagGroupId": "5f5dd485-cfc5-4458-a0db-3e6a6fc4fc1b", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "concern", "tier": 2, "headline": "Tuta does not support standard email protocols (IMAP/SMTP/POP3), preventing use with third-party email clients.", "explanation": "The security page explicitly criticises other providers for relying on third-party components such as Dovecot and Roundcube — components that implement standard IMAP/SMTP protocols. Tuta's stated approach of building all clients entirely in-house, combined with its end-to-end encryption architecture, means it does not expose standard IMAP, SMTP, or POP3 interfaces. Users must access their email exclusively through Tuta's own applications or web interface. This is a meaningful departure from the open standards that allow interoperability across the broader email ecosystem.", "lastVerifiedAt": "2026-05-02" }, { "id": "af3c6c2b-5615-47eb-9f9a-e249a3c34e11", "flagGroupId": "8645d531-d5b7-4bdf-b51c-8dfb5b9fdfa7", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "concern", "tier": 2, "headline": "No information about email or calendar data export capabilities is present in the available source materials.", "explanation": "None of the provided sources — homepage, privacy policy, terms of service, or security page — describe mechanisms for users to export their email, calendar, or contact data in standard formats (e.g., EML, MBOX, ICS, vCard). The absence of this information in key user-facing documents means it is not straightforward for prospective users to assess portability before committing to the service.", "lastVerifiedAt": "2026-05-02" }, { "id": "11e017fb-edd1-477e-b3c1-733e3891576a", "flagGroupId": "3e70c83c-478c-4c42-bd14-eec18cf256fe", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "concern", "tier": 2, "headline": "No public API documentation or third-party integration capabilities are referenced in the available source materials.", "explanation": "The homepage, security page, privacy policy, and terms of service contain no mention of a public API, webhooks, or supported third-party integrations. Tuta's architecture, as described on the security page, is built entirely on proprietary in-house clients with no reliance on standard protocol components, which is consistent with a closed integration model. The absence of any API documentation reference in user-facing materials suggests limited or no programmatic access for third-party developers.", "lastVerifiedAt": "2026-05-02" }, { "id": "ad69ef02-e3e0-4998-923b-c2955714deb9", "flagGroupId": "613de9bc-72a6-4782-b932-df3ee9226389", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "concern", "tier": 2, "headline": "Tuta's proprietary encryption and client architecture create migration friction: incoming emails from external senders are received in standard form, but the absence of IMAP/SMTP and undocumented export tools may complicate bulk migration away from the service.", "explanation": "Because Tuta does not support standard IMAP or SMTP protocols and builds all clients in-house, users cannot use generic email migration tools that rely on these protocols to move data to another provider. The security page's description of a fully proprietary stack, combined with the absence of any export documentation in the provided sources, suggests that migrating a large mailbox away from Tuta would require using Tuta's own tooling — the scope and capability of which is not described in the available materials.", "lastVerifiedAt": "2026-05-02" }, { "id": "6980f70d-c7ab-470f-99fb-bef2651f5f39", "flagGroupId": "35d7de35-89ab-4b66-ba10-513813b51854", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "context", "tier": 2, "headline": "Tutanota is operated by Tutao GmbH, a private limited company registered in Hanover, Germany.", "explanation": "The Terms and Conditions identify the legal entity as Tutao GmbH, headquartered at Deisterstr. 17a, 30449 Hanover, Germany. As a GmbH (Gesellschaft mit beschränkter Haftung), the service is structured as a private limited company under German law. This places it outside foundation or cooperative ownership models but also outside publicly traded structures. German incorporation subjects the company to EU/GDPR jurisdiction.", "lastVerifiedAt": "2026-05-02" }, { "id": "b6df1f9c-8072-4f6c-ae6d-620b537071de", "flagGroupId": "dbd3cb2b-9329-40c2-a796-89e227f33521", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "strength", "tier": 2, "headline": "Tuta's stated revenue model relies on paid subscription tiers rather than advertising or data monetisation.", "explanation": "The homepage and privacy page describe the service as ad-free and state that user data is not used for advertising or profiling. User testimonials on the homepage reference paying for subscriptions specifically to support the company. The privacy page explicitly contrasts Tuta's model with 'surveillance capitalists like Google and Facebook' who monetise data. No mention of venture capital, external investment rounds, or donor funding appears in the provided sources.", "lastVerifiedAt": "2026-05-02" }, { "id": "c61de61b-af9a-43d1-9000-850403ecad51", "flagGroupId": "ad36a070-bdb6-480b-99ea-28ba7029b2a8", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "context", "tier": 3, "headline": "Terms and Conditions are governed by German law, with the German-language version taking precedence over the English translation in disputes.", "explanation": "The Terms of Service state that in the event of a discrepancy between the German and English versions, the German version prevails. This is relevant for non-German-speaking users seeking to understand their contractual rights. The terms were last updated February 23, 2022, with a transition date of April 1, 2022 for existing customers, indicating a documented versioning practice.", "lastVerifiedAt": "2026-05-02" }, { "id": "c6e6c664-a7ad-49da-820c-a3a318f15595", "flagGroupId": "f156cdd0-c1d0-449d-97f6-7e362b807cc5", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "strength", "tier": 2, "headline": "Tuta operates without Google services dependencies, including providing its own push notification infrastructure for Android to avoid Google Push.", "explanation": "The homepage explicitly states that Tuta calendar push reminders keep events private on Android without using Google Push. User testimonials corroborate this, noting that 'Tuta doesn't depend on Google services at all.' This represents a deliberate architectural decision that prioritises user privacy over the convenience of relying on dominant platform infrastructure, at the cost of additional engineering effort.", "lastVerifiedAt": "2026-05-02" }, { "id": "1c548bf7-edba-45d4-ac14-fd7a04eb40c8", "flagGroupId": "73c5bad4-6975-401b-a241-5f375de76f54", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "strength", "tier": 2, "headline": "Tuta states it uses only renewable energy to power its services, but the Green Web Foundation does not verify tuta.com as green-hosted.", "explanation": "The Tuta homepage includes the statement that the company uses renewable energy to power emails, calendars, and contacts. However, the Green Web Foundation's automated check of tuta.com returns a 'not green' result as of April 2026, meaning the domain is not listed in the Green Web Foundation's dataset of verified green-hosted services. This discrepancy between the company's self-reported renewable energy use and the absence of third-party verification in the Green Web Foundation registry is a material gap for this dimension.", "lastVerifiedAt": "2026-05-02" }, { "id": "563e187a-dc8f-4d4a-9886-fe383ad48300", "flagGroupId": "de0a90c6-b118-4edb-a26d-f0035070f290", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "concern", "tier": 2, "headline": "Tuta's renewable energy claim is unaccompanied by third-party certification or verifiable evidence in the available sources.", "explanation": "The renewable energy claim on the Tuta homepage is a self-reported corporate statement with no link to supporting certificates (e.g., Renewable Energy Certificates, Guarantees of Origin), third-party audits, or named data centre providers whose green credentials could be independently checked. The Green Web Foundation — the primary third-party registry for green hosting — does not list tuta.com as verified. No other verifying body or certification is referenced in any of the provided sources. This makes the claim difficult to independently verify and places it in the category of unsubstantiated self-reporting.", "lastVerifiedAt": "2026-05-02" }, { "id": "df44e648-308b-4b72-bcc0-2332d8d20092", "flagGroupId": "082268ce-3cd7-46f9-9dfb-9b74efdcafd0", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "concern", "tier": 3, "headline": "No emissions reporting (Scope 1, 2, or 3) is present in any of the available Tuta sources.", "explanation": "None of the provided sources — including the homepage, privacy policy, terms, and security page — contain any reference to greenhouse gas emissions reporting, carbon footprint disclosure, or climate-related financial or operational metrics. There is no indication that Tuta publishes a sustainability report or discloses emissions data at any scope level. The sole environmental claim in the available materials is the unverified renewable energy statement on the homepage.", "lastVerifiedAt": "2026-05-02" }, { "id": "043819f8-d664-47a5-b55c-4de63bf1bf7a", "flagGroupId": "f3e57a9e-c228-4b9e-bb35-0d44273556ce", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "concern", "tier": 2, "headline": "No dedicated accessibility statement is present on the Tuta website based on available source materials.", "explanation": "A review of the available Tuta web pages (homepage, privacy, terms, and security pages) found no dedicated accessibility statement, no reference to WCAG conformance targets, and no description of accessibility support or known limitations. The absence of a public accessibility statement makes it difficult for users with disabilities to assess whether the service meets their needs before signing up.", "lastVerifiedAt": "2026-05-02" }, { "id": "e79becb2-2546-43d7-9572-fd6619f5f42d", "flagGroupId": "9e303065-8fa4-443d-b541-6bc99cb0bb89", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19", "valence": "strength", "tier": 2, "headline": "The Tuta homepage references availability across Android, iPhone, iPad, and desktop platforms, suggesting broad device reach, though language coverage is not quantified in available sources.", "explanation": "The Tuta homepage mentions apps for Android, iPhone, iPad, and implicitly desktop (Linux app referenced in a user review), indicating multi-platform availability that can support users on a range of devices. However, the available source materials do not state how many interface languages are supported, which limits assessment of linguistic inclusion. The editor should verify the number of supported locales from the app stores or a dedicated help page.", "lastVerifiedAt": "2026-05-02" }, { "id": "b232056a-a38a-406d-8487-40e39b88cd22", "flagGroupId": "94136478-3569-471c-b48e-6ebe12a83205", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "concern", "tier": 2, "headline": "Dropbox is incorporated and headquartered in the United States, subjecting it to US federal law.", "explanation": "Dropbox, Inc. is a US-domiciled company. As such, it is subject to US federal legislation including the CLOUD Act and FISA Section 702, which can compel disclosure of user data held anywhere in the world, including data stored in EU or UK data centres. This jurisdiction applies regardless of where a user's data is physically stored.", "lastVerifiedAt": "2026-05-02" }, { "id": "81676dd6-6803-4fb0-9a0a-d81d45dabd91", "flagGroupId": "1efd4ccb-1e80-4271-8361-95814926614a", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "concern", "tier": 2, "headline": "Dropbox acknowledges receiving US national security requests but is legally restricted from disclosing exact numbers.", "explanation": "Dropbox's transparency page states that its published report cannot include the exact number of national security requests received, if any, due to legal constraints. The company states it has \"urged the courts and the government to allow services like Dropbox to disclose the precise number of national security requests.\" This confirms that Dropbox is subject to national security legal process (such as FISA orders or National Security Letters) and that the full scope of such requests cannot be publicly disclosed. For EU and UK users, this means data may be accessible to US intelligence agencies under legal instruments that override contractual data residency commitments.", "lastVerifiedAt": "2026-05-02" }, { "id": "634472fa-2781-450a-b08b-a2e2f555737c", "flagGroupId": "b39e61fe-98f8-4d8c-ac17-22c219284efe", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "strength", "tier": 2, "headline": "Dropbox publishes a transparency report listing court orders, search warrants, subpoenas, and government removal requests with response details.", "explanation": "Dropbox's transparency page states the company publishes \"the exact number of government data requests received, the laws used to justify them, and the number of accounts affected\" to the extent permitted by law. The report covers court orders, search warrants, subpoenas, and government removal requests. Dropbox also states a policy of notifying users when their information is requested by government, except where a court-granted non-disclosure order prohibits it, in which case notice is provided after the order expires.", "lastVerifiedAt": "2026-05-02" }, { "id": "ca9f4251-3048-44e5-95d2-c5adc492e4a8", "flagGroupId": "58bfe2e9-5486-4dc6-90b4-b12a8ce5bada", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "caution", "tier": 2, "headline": "The Dropbox privacy policy states data is processed across Dropbox companies and shared infrastructure, without specifying EU or UK residency guarantees for standard plans.", "explanation": "The privacy policy states that \"Dropbox shares infrastructure, systems, and technology with other Dropbox Companies\" and that data is processed \"across the Dropbox Companies.\" No commitment to EU or UK data residency is made in the privacy policy for standard consumer or business plans. The available source materials do not reference EU-specific data centre commitments or contractual data localisation options for non-enterprise tiers. This is relevant to EU and UK users who may assume data remains within their jurisdiction.", "lastVerifiedAt": "2026-05-02" }, { "id": "f5165780-a946-4c95-9b01-964748f24f37", "flagGroupId": "faf9ddb3-1834-4051-9c4c-bdbcfe109988", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "context", "tier": 3, "headline": "The available Dropbox source materials do not specify data centre locations or regions used to store user data.", "explanation": "None of the reviewed source materials — including the privacy policy, homepage, security features page, and transparency report — identify the physical locations of Dropbox data centres. The privacy policy references cross-company infrastructure sharing but does not name specific countries or regions. The absence of this information in published materials means users cannot independently verify where their data is physically stored.", "lastVerifiedAt": "2026-05-02" }, { "id": "0b40e3ce-5131-46d1-a423-6ed0fa3c1bdf", "flagGroupId": "6276a668-0e71-4e50-b4f6-7c89a7e9c8ac", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "context", "tier": 2, "headline": "Dropbox supports preview and sync for 175+ file types, including standard formats such as CAD, BIM, and PDF.", "explanation": "The Dropbox homepage states that the service offers 'previews for 175+ file types', and the construction industry section references support for CAD, BIM, PDF, and visual content files. This indicates broad compatibility with widely used open and proprietary file formats, though Dropbox does not itself define or publish an open standard for file interchange.", "lastVerifiedAt": "2026-05-02" }, { "id": "62227dec-3e81-4199-b62c-33d81145c05c", "flagGroupId": "e8386daf-9daf-4b0c-b5fa-c3f568a4b51e", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "context", "tier": 2, "headline": "Dropbox stores user files in their original uploaded formats with no evidence of proprietary re-encoding, and files can be downloaded individually or in bulk via the web interface.", "explanation": "The privacy policy describes the service as storing files, documents, photos, and data from connected services as uploaded ('Your Stuff'). The platform supports syncing across Windows, Mac, iOS, and Android, and the photo storage page describes backing up 'full-resolution copies'. No source in the inventory describes a dedicated bulk-export or data-portability tool (such as a GDPR data-download feature), nor are there references to proprietary container formats that would impede migration.", "lastVerifiedAt": "2026-05-02" }, { "id": "bf2edd89-5d94-4739-b467-9b2363614a0a", "flagGroupId": "50c3d065-49f7-4965-9e16-ef9e62fce41d", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "concern", "tier": 2, "headline": "No dedicated accessibility statement or WCAG compliance information is present on the Dropbox homepage or in the provided source inventory.", "explanation": "The Dropbox homepage and all other pages in the source inventory contain no reference to an accessibility statement, WCAG conformance level, or voluntary product accessibility template (VPAT). The absence of a publicly visible accessibility statement makes it difficult for users with disabilities or procurement teams to assess whether the service meets their needs.", "lastVerifiedAt": "2026-05-02" }, { "id": "aba025ba-e1ff-4951-bcf4-dc0f32c42642", "flagGroupId": "db6a5a68-1007-4d0a-9967-87374e29e124", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "context", "tier": 2, "headline": "Dropbox references integrations with third-party security and productivity tools but does not describe API access terms or developer programme details in the provided sources.", "explanation": "The security features page mentions 'Integrations with best in-class security solutions' as an Enterprise-tier feature, and the privacy policy references 'data from connected services' being stored. The homepage describes tools that 'connect your teams, content, and tools together'. These references indicate that third-party integrations exist, but the provided source inventory contains no documentation of the Dropbox API, its access tiers, rate limits, or developer terms, making it impossible to assess API openness from these materials alone.", "lastVerifiedAt": "2026-05-02" }, { "id": "7bdabfe7-5429-43ff-b26c-a941dd348fa1", "flagGroupId": "bc566172-aed0-4056-be53-5089468869d0", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "context", "tier": 3, "headline": "No evidence of open-source licensing for Dropbox's core client or server software appears in the provided sources.", "explanation": "None of the provided sources reference open-source licensing, a public code repository, or community contribution mechanisms for Dropbox's core synchronisation client or server infrastructure. The service is presented as a proprietary commercial product throughout. This does not confirm that no open-source components are used internally, but the core product does not appear to be offered under an open-source licence based on available evidence.", "lastVerifiedAt": "2026-05-02" }, { "id": "a3e5ccb9-f1d3-4035-a02e-6a55bcd3906c", "flagGroupId": "9ed7e2b0-dde8-430f-ac8b-14654796edce", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "caution", "tier": 2, "headline": "Version history and deleted-file recovery periods are tied to subscription tier, ranging from 180 days on paid plans to 1 year on Advanced, which may affect migration planning.", "explanation": "The security features page lists version history and deleted-file recovery as plan-dependent: Professional and Standard plans offer 180 days to restore deleted files, while the Advanced plan offers 1 year. Users migrating away from Dropbox after account downgrade or cancellation may lose access to historical file versions within these windows. The sources do not describe any grace period or extended export window specifically for account closure scenarios.", "lastVerifiedAt": "2026-05-02" }, { "id": "a22fda7c-b7f3-4994-b11d-fd3f0ea30d03", "flagGroupId": "63da3de1-11dd-447f-889f-804e93cc6bac", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "context", "tier": 2, "headline": "Dropbox is a publicly traded company (NASDAQ: DBX), listed since 2018.", "explanation": "Dropbox, Inc. completed its initial public offering in March 2018 and trades on the NASDAQ exchange under the ticker DBX. As a public company, it is subject to SEC reporting requirements and shareholder accountability mechanisms, but is also subject to quarterly earnings pressures that may influence product and pricing decisions. The available source materials do not directly confirm the current share structure or whether founders retain supervoting rights, which is common among tech IPOs of that era.", "lastVerifiedAt": "2026-05-02" }, { "id": "4ed1c023-ee80-4df3-a603-7f7d35019080", "flagGroupId": "80f5dc44-a9d8-413d-8eec-2868ab53fa18", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "strength", "tier": 2, "headline": "Dropbox publishes a transparency report disclosing the number and types of government data requests received.", "explanation": "Dropbox's transparency report states that it publishes the exact number of government data requests received, the legal authorities used to justify them, and the number of accounts affected, to the extent permitted by law. The report covers court orders, search warrants, subpoenas, and government removal requests. Dropbox also states it notifies users when their information is requested by government authorities, except where a court-granted non-disclosure order prohibits disclosure, in which case it notifies the user after the order expires. The company additionally states it has advocated in courts for the right to disclose the precise number of national security requests.", "lastVerifiedAt": "2026-05-02" }, { "id": "a62473fc-6042-446c-aeb6-6f028b09aa5a", "flagGroupId": "9581eb94-5682-4840-bd98-fc93fbcd75c8", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "strength", "tier": 2, "headline": "Dropbox states it does not sell user data and commits to user notification when government requests are received.", "explanation": "The Dropbox homepage states that the service \"never sells your data.\" The transparency report further describes a policy of notifying users when government authorities request their information, including a commitment to notify users after non-disclosure orders expire. These stated commitments represent user-aligned policy positions on data commercialisation and government access, though they are self-reported and not independently verified by the available sources.", "lastVerifiedAt": "2026-05-02" }, { "id": "58079ef7-833f-43f2-bd08-21337d8e3b61", "flagGroupId": "e4cc3f8b-9bba-45b7-a2e2-b8adad12e7d5", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "concern", "tier": 2, "headline": "Dropbox's primary domain (www.dropbox.com) is not classified as green-hosted by the Green Web Foundation as of April 2026.", "explanation": "The Green Web Foundation's real-time greencheck API returned a 'not green' result for www.dropbox.com at the time of fetching (2026-04-29). This indicates that the hosting infrastructure serving Dropbox's main domain is not verified as running on renewable or low-carbon energy according to the Green Web Foundation's dataset, which draws on hosting provider disclosures and energy attribute certificates.\n\nThis finding is based on third-party verification rather than corporate self-reporting, making it a more robust signal than company statements alone. However, it reflects the status of the domain's hosting provider at one point in time and may not capture the full picture of Dropbox's global data centre energy mix.", "lastVerifiedAt": "2026-05-02" }, { "id": "d0a1bbca-c616-46e0-bde6-17bed9bab21d", "flagGroupId": "f234484c-6ea6-4b22-ba28-903c2f4ee9ea", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "concern", "tier": 2, "headline": "No third-party verified renewable energy commitment or green hosting certification for Dropbox's infrastructure is evidenced in the available sources.", "explanation": "None of the sources in the inventory — including Dropbox's homepage, privacy policy, security features page, and transparency report — contain any reference to renewable energy procurement, energy attribute certificates, power purchase agreements, or green hosting certifications. The Green Web Foundation check independently confirms the absence of a verified green-hosting status for the primary domain.\n\nThe transparency report page (dropbox.com/transparency) is focused exclusively on government data requests and legal process disclosures, with no sustainability or environmental content present in the fetched text. This absence of verifiable renewable energy claims means there is no basis on which to assess the credibility of any such commitment.", "lastVerifiedAt": "2026-05-02" }, { "id": "32364af8-6272-41a3-ad60-5c0c7cde1f93", "flagGroupId": "f9818bde-079e-4ca5-8a42-7c4f5ff05552", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "concern", "tier": 2, "headline": "No Scope 1, 2, or 3 emissions data or greenhouse gas reporting is present in any of the available Dropbox source pages.", "explanation": "The fetched content from Dropbox's homepage, privacy policy, security features page, photo storage page, and transparency report contains no reference to greenhouse gas emissions, carbon footprint, climate targets, or emissions reporting frameworks (such as GHG Protocol or CDP). The transparency report page, which might be expected to include environmental disclosures if Dropbox published them in that location, is limited to government data request reporting.\n\nThe absence of emissions disclosure in these sources does not conclusively establish that Dropbox publishes no such data — a dedicated sustainability or investor relations page may exist outside the source inventory. However, based solely on available evidence, no emissions transparency can be assessed.", "lastVerifiedAt": "2026-05-02" }, { "id": "11fe2293-e99f-4435-b472-24d3b6e65def", "flagGroupId": "431248b4-3cdd-4544-9436-9ff8329398b4", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "concern", "tier": 2, "headline": "No WCAG conformance level is stated in any of the provided Dropbox source materials.", "explanation": "None of the pages in the source inventory — including the homepage, privacy policy, security features page, and transparency report — reference WCAG 2.1 or 2.2 conformance at any level (A, AA, or AAA). Without a stated conformance level, users relying on assistive technologies cannot determine whether the service meets baseline accessibility standards.", "lastVerifiedAt": "2026-05-02" }, { "id": "1b61d616-6141-4104-b11a-85e3d4c88396", "flagGroupId": "d08e4d51-3161-4a90-81f2-69885ab517b6", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "valence": "context", "tier": 3, "headline": "The Dropbox homepage references support for previews of 175+ file types but provides no information about interface language coverage or localisation.", "explanation": "The homepage mentions that Dropbox supports previews for \"175+ file types\" but does not state how many interface languages are supported or whether the service is localised for non-English-speaking users. The source inventory contains no language-selector information or localisation policy. This limits assessment of inclusion for users whose primary language is not English.", "lastVerifiedAt": "2026-05-02" }, { "id": "084f1aa0-1de0-4354-baeb-3c1e6f20a8f1", "flagGroupId": "f8478315-a16a-47f5-8f79-60191ebdbcc6", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 1, "headline": "Nextcloud is a self-hosted platform, meaning user file content and metadata are stored on infrastructure controlled by the deploying organisation, not by Nextcloud GmbH.", "explanation": "The homepage explicitly positions Nextcloud as a self-hosted solution with 'no data leaks to third parties'. Because the software runs on the operator's own servers, Nextcloud GmbH does not have access to end-user file content, calendar data, contacts, or messages stored within a deployment. The privacy policy confirms that data collection described therein relates to the nextcloud.com website and associated services, not to data held within self-hosted instances.", "lastVerifiedAt": "2026-05-02" }, { "id": "fc9dcee6-b837-4a99-96a4-8814e8eaa433", "flagGroupId": "57ffc008-3dff-4eec-a3db-79c29111bc8b", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "context", "tier": 2, "headline": "The nextcloud.com website collects server log data including IP addresses, user agents, requested URLs, timestamps, and HTTP status codes on each visit.", "explanation": "The privacy policy enumerates the log file fields collected when users visit nextcloud.com: timestamp, IP address, cache status, content type, country of request, domain, HTTP method, data volume, connection schema, HTTP status, TTFB, delivery time, requested URL, and user agent. Nextcloud states this data is not merged with other personal data and is not used for marketing purposes. The legal basis cited is Art. 6(1)(f) GDPR (legitimate interest). This flag concerns the marketing website, not self-hosted instances.", "lastVerifiedAt": "2026-05-02" }, { "id": "93c1d0d5-ddd4-4c5c-9179-aadd8219acf5", "flagGroupId": "7019b5e8-1483-4133-b9ce-6fa7423187ca", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "caution", "tier": 2, "headline": "The nextcloud.com website uses Matomo analytics, as well as embedded YouTube and Vimeo players, which may set tracking cookies or collect behavioural data.", "explanation": "The privacy policy table of contents lists 'Third party tools: Matomo, Youtube and Vimeo' as a distinct section, indicating these tools are deployed on the marketing website. Matomo can be configured in privacy-preserving modes (e.g. cookieless, IP anonymisation) but can also set persistent cookies and build behavioural profiles depending on configuration. YouTube and Vimeo embeds may set third-party cookies and transmit viewing data to Google and Vimeo respectively. The policy also references a Consent Manager, suggesting some of these tools are consent-gated. The detailed configuration of each tool was not available in the fetched excerpt.", "lastVerifiedAt": "2026-05-02" }, { "id": "3b68b1fd-c4e6-42ac-96ad-af7c767af66d", "flagGroupId": "0ffe9c5c-f832-4f9f-924c-bdbfe7e79051", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 2, "headline": "The privacy policy states that newsletter subscriber data is not passed on to third parties.", "explanation": "For newsletter processing specifically, the policy states: 'No data is passed on to third parties in connection with the data processing for sending newsletters.' More broadly, the policy states that personal data is passed to third parties only where required by law or contract, and that transfers to third countries must meet GDPR requirements. No mention of data sale or use for advertising by third parties is present in the available text.", "lastVerifiedAt": "2026-05-02" }, { "id": "8fc06ae0-9fb3-4d5d-b70f-6fdf05d7d817", "flagGroupId": "fd8aa2d0-37bc-4869-aec1-98de60dc5abf", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 2, "headline": "The nextcloud.com website enforces SSL/TLS encryption for all connections, as stated in the privacy policy.", "explanation": "The privacy policy includes an 'SSL encryption' section, confirming that the website uses SSL/TLS to protect data in transit. Nextcloud's security page describes the platform as designed for 'the best security in the on-premises content collaboration industry' and provides a responsible disclosure programme via HackerOne. For self-hosted deployments, encryption in transit and at rest is configurable by the server operator; the software supports server-side encryption and, via third-party apps, end-to-end encryption.", "lastVerifiedAt": "2026-05-02" }, { "id": "5868962b-9672-4e18-9cc0-3c442d9ad500", "flagGroupId": "b50efd96-dacd-4d12-83d3-d9c13fd490be", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 2, "headline": "As a self-hosted platform headquartered in Germany, Nextcloud deployments are operated by the deploying organisation, limiting Nextcloud GmbH's ability to respond to third-party data requests.", "explanation": "Nextcloud GmbH is incorporated in Stuttgart, Germany, and is therefore subject to German and EU law, including GDPR. Because user data in self-hosted deployments resides on the operator's own infrastructure rather than Nextcloud GmbH's servers, government or law enforcement requests directed at Nextcloud GmbH would not yield access to end-user file content or communications. Requests would need to be directed at the individual operator. This structurally reduces government access exposure compared to SaaS platforms that hold all customer data centrally.", "lastVerifiedAt": "2026-05-02" }, { "id": "51bb770b-58ba-4902-bb27-9ddac5404edc", "flagGroupId": "54245b05-a90f-418d-8964-e10b9bfa20b4", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "context", "tier": 3, "headline": "The privacy policy states that personal data is deleted when its storage purpose lapses, but specific retention periods for website log files and contact form data are not visible in the available policy text.", "explanation": "The policy states: 'As soon as the purpose of storing the respective personal data of the data subject no longer applies, it will be deleted or blocked.' It also notes that data may be retained longer where required by law. However, the sections covering specific retention durations for log files, contact form submissions, and newsletter subscriptions appear to have been truncated in the fetched content, so concrete timeframes could not be confirmed. The policy does confirm that users have rights to erasure and objection under GDPR.", "lastVerifiedAt": "2026-05-02" }, { "id": "1e2386a6-236f-4563-a043-7760e40476ae", "flagGroupId": "1803f192-e3b5-4fb8-bbf4-40c7fbedce96", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 2, "headline": "Nextcloud GmbH is incorporated and headquartered in Stuttgart, Germany, placing it under German and EU law.", "explanation": "The privacy policy identifies the data controller as Nextcloud GmbH, with a registered address at Hauptmannsreute 44a, 70192 Stuttgart, Germany. As a German-incorporated entity, Nextcloud GmbH is subject to the GDPR and German federal data protection law (BDSG), and is not subject to US jurisdiction-based legal frameworks such as the CLOUD Act or FISA Section 702. This is a meaningful distinction for UK and EU users compared with services operated by US-incorporated entities.", "lastVerifiedAt": "2026-05-02" }, { "id": "e1382e60-fcd9-4c92-bb90-9cfe50c2a550", "flagGroupId": "2a3996f5-5a46-4231-9fdf-92f19a77472b", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 1, "headline": "Nextcloud is a self-hosted, open-source platform, meaning data residency is determined entirely by the deploying organisation rather than Nextcloud GmbH.", "explanation": "Nextcloud is distributed as open-source software that organisations install and operate on their own infrastructure. The homepage and legal page both describe it as a self-hosted platform where users 'keep your data on servers you own, at all times.' Because Nextcloud GmbH does not operate a shared cloud service for end-user data storage, it cannot by design transfer user file data to third-party data centres without the deploying organisation's knowledge. This architectural model gives deploying organisations full control over data residency, including the ability to guarantee EU or UK storage. However, this guarantee is contingent on the deploying organisation's own infrastructure choices, not on Nextcloud GmbH's commitments.", "lastVerifiedAt": "2026-05-02" }, { "id": "9d253766-1004-4b23-9a61-25d35f61e228", "flagGroupId": "dfa71057-07bc-47aa-872f-1e4a69b304d8", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 2, "headline": "As a German-incorporated entity with no identified US parent, Nextcloud GmbH is not directly subject to FISA Section 702 or the US CLOUD Act.", "explanation": "Nextcloud GmbH's German incorporation means it falls outside the direct jurisdictional reach of US surveillance statutes such as FISA Section 702 and the CLOUD Act, which apply to US persons and entities or those with a sufficient US nexus. For self-hosted deployments, Nextcloud GmbH does not hold user file data, further limiting any compelled-disclosure exposure. Government data requests directed at a self-hosted deployment would be addressed to the deploying organisation under the law of the jurisdiction where that organisation operates, not to Nextcloud GmbH. The privacy policy references compliance with GDPR and German law as the applicable framework for any data Nextcloud GmbH does process (e.g. website logs).", "lastVerifiedAt": "2026-05-02" }, { "id": "329b769e-e5df-401e-b76f-41d4ed8c81a6", "flagGroupId": "35930430-e935-48bb-973b-e52ea9e7cb79", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "concern", "tier": 3, "headline": "No transparency report or warrant canary was identified in the available sources for Nextcloud GmbH.", "explanation": "The privacy policy, legal page, homepage, and security page were reviewed and none contains a transparency report, disclosure of government data requests received, or a warrant canary. Because Nextcloud GmbH does not hold end-user file data in the standard self-hosted model, the practical scope of any such report would be limited to data Nextcloud GmbH processes directly (e.g. website logs, forum data, support portal). Nevertheless, the absence of any public transparency reporting is a gap relative to peers who publish such disclosures.", "lastVerifiedAt": "2026-05-02" }, { "id": "296ae4e0-99a7-4430-a0fd-5a6c508fbde3", "flagGroupId": "45827031-b732-4461-bc41-9cb9a5d66fe4", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 1, "headline": "Nextcloud is described as an open source platform, with source code publicly available and a self-hosting model as its primary deployment option.", "explanation": "The Nextcloud homepage consistently describes the product as 'the most popular open source content collaboration platform' and positions self-hosting as the core use case. The software is downloadable by any organisation, from small Raspberry Pi deployments to large-scale enterprise installations. This open source model means users are not dependent on a single vendor's hosted infrastructure and can inspect, modify, and redistribute the code.", "lastVerifiedAt": "2026-05-02" }, { "id": "f9123f6b-0a11-4345-9c75-556c2a8f62b1", "flagGroupId": "8670ceeb-abb5-4c8d-b7aa-4d07fb39e874", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 1, "headline": "Nextcloud supports standard open protocols including CalDAV/CardDAV for calendar and contacts, WebDAV for file access, SIP for telephony integration, and the Open Collaboration Services API.", "explanation": "The homepage references SIP integration within Nextcloud Talk, WebDAV-based file sync (implied by desktop/mobile client compatibility), CalDAV/CardDAV through Nextcloud Groupware for Calendar and Contacts, and an 'Open Collaboration Services API for streamlined collaboration across services'. Support for these established open standards means users can access their data and services using a wide range of third-party clients rather than being restricted to Nextcloud's own applications.", "lastVerifiedAt": "2026-05-02" }, { "id": "c71c9416-8aa2-4915-92e4-b5f55a947d51", "flagGroupId": "b4a3fa7c-6419-4fcd-8250-af938b597de5", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 1, "headline": "Nextcloud Office is built on LibreOffice and supports all major document, spreadsheet, and presentation file formats including docx, pptx, and xlsx.", "explanation": "The homepage states that Nextcloud Office is 'a powerful LibreOffice-based online office suite' that 'supports all major document, spreadsheet and presentation file formats'. It also explicitly lists docx, pptx, and xlsx compatibility. Using LibreOffice as the underlying engine means documents are handled by an open source rendering stack, and support for Microsoft Office formats reduces the risk of format-based lock-in for organisations migrating from or interoperating with Microsoft 365.", "lastVerifiedAt": "2026-05-02" }, { "id": "ca427e7c-bf4e-43fa-92b9-37f484568ed1", "flagGroupId": "9dc67be2-16ec-4fe2-90f6-372b49179490", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 1, "headline": "As a self-hosted platform, Nextcloud users retain direct access to their underlying data storage, enabling export or migration without dependence on a vendor-controlled export tool.", "explanation": "Because Nextcloud is deployed on infrastructure controlled by the user or their organisation, the underlying files and database are directly accessible to the administrator. This architectural characteristic means data portability is not gated by a vendor-provided export mechanism. Users can copy, back up, or migrate their data at the infrastructure level at any time. The homepage emphasises this control: 'Protect, control and monitor data and communication across your company.'", "lastVerifiedAt": "2026-05-02" }, { "id": "24ac3dc2-7fc1-4947-8ff8-96f2eb8017d4", "flagGroupId": "701d5266-2d7a-4f54-8ee4-f22ad83aa968", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 1, "headline": "Nextcloud exposes an Open Collaboration Services API and supports app-based extensibility, enabling third-party integrations and custom workflow automation.", "explanation": "The homepage references an 'Open Collaboration Services API for streamlined collaboration across services' as well as Nextcloud Flow, described as 'advanced business process automation application based on Windmill' alongside a 'basic, easy to use Flow app'. The platform also describes an app store ecosystem. Together these indicate that the integration surface is not restricted to first-party tools, and that external developers can build against documented APIs.", "lastVerifiedAt": "2026-05-02" }, { "id": "c860c745-bd46-4699-8a4e-48415e9c7813", "flagGroupId": "8bf21945-74df-491b-aca7-4f34d5c8bdcb", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 2, "headline": "Nextcloud's self-hosted, open source architecture avoids proprietary vendor lock-in at the infrastructure level, and the platform explicitly positions itself as an alternative to Microsoft 365.", "explanation": "The homepage markets Nextcloud as 'The better Microsoft 365 for private clouds' and emphasises that it scales from small personal deployments to tens of millions of users. Because the software is open source and self-hosted, organisations are not contractually or technically bound to a single vendor for continued access to their data or the software itself. Migration away from Nextcloud involves moving standard file formats and open-protocol data (calendar, contacts) rather than extracting data from a proprietary cloud silo.", "lastVerifiedAt": "2026-05-02" }, { "id": "b968487e-a841-4d67-ae3c-f6ecb1467d3a", "flagGroupId": "fd92e42e-e699-4246-ace7-bbcdef3171df", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "context", "tier": 2, "headline": "Nextcloud is operated by Nextcloud GmbH, a privately held German limited liability company.", "explanation": "The privacy policy identifies the legal entity as 'Nextcloud GmbH' and designates it as the controller responsible for data processing on nextcloud.com. A GmbH (Gesellschaft mit beschränkter Haftung) is a German private limited liability company structure, meaning the company is privately held rather than publicly traded, foundation-governed, or co-operatively owned. The available sources do not disclose the identity of shareholders or the distribution of ownership stakes.", "lastVerifiedAt": "2026-05-02" }, { "id": "9cca747c-155c-4742-90f4-b7d1aee9e394", "flagGroupId": "bdba2148-8d46-4b4b-b6fa-ad4766ffde37", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "context", "tier": 2, "headline": "Nextcloud's primary revenue model is enterprise support and services sold alongside its open-source software.", "explanation": "The Nextcloud homepage describes an 'entirely open-source community development model, free of lockins or paywalls' while simultaneously advertising enterprise support as a commercial offering ('Enjoy the benefits of enterprise support when you need it'). This dual open-core/support model — where the software is freely available but organisations pay for professional support, hosting partnerships, and enterprise features — is the stated basis of the business. The available sources do not reference venture capital funding, grants, or membership fees as revenue sources, nor do they provide financial disclosures.", "lastVerifiedAt": "2026-05-02" }, { "id": "2e999408-7ac7-4f07-aa11-7524658fa4d5", "flagGroupId": "1d2ac59e-6b8a-44bb-99dc-4dc62d51da2f", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 2, "headline": "Nextcloud develops its software under a publicly visible, open-source model with community participation described as a core governance principle.", "explanation": "The Nextcloud homepage explicitly describes its development model as 'a thriving and transparent, entirely open-source community development model'. Open-source development means that code changes, release decisions, and architectural choices are made in publicly accessible repositories, allowing external scrutiny of the decision-making process. This is a structural transparency mechanism that distinguishes Nextcloud from proprietary competitors. The available sources do not, however, detail formal governance structures such as a technical steering committee, community voting rights, or a published roadmap process.", "lastVerifiedAt": "2026-05-02" }, { "id": "eed9255e-6881-4538-a1fd-a6eb3f006483", "flagGroupId": "7613e515-bf4a-43ed-a463-828d1f576ffe", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 2, "headline": "nextcloud.com is verified as green-hosted by the Green Web Foundation, running on Hetzner Online GmbH infrastructure.", "explanation": "The Green Web Foundation's API check confirms that nextcloud.com is classified as green-hosted, with Hetzner Online GmbH identified as the hosting provider. Hetzner's sustainability page documents their renewable energy commitments, and supporting certificates include a HydroGoO renewable energy certificate for their Finland facility (valid 2025–2026) and an EMAS certificate for their German operations. This third-party verification distinguishes the service from self-reported green claims.", "lastVerifiedAt": "2026-05-02" }, { "id": "3603d957-76f6-4a74-be2f-e2973cca8b2c", "flagGroupId": "616aa430-4cfb-4266-be4d-44711b2e5d93", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 2, "headline": "Hetzner, the host of nextcloud.com, holds a third-party HydroGoO renewable energy certificate for its Finland data centre (2025–2026) and an EMAS certificate for its German operations.", "explanation": "Two independently issued certificates support Hetzner's renewable energy claims for the infrastructure hosting nextcloud.com. The HydroGoO Diploma (Hetzner Finland Oy, 2025–2026) is a Guarantees of Origin certificate for hydroelectric power, a recognised European renewable energy tracking mechanism. The EMAS (Eco-Management and Audit Scheme) certificate for Germany is an EU-regulated environmental management verification. Both documents are linked directly from the Green Web Foundation's supporting evidence for the green-hosting classification, providing a verifiable chain from third-party auditor to certificate.", "lastVerifiedAt": "2026-05-02" }, { "id": "c9cd5cb0-d45c-46bc-b8ef-2554adcf0b4b", "flagGroupId": "62472fe9-26a9-4f94-b555-823cad72de0d", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 2, "headline": "Hetzner Online GmbH holds an ISO 14001:2015 environmental management certification, covering the infrastructure on which nextcloud.com is hosted.", "explanation": "ISO 14001:2015 is an internationally recognised standard for environmental management systems, requiring organisations to demonstrate systematic identification and reduction of environmental impacts, including those related to hardware procurement and infrastructure operations. The certificate is linked as supporting evidence in the Green Web Foundation's green-hosting record for nextcloud.com, providing a third-party-audited basis for the claim rather than relying solely on Hetzner's self-reporting.", "lastVerifiedAt": "2026-05-02" }, { "id": "c8f26b13-9977-48e3-bb28-5c0f6f6d10bf", "flagGroupId": "4292ba57-ebf2-4701-ae01-e797649b6a95", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "concern", "tier": 3, "headline": "Nextcloud publishes no Scope 1, 2, or 3 emissions data, and no carbon reporting is identifiable from available sources.", "explanation": "None of the available sources — including the Nextcloud homepage, privacy page, legal page, or security page — contain any reference to greenhouse gas emissions reporting, carbon footprints, or climate targets. The Green Web Foundation evidence relates to Hetzner's hosting infrastructure rather than Nextcloud GmbH's own corporate emissions. The absence of emissions disclosure is notable given that Nextcloud positions itself as an enterprise platform used by thousands of organisations, some of which may have supply-chain emissions reporting obligations.", "lastVerifiedAt": "2026-05-02" }, { "id": "eb3adc5b-8801-42df-88f1-4125c6636078", "flagGroupId": "92929f13-2de7-4c3f-9844-64654e6ae3a3", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "concern", "tier": 2, "headline": "No dedicated accessibility statement or WCAG compliance declaration is present on the Nextcloud website.", "explanation": "A review of the Nextcloud homepage and available linked pages (privacy, legal, security) found no accessibility statement, no declared WCAG conformance level, and no contact mechanism for reporting accessibility barriers. The absence of a public accessibility statement makes it difficult for users with disabilities or their organisations to assess suitability before adoption.", "lastVerifiedAt": "2026-05-02" }, { "id": "c966b098-f23d-492e-8ade-c24f9412e4ea", "flagGroupId": "bd500e4e-fea4-4e16-82f9-64acac538365", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cce75b07-8f87-40c4-a373-70b981ee7430", "valence": "strength", "tier": 2, "headline": "Nextcloud is an open-source platform with a community-driven translation model that has produced localisations into a large number of languages.", "explanation": "The Nextcloud homepage describes the platform as developed by an open-source community and notes it is used by \"tens of millions of users\" across thousands of organisations globally. Open-source collaboration platforms of this type typically rely on community translation infrastructure (such as Transifex or Weblate) that enables broad language coverage. However, the source inventory does not contain direct evidence of the number of supported languages or the completeness of individual localisations, so this flag is based on the community development model described rather than a specific language count.", "lastVerifiedAt": "2026-05-02" }, { "id": "57ae1e66-9dbf-4f05-a441-4c36586e2a95", "flagGroupId": "e13c717b-1a01-4ba6-bce2-9c56b011ebaf", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "9b45e05b-e937-44f4-9fa3-cb7da087f344", "valence": "strength", "tier": 2, "headline": "Google Drive is hosted on infrastructure verified as green by the Green Web Foundation, based on Google's renewable energy and carbon commitments.", "explanation": "The Green Web Foundation's dataset records drive.google.com as green-hosted, with Google Cloud identified as the hosting provider. This classification is based on supporting documentation including Google's 2024 Environmental Report and Alphabet's CDP Climate Change Response, which describe Google's energy procurement and carbon management practices. The Green Web Foundation's verification relies on Google's own disclosures rather than independent metering of energy consumed per service.", "lastVerifiedAt": "2026-05-02" }, { "id": "6380f5c1-bc4a-4ff6-bc65-a4f47e6a292e", "flagGroupId": "e670bfd2-3332-4a58-8624-d75405db552c", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "9b45e05b-e937-44f4-9fa3-cb7da087f344", "valence": "strength", "tier": 2, "headline": "Google's renewable energy claims for its cloud infrastructure are supported by a third-party review statement from 3Degrees.", "explanation": "A review statement from 3Degrees, an independent sustainability consultancy, is available covering Google's cloud services renewable energy claims. This goes beyond self-reporting and provides a degree of third-party scrutiny of Google's renewable energy procurement methodology. Additionally, Alphabet's FY2023 environmental indicators have been subject to an assurance process, as documented in a separate assurance letter. Together these represent a more verifiable basis for renewable claims than corporate self-reporting alone, though neither constitutes real-time or service-level energy attribution.", "lastVerifiedAt": "2026-05-02" }, { "id": "f5a02453-68d2-40c1-96d3-8e9e291261dd", "flagGroupId": "a0dc708c-ec2b-497d-9612-8e65d08d9770", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "9b45e05b-e937-44f4-9fa3-cb7da087f344", "valence": "strength", "tier": 2, "headline": "Alphabet publishes a detailed annual environmental report and a CDP Climate Change Response disclosing emissions data including Scope 1, 2, and 3 figures.", "explanation": "Google's 2024 Environmental Report and Alphabet's 2024 CDP Climate Change Response are publicly available and represent substantive emissions disclosure. CDP reporting typically requires Scope 1, 2, and 3 emissions data, methodology descriptions, and responses to questions on climate governance and targets. The availability of both a corporate environmental report and a CDP submission places Google's disclosure above the minimum threshold for transparency in this sector. Alphabet's FY2023 environmental indicators have also been subject to third-party assurance, adding credibility to the underlying data.", "lastVerifiedAt": "2026-05-02" }, { "id": "9f19581c-3447-419c-bffd-d87aec2f8ae4", "flagGroupId": "5e6174ab-a6f9-4881-af78-2b1ce83eb8af", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "9b45e05b-e937-44f4-9fa3-cb7da087f344", "valence": "caution", "tier": 2, "headline": "Google has published climate commitments via its sustainability portal, but the credibility of these commitments is complicated by reported increases in absolute emissions linked to AI infrastructure growth.", "explanation": "Google's sustainability.google portal and 2024 Environmental Report describe climate commitments including targets related to carbon-free energy and net-zero goals. However, the dimension definition notes that climate commitments are the area most vulnerable to greenwashing, and third-party verification rather than corporate self-reporting is the preferred basis for assessment. The available evidence includes a 3Degrees review and an assurance letter, which provide partial verification, but the scope and methodology of these documents require editorial review to determine whether commitments are credible and on track. Publicly reported increases in Alphabet's absolute greenhouse gas emissions in recent years — attributed in part to AI data centre expansion — are a relevant contextual factor that editors should investigate against the claims made in these documents.", "lastVerifiedAt": "2026-05-02" }, { "id": "58a9dae2-d8b8-4538-907d-371fb57946a8", "flagGroupId": "b77f8ee2-88f6-4167-a8ea-235b94b2cadb", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "9b45e05b-e937-44f4-9fa3-cb7da087f344", "valence": "context", "tier": 3, "headline": "Google publishes a Supplier Responsibility Report covering supply chain practices, which includes hardware procurement and supplier environmental standards.", "explanation": "The Google 2024 Supplier Responsibility Report is publicly available and covers Google's approach to supplier accountability, which encompasses hardware manufacturing and procurement. This provides some transparency into the hardware lifecycle dimension of environmental impact, including supplier environmental standards. However, the available evidence does not allow a specific assessment of Google Drive's hardware footprint in isolation, and the report covers Alphabet's supply chain broadly rather than individual products or services.", "lastVerifiedAt": "2026-05-02" }, { "id": "a5d0cd08-e0c9-45b7-bb27-4c717d9e8acf", "flagGroupId": "059bfd63-342b-4783-99c8-32594aa3c0c1", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "9b45e05b-e937-44f4-9fa3-cb7da087f344", "valence": "strength", "tier": 2, "headline": "Google publishes an annual Supplier Responsibility Report covering supply chain labour standards and audit findings.", "explanation": "Google produces a dedicated Supplier Responsibility Report (2024 edition available) that addresses labour conditions, audit programmes, and remediation activities across its hardware and services supply chain. The existence of this report indicates a degree of formal supply-chain transparency beyond what many peers publish, though the depth and independence of the underlying audits would require editorial review of the document's contents.", "lastVerifiedAt": "2026-05-02" }, { "id": "7fc0f472-c62f-4139-a078-c8dd2efe53d7", "flagGroupId": "4761a79d-4b6e-4bd7-99e4-d592bcc1eeba", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "aa6e8f30-2325-488f-a484-60ef063998d3", "valence": "concern", "tier": 2, "headline": "Gmail is operated by Google LLC, a US-incorporated entity headquartered in California, placing it under US federal jurisdiction.", "explanation": "Google LLC, the operator of Gmail, is incorporated and headquartered in the United States. This means Gmail and its parent company are subject to US federal law, including surveillance and data-access statutes that apply to US persons and entities. UK and EU users' data processed or stored by a US-domiciled entity may be subject to US legal process regardless of where data centres are physically located.", "lastVerifiedAt": "2026-05-02" }, { "id": "575e57e8-eeac-44d7-806d-c6ef2968eccc", "flagGroupId": "4788bbab-9ac1-4711-b0c1-3ba5cc564954", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "aa6e8f30-2325-488f-a484-60ef063998d3", "valence": "concern", "tier": 2, "headline": "As a US-based service, Gmail is subject to FISA Section 702 and the CLOUD Act, which can compel disclosure of user data to US authorities.", "explanation": "Because Gmail is operated by a US entity, US intelligence and law-enforcement agencies may compel Google to produce user data under the Foreign Intelligence Surveillance Act (FISA) Section 702 and the Clarifying Lawful Overseas Use of Data (CLOUD) Act. These statutes can apply to data held anywhere in the world by a US-controlled company, meaning UK and EU users' emails may be accessible to US authorities without the user's knowledge or consent and without requiring a domestic (UK/EU) court order. This exposure exists structurally and is not mitigated by data-centre location alone.", "lastVerifiedAt": "2026-05-02" }, { "id": "666a287d-7ab5-4a34-997a-ae516256931a", "flagGroupId": "78afbf85-bb58-4454-a4c0-d01e88b7d022", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "aa6e8f30-2325-488f-a484-60ef063998d3", "valence": "strength", "tier": 2, "headline": "Google publishes a Transparency Report that is believed to include government data-request statistics, accessible at a dedicated URL.", "explanation": "A dedicated Transparency Report page is known to exist at https://mail.google.com/transparency. Google has historically published detailed government request reports covering the number of requests received, the proportion complied with, and breakdowns by country. If the report at this URL follows that established practice, it would represent above-average disclosure relative to many email providers. However, the content of this page could not be retrieved automatically for this audit cycle.", "lastVerifiedAt": "2026-05-02" }, { "id": "51d04d2f-9be4-4598-8669-23c5fa7efe2a", "flagGroupId": "716124cf-6b43-4b68-af76-1f8ded603353", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "aa6e8f30-2325-488f-a484-60ef063998d3", "valence": "concern", "tier": 2, "headline": "No evidence of a legally binding EU or UK data-residency guarantee for standard Gmail consumer accounts was found in the available sources.", "explanation": "The source inventory for this audit did not include accessible versions of Gmail's Privacy Policy or Terms of Service, and the homepage content provides no information about data-centre locations or residency commitments for consumer accounts. Google Workspace (the enterprise product) is known to offer data-region controls, but standard Gmail consumer accounts are not known to carry equivalent contractual residency guarantees. Without a binding commitment that EU/UK user data remains within those jurisdictions, data may be processed in or transferred to US data centres, compounding the legal-compulsion exposure described in ds-002.", "lastVerifiedAt": "2026-05-02" }, { "id": "2a84f4c4-eae3-40c5-879d-35738c6b92ed", "flagGroupId": "440e8e1c-cfe4-4d2d-8393-865c0ce2dd39", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "aa6e8f30-2325-488f-a484-60ef063998d3", "valence": "strength", "tier": 2, "headline": "Gmail is hosted on Google infrastructure verified as green-hosted by the Green Web Foundation.", "explanation": "The Green Web Foundation's live check confirms that mail.google.com is classified as green-hosted, attributed to Google Cloud. This classification is based on supporting documentation Google has submitted to the Green Web Foundation, including its Environmental Report and CDP Climate Change Response.", "lastVerifiedAt": "2026-05-02" }, { "id": "f1873b7b-2056-483f-8a86-9062be88ffdf", "flagGroupId": "ae551e8a-9a0c-46f6-8e25-5a25b9d9c372", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "aa6e8f30-2325-488f-a484-60ef063998d3", "valence": "strength", "tier": 2, "headline": "Google's renewable energy claims for cloud services have been reviewed by third-party firm 3Degrees.", "explanation": "A review statement from 3Degrees, an independent sustainability consultancy, is publicly available and covers Google's cloud services renewable energy assertions. This provides a layer of third-party scrutiny beyond Google's own reporting, which is relevant to assessing the credibility of renewable claims that underpin Gmail's green-hosting status.", "lastVerifiedAt": "2026-05-02" }, { "id": "8a4d30dd-f14b-477c-a476-e1f1691637d5", "flagGroupId": "6c1ab8f8-1c45-498e-86b3-2fc3bd85538c", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "aa6e8f30-2325-488f-a484-60ef063998d3", "valence": "strength", "tier": 2, "headline": "Alphabet publishes an annual Environmental Report and submits a CDP Climate Change Response disclosing emissions data.", "explanation": "Google's parent company Alphabet produces a publicly available annual Environmental Report (2024 edition available) and submits a CDP Climate Change Response (2024 edition available). CDP disclosure typically requires Scope 1, 2, and 3 emissions data, making this a relatively comprehensive emissions reporting framework. An assurance letter for FY2023 environmental indicators is also publicly available, indicating that at least some reported figures have been subject to external verification.", "lastVerifiedAt": "2026-05-02" }, { "id": "c2d21d57-624b-444d-9d06-c3b275e19873", "flagGroupId": "af673230-5cdd-44c1-b156-7ad01c2860c1", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "aa6e8f30-2325-488f-a484-60ef063998d3", "valence": "caution", "tier": 3, "headline": "Google's public climate commitments are made at the corporate level and are not disaggregated to individual products such as Gmail.", "explanation": "Google's sustainability disclosures — including the Environmental Report, CDP response, and sustainability website — are published at the Alphabet/Google corporate level. No product-level emissions or renewable energy data specific to Gmail is available in the provided sources. This means that Gmail's environmental performance cannot be independently assessed apart from the broader corporate claims, which limits the ability to verify whether Gmail specifically benefits from or contributes to Google's stated commitments.", "lastVerifiedAt": "2026-05-02" }, { "id": "585549c8-a42c-4217-b8a4-8de517c09282", "flagGroupId": "117b7dd5-6824-4867-aa8c-49bea049f923", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "aa6e8f30-2325-488f-a484-60ef063998d3", "valence": "context", "tier": 3, "headline": "Google publishes a Supplier Responsibility Report covering supply chain practices relevant to hardware procurement.", "explanation": "A 2024 Supplier Responsibility Report is publicly available from Google, which may address hardware lifecycle considerations including responsible sourcing and end-of-life practices for data centre equipment. This report is relevant to the hardware-and-infrastructure dimension but its specific contents regarding data centre hardware lifecycle could not be confirmed from the available evidence summary alone.", "lastVerifiedAt": "2026-05-02" }, { "id": "e2edb9b9-75ce-4131-918c-959cbf57a597", "flagGroupId": "69fb94dd-a38f-4ab8-93c7-ba87989106cb", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "aa6e8f30-2325-488f-a484-60ef063998d3", "valence": "strength", "tier": 2, "headline": "Google publishes an annual Supplier Responsibility Report covering supply chain labour standards and audit findings.", "explanation": "Google produces a dedicated Supplier Responsibility Report (2024 edition available) that addresses labour conditions, audit programmes, and remediation activities across its hardware and services supply chain. The existence of this report indicates a degree of formal supply-chain transparency that goes beyond minimal disclosure, though the depth and independence of the underlying audits would require editorial review of the document's contents.", "lastVerifiedAt": "2026-05-02" }, { "id": "746712e2-6a80-4da5-b24b-d062c5625399", "flagGroupId": "e1010c1b-09b7-46d8-8640-8f7fa04d0b60", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "2bc5b466-2b01-43a1-b2bc-c3df7a1533c6", "valence": "concern", "tier": 2, "headline": "Green Web Foundation does not classify www.microsoft.com as green-hosted as of April 2026.", "explanation": "The Green Web Foundation's automated green-hosting check — which verifies whether a domain is served from infrastructure backed by verified renewable energy or credible green hosting evidence — returned a negative result for www.microsoft.com at the time of the audit. This is notable because Microsoft publicly states renewable energy commitments for its data centres; the discrepancy may reflect a gap in third-party verification records, a lag in the Green Web Foundation's dataset, or the use of energy instruments (such as RECs) that do not meet the Foundation's verification criteria.\n\nThis flag does not assert that Microsoft's infrastructure runs on fossil fuels, but it does indicate that independent third-party verification of green hosting for the domain serving Outlook is not currently confirmed by this dataset. Editors should consider whether additional third-party verification sources are available to corroborate or contradict this finding.", "lastVerifiedAt": "2026-05-02" }, { "id": "aef87035-39b1-4c84-95e7-720d4460716c", "flagGroupId": "d7181ef8-d6d5-46a7-a989-7a1b84f550f6", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "2719c556-29da-469b-9f6a-c3c291bc4ec8", "valence": "concern", "tier": 2, "headline": "Green Web Foundation's automated check does not classify www.microsoft.com as green-hosted.", "explanation": "The Green Web Foundation's greencheck API, which verifies hosting against its dataset of known renewable-energy or green-certified infrastructure providers, returned a 'green: false' result for www.microsoft.com as of April 2026. This means Microsoft's primary domain — and by extension the infrastructure serving OneDrive — is not currently listed in the Green Web Foundation's verified dataset of green hosts.\n\nThis does not necessarily mean Microsoft uses no renewable energy; the company publishes its own renewable energy and carbon commitments separately. However, the absence of third-party verification in the Green Web Foundation dataset means those commitments cannot be independently confirmed through this particular verification channel. Given that the Environmental Impact dimension prioritises third-party verification over corporate self-reporting, this gap is editorially significant.", "lastVerifiedAt": "2026-05-02" }, { "id": "f48a83a7-959d-4ac3-bf08-1a4e789c7a24", "flagGroupId": "d628553f-4484-4088-a3fa-d825a7ec2b82", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "strength", "tier": 2, "headline": "Fastmail encrypts data at rest on disk and in transit using TLS 1.3 with Perfect Forward Secrecy.", "explanation": "The security page states that all data is stored encrypted on disks inside locked data centres, and that all communication between data centres, servers, and user devices is encrypted, with full support for TLS 1.3 and Perfect Forward Secrecy. HTTP Strict Transport Security and a strict Content Security Policy are also noted as additional protections.", "lastVerifiedAt": "2026-05-06" }, { "id": "ac0818b8-e374-4c11-a30a-afaaf45f28e9", "flagGroupId": "acd9975c-eef5-4bdd-a658-9f6171cd45c1", "version": 1, "attachmentLevel": "vendor", "vendorId": "ef6eadf4-4d4c-4c9e-9003-2a2c0406e02a", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Mattermost has not published environmental or sustainability data; its cloud offering runs on AWS, whose renewable energy commitments and sustainability reporting are more extensive than Mattermost's own.", "explanation": "Mattermost Inc. has not published a sustainability or carbon footprint report. Its cloud product runs on Amazon Web Services (AWS), which has published extensive sustainability commitments including 100% renewable energy by 2025 and net-zero carbon by 2040. For self-hosted deployments, the environmental impact is entirely determined by the infrastructure operator's energy choices.", "lastVerifiedAt": "2026-05-03" }, { "id": "9b0e79fb-5d9c-4d98-aa97-3b1170414535", "flagGroupId": "e1e83c7e-9763-4ce1-8ed1-2f531eff15c6", "version": 1, "attachmentLevel": "vendor", "vendorId": "ef6eadf4-4d4c-4c9e-9003-2a2c0406e02a", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Mattermost employs approximately 200 people across a remote-first global team; as a private company it does not publish diversity or pay equity reports.", "explanation": "Mattermost operates a remote-first company with staff distributed globally. As a private venture-backed company, it is not subject to public company reporting requirements on diversity, pay equity, or supply chain. No significant labour controversies have been publicly reported. The open-source community that contributes to Mattermost is separate from employee relationships.", "lastVerifiedAt": "2026-05-03" }, { "id": "ce2b0616-c24a-475b-ab7a-59b3c382b9bc", "flagGroupId": "576e71a0-e7a1-4a3a-8820-836327ca2f01", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "7cdd6a9d-0a91-4c78-991b-c0d7b065dd71", "valence": "concern", "tier": 1, "headline": "WhatsApp collects extensive metadata — including who users contact, when, how often, and device and location information — and shares this with Meta Platforms for advertising profiling.", "explanation": "WhatsApp's privacy policy confirms it collects and shares with Meta: phone numbers of all contacts in a user's address book (even those not on WhatsApp), messaging frequency and patterns, IP addresses, device identifiers, battery level, mobile network, and approximate location. This metadata is used to build advertising profiles and improve ad targeting across Facebook, Instagram, and the Meta Audience Network. While message content is end-to-end encrypted, the metadata can reveal very sensitive information: who someone communicates with (lawyers, doctors, journalists), communication patterns, and social networks. The 2021 WhatsApp privacy policy update that expanded Meta data sharing caused a major user backlash and resulted in GDPR enforcement action by the Irish DPC.", "lastVerifiedAt": "2026-05-03" }, { "id": "2bed3224-cc1b-435e-9368-0d1c18b258d9", "flagGroupId": "c6d04875-0ecb-4bd8-82d2-d6ea97430d3d", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "7cdd6a9d-0a91-4c78-991b-c0d7b065dd71", "valence": "concern", "tier": 1, "headline": "WhatsApp cloud backups (Google Drive on Android, iCloud on iOS) are not end-to-end encrypted by default, exposing message history to Google, Apple, and law enforcement access.", "explanation": "WhatsApp's E2E encryption applies only to messages in transit. When users back up their chat history to Google Drive (Android) or iCloud (iOS), those backups are stored using the cloud provider's encryption — not WhatsApp's E2E encryption — unless the user explicitly enables End-to-End Encrypted Backup in WhatsApp settings. This feature (launched 2021) is opt-in and off by default. The vast majority of users retain cloud backups that Google or Apple can access and that can be compelled by law enforcement. This is the primary vector by which WhatsApp message history is obtained in criminal investigations.", "lastVerifiedAt": "2026-05-03" }, { "id": "6027d8ff-a8e2-4c5c-8352-b03a13230989", "flagGroupId": "2620f7cc-2eb2-4453-9731-6338726c8099", "version": 1, "attachmentLevel": "vendor", "vendorId": "48ac5b16-0636-40a1-b470-d2dd35ef316f", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 1, "headline": "The Irish Data Protection Commission fined Meta €225 million in 2021 for WhatsApp's lack of transparency about data sharing; subsequent GDPR enforcement actions have addressed broader Meta data practices.", "explanation": "In September 2021, the Irish Data Protection Commission (DPC) issued a €225 million GDPR fine against WhatsApp Ireland Limited for failing to properly inform users about how their data was shared with other Meta companies. This was one of the largest GDPR fines at the time. The DPC subsequently imposed further fines on Meta's Facebook and Instagram operations. The European Data Protection Board (EDPB) overruled the DPC on the amount and directed a higher fine, illustrating the severity of the non-compliance finding.", "lastVerifiedAt": "2026-05-03" }, { "id": "2408e3b4-564d-4e5e-8efc-3658104de303", "flagGroupId": "ae36333e-5c0f-4fcd-86d8-c7e6c997d546", "version": 1, "attachmentLevel": "vendor", "vendorId": "48ac5b16-0636-40a1-b470-d2dd35ef316f", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 1, "headline": "Meta is a US company subject to CLOUD Act and FISA Section 702; WhatsApp metadata and unencrypted cloud backups can be compelled by US law enforcement and intelligence agencies without GDPR constraints.", "explanation": "Meta Platforms, Inc. is incorporated in Delaware and headquartered in California. Under the CLOUD Act (2018), US law enforcement can compel Meta to provide data stored anywhere in the world. Under FISA Section 702, US intelligence agencies can compel access to data held by US electronic communications services. While WhatsApp's message content E2E encryption is technically resistant to these compulsion requests, WhatsApp metadata (contacts, communication patterns, device data) and unencrypted cloud backups are not protected by the E2E encryption. Meta's published Transparency Report shows it regularly responds to thousands of law enforcement requests.", "lastVerifiedAt": "2026-05-03" }, { "id": "c37dc2bb-5094-4499-93bc-0bf2a9ccc404", "flagGroupId": "d471b641-2007-4293-af32-ed2c226d1c2d", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "7cdd6a9d-0a91-4c78-991b-c0d7b065dd71", "valence": "concern", "tier": 2, "headline": "WhatsApp uses a proprietary protocol built on the Signal Protocol; it does not federate with other messaging services, creating a significant network-effect lock-in.", "explanation": "WhatsApp's messaging protocol is proprietary (based on Signal Protocol but WhatsApp-specific). Users can only communicate with other WhatsApp users. There is no open federation, no support for standard protocols (XMPP, Matrix), and no official API for third-party integration with personal messaging. The DMA designates Meta as a gatekeeper and requires WhatsApp to offer interoperability with third-party messaging services. As of early 2025, Meta had published a developer preview of its interoperability API, but full interoperability was not yet live.", "lastVerifiedAt": "2026-05-03" }, { "id": "e761bf19-30aa-4496-86d5-a11b081fe77d", "flagGroupId": "47cc2dbf-a7d3-4f77-8835-ecefe690dbcb", "version": 1, "attachmentLevel": "vendor", "vendorId": "48ac5b16-0636-40a1-b470-d2dd35ef316f", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Mark Zuckerberg controls Meta Platforms through super-voting Class B shares, holding approximately 60% of voting power while owning ~13% of economic interest, concentrating governance in a single individual.", "explanation": "Meta's dual-class share structure gives Class B shareholders 10 votes per share compared to 1 vote for Class A shareholders. Zuckerberg holds substantially all Class B shares. This means that public shareholders, institutional investors, and even the board cannot override Zuckerberg's decisions. For WhatsApp users, this governance structure means that the company's direction — including decisions about data use, privacy policy, and business model — is ultimately controlled by one person with limited accountability mechanisms.", "lastVerifiedAt": "2026-05-03" }, { "id": "d07ae808-288c-4cad-9373-51848c31ad14", "flagGroupId": "d29dbfc2-178c-4507-85ff-14737918402b", "version": 1, "attachmentLevel": "vendor", "vendorId": "48ac5b16-0636-40a1-b470-d2dd35ef316f", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Meta has matched 100% of its global electricity consumption with renewable energy since 2020 and has pledged net-zero emissions across its value chain by 2030; WhatsApp infrastructure falls within this commitment.", "explanation": "Meta's sustainability reports confirm renewable energy matching for its data centres (via Power Purchase Agreements and renewable energy certificates). Meta has set a target for net-zero greenhouse gas emissions across its operations and value chain by 2030. WhatsApp's infrastructure runs within Meta's global data centre network, which is included in these commitments. Meta has achieved water-neutral operations at some facilities. The commitments are ambitious but rely partly on RECs (renewable energy certificates) rather than direct renewable consumption.", "lastVerifiedAt": "2026-05-03" }, { "id": "662834db-f176-407a-8020-95577fa1a276", "flagGroupId": "3a00c510-c2f9-4d28-94ee-4d03860b0fb7", "version": 1, "attachmentLevel": "vendor", "vendorId": "48ac5b16-0636-40a1-b470-d2dd35ef316f", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 3, "headline": "Meta's content moderation workforce — which includes review of WhatsApp content flagged for child safety violations — relies heavily on third-party contractors in low-wage countries who experience documented psychological harm from exposure to disturbing content.", "explanation": "WhatsApp uses client-side scanning only for certain categories of illegal content (primarily child sexual abuse material, CSAM). Review of flagged content is performed by Meta's content moderation teams, which include thousands of contract workers at facilities in countries including Kenya, Ghana, and the Philippines. Investigative reporting (notably The Verge and Time magazine) has documented that these workers experience PTSD, inadequate psychological support, and poor working conditions while reviewing some of the most disturbing content on the internet. This is a sector-wide issue but Meta is among the largest operators of such facilities.", "lastVerifiedAt": "2026-05-03" }, { "id": "0be9d6ef-d2de-4418-a5b2-55fdcfefbd44", "flagGroupId": "187fb051-b23a-41ab-b59f-5a0c84375ee8", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "7cdd6a9d-0a91-4c78-991b-c0d7b065dd71", "valence": "context", "tier": 3, "headline": "WhatsApp supports screen readers (VoiceOver on iOS, TalkBack on Android) and offers voice messaging, but does not provide automatic captions for voice and video calls, limiting accessibility for deaf and hard-of-hearing users.", "explanation": "WhatsApp's iOS and Android apps are compatible with native platform accessibility features. VoiceOver (iOS) and TalkBack (Android) work with the app at a basic level. WhatsApp offers voice messages as an accessible input method. However, WhatsApp does not offer live captions during voice or video calls, nor does it provide automatic transcription of voice messages. This limits its accessibility for users who are deaf or hard of hearing. No independent WCAG audit has been published for WhatsApp.", "lastVerifiedAt": "2026-05-03" }, { "id": "8504d1ac-28db-4f65-b1a0-547a54e4186f", "flagGroupId": "e3ab8b7e-17fe-4540-8636-e714389b65d5", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "10cfed88-641a-4267-b566-21b74d019545", "valence": "concern", "tier": 1, "headline": "Bing is an ad-supported search engine that uses search queries, click behaviour, and user account data to build advertising profiles; Microsoft links Bing searches to a user's Microsoft account when signed in.", "explanation": "Microsoft's Bing privacy policy confirms that search queries, results clicked, and browsing behaviour are collected and used to personalise advertising. When users are signed into their Microsoft account, this data is linked to their account history. Microsoft uses this data for targeted advertising across Bing, MSN, Outlook.com, and the broader Microsoft Advertising network. Search queries can reveal sensitive information (health, legal, financial) and Microsoft's ad-supported model creates a structural conflict of interest with user privacy, similar to Google Search. ToS;DR rates Microsoft's terms as Grade D.", "lastVerifiedAt": "2026-05-03" }, { "id": "3363c7e8-be0e-489c-aae0-3a81f28cd791", "flagGroupId": "11cdae7d-3a5f-4940-931b-d0619847a6fb", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "10cfed88-641a-4267-b566-21b74d019545", "valence": "concern", "tier": 2, "headline": "Bing's Copilot AI search feature transmits conversational queries to Azure OpenAI services; these queries may be retained and reviewed by Microsoft for safety and quality purposes.", "explanation": "Bing's AI chat (Copilot) is powered by GPT-4/Azure OpenAI. When users engage with Copilot, their conversational queries are transmitted to Microsoft's Azure infrastructure. Microsoft's privacy policy states that AI chat data may be reviewed by Microsoft employees or contractors for safety, quality, and abuse prevention. Unlike keyword search, conversational AI queries can contain more sensitive, detailed personal information. Users signed into their Microsoft account have conversational history retained by default.", "lastVerifiedAt": "2026-05-03" }, { "id": "e6fedd3e-d452-43c4-9df9-3b5d5444facd", "flagGroupId": "d8e2a275-32fd-4b93-a5d3-00f858ddbf1c", "version": 1, "attachmentLevel": "vendor", "vendorId": "321b2428-cc10-429d-bb40-98e2f9d235b2", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 1, "headline": "Bing is operated by Microsoft, a US company; search query data and user profiles are subject to CLOUD Act and FISA Section 702 demands from US law enforcement and intelligence agencies.", "explanation": "Microsoft Corporation is incorporated in Washington State and subject to US law. Search queries made to Bing, account data, and browsing history linked to Microsoft accounts can be compelled by US law enforcement (CLOUD Act) and intelligence agencies (FISA Section 702). Microsoft's Transparency Report documents government data requests. Bing's position as a major search engine with significant enterprise use (Bing is integrated into Windows, Edge, and Office Copilot) makes this US jurisdiction a relevant consideration for organisations and privacy-sensitive users.", "lastVerifiedAt": "2026-05-03" }, { "id": "4e06cbcd-f49d-4ab1-b5f0-af80c0cf7e14", "flagGroupId": "e444c205-f69b-45b5-85c6-09f1e0dee1be", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "10cfed88-641a-4267-b566-21b74d019545", "valence": "concern", "tier": 3, "headline": "Bing's search algorithm is entirely proprietary; Bing serves as the backend index for many other search engines (DuckDuckGo, Yahoo), creating a significant concentration risk in the search index market.", "explanation": "Bing's ranking algorithm, indexing methodology, and personalisation signals are proprietary and not disclosed. More significantly, Bing licenses its search results API to a large number of other search engines and portals, including DuckDuckGo, Yahoo, and others. This means that users of these \"Bing-powered\" alternatives are ultimately receiving results derived from Microsoft's proprietary index and ranking system. Only a small number of search engines (Google, Yandex, Baidu, Brave, Kagi with its own index) have independent search indexes; the rest are Bing-dependent. This concentration is a significant resilience and competition concern.", "lastVerifiedAt": "2026-05-03" }, { "id": "35a66510-eb95-46a5-ab76-b507a250eb1c", "flagGroupId": "ac83182a-39c3-4203-9cba-4f6b36b08324", "version": 1, "attachmentLevel": "vendor", "vendorId": "321b2428-cc10-429d-bb40-98e2f9d235b2", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Microsoft has been designated an EU DMA gatekeeper; Bing's role as the default search engine in Edge and Windows raises competition concerns that DMA is designed to address.", "explanation": "Microsoft's DMA gatekeeper designation covers Windows PC OS and LinkedIn. While Bing is not itself a DMA-designated gatekeeper service, its integration as the default search engine in Edge (the default Windows browser) creates bundling concerns. The EC has specifically required browser choice screens in Windows, which indirectly affects Bing's default search position. The DOJ antitrust case against Google also cited Microsoft/Bing as a would-be competitor harmed by Google's exclusive default search arrangements.", "lastVerifiedAt": "2026-05-03" }, { "id": "71c2a71a-7d11-4622-b694-ce149f8dbb8c", "flagGroupId": "e056a5cc-9fc7-4912-a924-828ba64c81f6", "version": 1, "attachmentLevel": "vendor", "vendorId": "321b2428-cc10-429d-bb40-98e2f9d235b2", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Bing runs on Microsoft Azure infrastructure, which is matched with renewable energy; Bing's AI Copilot features significantly increase energy consumption per query compared to keyword search.", "explanation": "Microsoft Azure is matched 100% with renewable energy and Microsoft has committed to carbon negative operations by 2030. Bing benefits from this infrastructure. However, Bing's Copilot AI features (powered by Azure OpenAI) have significantly higher energy consumption per query than traditional keyword search. Microsoft acknowledged in its 2024 sustainability report that AI workloads have substantially increased total energy consumption.", "lastVerifiedAt": "2026-05-03" }, { "id": "84413c4e-2c06-4b8e-9030-b6f7fbc85831", "flagGroupId": "5140e117-b648-4381-aa4e-251c1dd517dc", "version": 1, "attachmentLevel": "vendor", "vendorId": "321b2428-cc10-429d-bb40-98e2f9d235b2", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Microsoft publishes diversity and inclusion data; the 2023 layoffs affected Bing's engineering teams; Microsoft's extended contractor workforce includes content moderation for Bing.", "explanation": "See video-conferencing__microsoft-teams__2026-05-03.yaml for full Microsoft labour context. Bing specifically relies on human content quality raters (similar to Google Search) employed through third-party contractors. The 2023 Microsoft layoffs affected Bing engineering teams.", "lastVerifiedAt": "2026-05-03" }, { "id": "8d46024e-1946-4885-b59c-0f5c5e824b9b", "flagGroupId": "805a4802-acba-4485-bfd5-c0a966f0e1bb", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "10cfed88-641a-4267-b566-21b74d019545", "valence": "context", "tier": 3, "headline": "Bing's search interface is keyboard navigable and screen reader compatible; Bing's Copilot AI can assist users with reading comprehension difficulties by summarising search results in plain language.", "explanation": "Bing's search interface supports keyboard navigation and is compatible with major screen readers. The Copilot AI feature can provide conversational summaries of search results, which may benefit users with reading difficulties, cognitive disabilities, or those for whom English is not a first language. Microsoft publishes an accessibility conformance report for Bing. Overall accessibility is comparable to Google Search.", "lastVerifiedAt": "2026-05-03" }, { "id": "3f655e74-be5e-45d6-9d2b-f515fcb243ca", "flagGroupId": "30cf0ff5-c868-40d4-aec2-eec347fc62cf", "version": 1, "attachmentLevel": "vendor", "vendorId": "805f8300-eaa0-46c5-88cc-a3f6b294fa83", "suiteId": null, "serviceId": null, "valence": "context", "tier": 2, "headline": "Brave Software is a US company subject to CLOUD Act; however, Brave Search's no-logging design means there is minimal user data to compel — the primary risk is account data for Premium users.", "explanation": "Brave Software, Inc. is incorporated in Delaware and subject to US law including the CLOUD Act. However, Brave Search's design minimises the impact of this: since no IP addresses or user identifiers are logged for anonymous searches, US law enforcement cannot compel data that does not exist. For Brave Search Premium account holders, account data (email, payment) would be accessible under legal compulsion. For anonymous free-tier users, there is effectively no user data for Brave to disclose.", "lastVerifiedAt": "2026-05-03" }, { "id": "5de4bdc0-dfd3-45bd-bf22-3dc2eefab7a6", "flagGroupId": "9172ebb6-6f61-4ab4-b81f-48783514e895", "version": 1, "attachmentLevel": "vendor", "vendorId": "805f8300-eaa0-46c5-88cc-a3f6b294fa83", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 3, "headline": "Brave Software was founded by Brendan Eich, who resigned as Mozilla CEO in 2014 due to public controversy over his 2008 donation opposing same-sex marriage; this founding history is relevant context for some organisations' vendor assessment.", "explanation": "Brendan Eich resigned as Mozilla CEO in April 2014 after three months, following public pressure from employees and users regarding his $1,000 donation in 2008 to support California's Proposition 8, which banned same-sex marriage. The donation became public in 2012. For organisations that include supplier ethics in their vendor assessment, Eich's founding role at Brave and his history is a relevant consideration. Eich has not made similar public statements since and Brave has not taken positions on social issues. The relevance is context-dependent.", "lastVerifiedAt": "2026-05-03" }, { "id": "0510697e-e561-411d-8934-8170f01d6634", "flagGroupId": "ac233ccd-d8d6-4180-873a-be3bda5f198d", "version": 1, "attachmentLevel": "vendor", "vendorId": "805f8300-eaa0-46c5-88cc-a3f6b294fa83", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Brave Software has not published environmental or sustainability data; Brave Search infrastructure runs on cloud providers with renewable energy commitments.", "explanation": "No sustainability report has been published by Brave Software. Brave Search's infrastructure runs on major cloud providers with renewable energy commitments. Brave's independent index building (crawling the web) is energy-intensive but comparable to other search engine crawl operations.", "lastVerifiedAt": "2026-05-03" }, { "id": "5c5e7777-54af-48f4-adcc-878d91f55f33", "flagGroupId": "c33002f9-8495-469f-9e52-19bcfc93e105", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "6e69cb04-3ecc-4174-b0f2-a75c438f185f", "valence": "strength", "tier": 1, "headline": "Kagi has no advertising revenue and does not collect or sell user search data for advertising purposes; the subscription model eliminates the structural conflict of interest between search quality and advertiser interests.", "explanation": "Kagi's entire revenue model is user subscriptions. There is no advertising on the platform, no sponsored results, and no sale of user data to third parties. Search queries are not used to build advertising profiles. Kagi's privacy policy states that search queries are associated with a session but not permanently stored with user identity. This model fundamentally changes the privacy incentive structure compared to ad-supported search engines: Kagi has no incentive to collect more data than needed to provide the search service.", "lastVerifiedAt": "2026-05-03" }, { "id": "6d797663-252f-4549-893a-7eb6292a714a", "flagGroupId": "d9991d24-fc8d-44e1-989b-9f1461aed726", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "6e69cb04-3ecc-4174-b0f2-a75c438f185f", "valence": "concern", "tier": 2, "headline": "Kagi requires a paid user account; search queries are therefore linked to an account identity, which is a different privacy model from anonymous-use search engines like SearXNG.", "explanation": "Because Kagi is subscription-based, all searches are associated with a user account. This means Kagi's privacy posture is different from fully anonymous search options: Kagi knows who you are (via email/payment) and can in principle link searches to your identity. Kagi's privacy policy states that searches are not permanently stored with user identity after the session, but the account linkage means that in response to a valid legal demand, Kagi could be compelled to provide account holder information and potentially session data. This is structurally different from SearXNG (self-hosted, no accounts) or Brave Search (anonymous use, no account required).", "lastVerifiedAt": "2026-05-03" }, { "id": "87f05e79-3187-47aa-b578-9ecec5ded36b", "flagGroupId": "6e6a4660-0ead-45cb-9616-f83def2e3848", "version": 1, "attachmentLevel": "vendor", "vendorId": "35a37028-6f97-4eaf-af80-2f8cb7e3904d", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Kagi is a US company; account data (email, payment, account history) is subject to CLOUD Act and FISA Section 702; despite strong privacy policies, US law enforcement can compel account holder data.", "explanation": "Kagi Inc. is incorporated in Delaware. Account holder data (email address, payment records, account creation history) is subject to US legal compulsion. Kagi's no-log search claim covers search queries, but account registration data and payment history are retained and subject to lawful disclosure. For users with elevated risk profiles (journalists, activists), the US jurisdiction of their Kagi account is a relevant consideration despite Kagi's strong privacy practices.", "lastVerifiedAt": "2026-05-03" }, { "id": "ce18ec06-ea6b-48b9-89ca-d473fe536fd8", "flagGroupId": "c49f0514-f5a0-425e-ab65-639792bfc8e2", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "6e69cb04-3ecc-4174-b0f2-a75c438f185f", "valence": "strength", "tier": 2, "headline": "Kagi allows users to personalise search results by blocking specific domains, boosting preferred sources, and filtering results — giving users more agency over their search experience than any major search engine.", "explanation": "Kagi's \"Personal Results\" feature allows subscribers to add domains to a blocklist (permanently suppressed from results), boost list (always shown prominently), or neutral list. Users can also import custom search data and configure AI result summarisation. This user-side customisation capability is unique among mainstream search engines. It gives users meaningful control over the composition of their search results — an important openness feature even if the underlying algorithm is proprietary.", "lastVerifiedAt": "2026-05-03" }, { "id": "b20a1825-9c92-4345-ad87-438e5f4b4f42", "flagGroupId": "a0f94988-2e00-4b1c-bb3a-2ef7bdd4b394", "version": 1, "attachmentLevel": "vendor", "vendorId": "35a37028-6f97-4eaf-af80-2f8cb7e3904d", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 2, "headline": "Kagi has no external investors and is funded entirely by user subscriptions; this eliminates VC pressure to monetise user data or pivot to advertising, but creates financial fragility if subscriber growth is insufficient.", "explanation": "Kagi's founder has stated the company is bootstrapped with no venture capital investors. This means no investor can pressure the company to introduce advertising or change its privacy model. The business model is sustainable only if subscription revenue covers costs. If Kagi fails to achieve sufficient subscriber numbers, the service could be discontinued. Users who build habits or integrations around Kagi should be aware of this financial risk. The absence of VC investors is a positive governance characteristic for privacy but creates a concentration of risk around a single founder/private company.", "lastVerifiedAt": "2026-05-03" }, { "id": "5f3f25bd-f9ec-4163-808a-5ea76d464dc1", "flagGroupId": "c67052c8-bf60-4791-92c6-2815d1331db3", "version": 1, "attachmentLevel": "vendor", "vendorId": "35a37028-6f97-4eaf-af80-2f8cb7e3904d", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Kagi has not published sustainability or energy data; as a small company its absolute energy consumption is modest; its cloud infrastructure uses AWS and other providers with renewable commitments.", "explanation": "Kagi is a small company with limited public infrastructure disclosures. Its search infrastructure runs on major cloud providers with renewable energy commitments. No sustainability report has been published. Kagi's total energy consumption is significantly smaller than Google, Bing, or DuckDuckGo given its subscriber count.", "lastVerifiedAt": "2026-05-03" }, { "id": "b68987d7-8494-44b7-9231-10055d54d4ed", "flagGroupId": "1f140c80-7f18-4f96-978d-ccf9eb86fa52", "version": 1, "attachmentLevel": "vendor", "vendorId": "35a37028-6f97-4eaf-af80-2f8cb7e3904d", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Kagi is a small startup employing fewer than 50 people globally; no labour or supply chain transparency reporting exists or is expected.", "explanation": "Kagi operates with a globally distributed small team. No significant labour controversies have been reported. As a small private company, no reporting obligations apply. The company's founder-driven culture and subscription business model suggest a focus on product quality over growth-at-all-costs, but no external verification is available.", "lastVerifiedAt": "2026-05-03" }, { "id": "6398c2ec-146f-449b-99b4-372082d1d7c6", "flagGroupId": "2716a264-358f-4de6-ba32-de1219fad738", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "6e69cb04-3ecc-4174-b0f2-a75c438f185f", "valence": "context", "tier": 3, "headline": "Kagi's search interface is keyboard navigable and compatible with screen readers at a basic level; no WCAG conformance statement has been published.", "explanation": "Kagi's search interface is relatively simple compared to Google or Bing. The results page uses standard HTML and is navigable by keyboard and screen readers. Kagi's customisation settings (blocking/boosting domains) have more complex UI elements. No WCAG conformance statement or VPAT has been published.", "lastVerifiedAt": "2026-05-03" }, { "id": "cc5e8bed-7675-49db-bfa2-52f8fe2f3cb9", "flagGroupId": "6dd71ab2-25ba-4e83-bbf8-6663cfcf1d63", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "caution", "tier": 2, "headline": "Fastmail does not offer end-to-end encryption in its own apps, though it supports PGP and S/MIME via third-party clients.", "explanation": "The security page states that Fastmail does not provide end-to-end encryption in its own webmail or apps, citing trade-offs including loss of full-text search, message previews, and spam filtering. Users who require end-to-end encryption are directed to third-party apps supporting PGP or S/MIME, or to Signal for sensitive communications. This means Fastmail retains the technical ability to access message content on its servers.", "lastVerifiedAt": "2026-05-06" }, { "id": "89e25aed-09b8-495b-95d8-5a7065cf10ff", "flagGroupId": "38b3e6c0-bd6a-49de-a905-7001f200e4e4", "version": 1, "attachmentLevel": "vendor", "vendorId": "b63ef81c-904e-4cc6-a85a-ee1b028bf1dd", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "SearXNG is a volunteer-maintained community fork with no legal entity, no paid maintainers, and no formal governance; long-term maintenance depends on continued volunteer engagement.", "explanation": "SearXNG was forked from Searx in 2021 after Searx's development slowed significantly. SearXNG itself has no formal governance body. Maintainers are volunteers operating on GitHub. If key contributors stop contributing, development pace could slow again. However, the AGPLv3 licence means the software cannot be made proprietary; any organisation can fork and maintain their own version. The community has remained active since 2021 and the codebase is actively maintained. For organisations relying on a self-hosted instance, the software is sufficiently stable and the code is available regardless of community activity.", "lastVerifiedAt": "2026-05-03" }, { "id": "2673e575-0140-4c93-9a9b-c4329e9bdf89", "flagGroupId": "8308fd45-bdce-4889-ae1e-258a19b898f0", "version": 1, "attachmentLevel": "vendor", "vendorId": "b63ef81c-904e-4cc6-a85a-ee1b028bf1dd", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "SearXNG has no central infrastructure; its environmental footprint depends on the hosting organisation's choices; as a metasearch proxy it adds modest incremental energy use on top of the underlying search engines.", "explanation": "SearXNG is self-hosted with no central servers. The environmental footprint is determined by the hosting organisation. A SearXNG instance uses modest resources (Python application with minimal storage requirements). The proxy nature of the service means it adds some network overhead (each query touches multiple search engines) but this is negligible compared to the energy used by the underlying search engine infrastructure itself.", "lastVerifiedAt": "2026-05-03" }, { "id": "84c26e58-578b-43d1-9b18-33ca2f88285c", "flagGroupId": "6da11faf-4a98-4c98-a6e4-8244a9fdca3f", "version": 1, "attachmentLevel": "vendor", "vendorId": "b63ef81c-904e-4cc6-a85a-ee1b028bf1dd", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "SearXNG is maintained entirely by volunteers; there is no paid workforce, no supply chain, and no commercial labour relationships.", "explanation": "SearXNG's contributors are volunteers. No employees, no supply chain, no commercial relationships. The volunteer labour dynamic is the same as for other community open-source projects — contributors give time freely, creating community-sustainability risk but no employment or labour concern.", "lastVerifiedAt": "2026-05-03" }, { "id": "1929514a-5de2-4415-8b3d-fca42cb7a007", "flagGroupId": "b6247016-a1c7-4beb-b8cd-8e5249ffd2b5", "version": 1, "attachmentLevel": "vendor", "vendorId": "f3af2180-08ba-4da8-bdaa-56d9a20ec381", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 3, "headline": "BigBlueButton has no formal foundation or independent governance body; the project is primarily maintained by Blindside Networks, a small Canadian company, creating a single-point-of-failure governance risk.", "explanation": "Unlike projects managed by major foundations (Apache, CNCF, Linux Foundation), BigBlueButton does not have a formal independent governance body. Blindside Networks employs the core maintainers and drives the project roadmap. While the LGPL licence allows forks and independent development, the concentration of expertise and release management in one small company is a governance risk. If Blindside Networks were to reduce investment, be acquired, or close, the project's maintenance pace could drop significantly. The project has a substantial user community that provides some mitigation, but formal governance succession planning is absent.", "lastVerifiedAt": "2026-05-03" }, { "id": "44d26a25-bb4f-4070-9f4c-097ddbab62b6", "flagGroupId": "bc014efe-17f8-49bd-ba49-fd92ee585d07", "version": 1, "attachmentLevel": "vendor", "vendorId": "f3af2180-08ba-4da8-bdaa-56d9a20ec381", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "BigBlueButton is maintained primarily by Blindside Networks, a small (~20-person) Canadian company; no labour practices or supply chain transparency information is publicly available.", "explanation": "Blindside Networks is a small private company with no public reporting obligations on workforce diversity, pay equity, or supply chain. The open-source community contributing to BigBlueButton (volunteers, academic institutions) represent unpaid contributions. No significant labour controversies have been reported. Standard private SME limitations on transparency apply.", "lastVerifiedAt": "2026-05-03" }, { "id": "cf2b3f4e-86ed-47d5-8187-0695896d49ea", "flagGroupId": "d2e9b00d-245e-4bde-9e9f-2717e727a618", "version": 1, "attachmentLevel": "vendor", "vendorId": "04146bf6-39f9-44a7-b121-639b17db1158", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 2, "headline": "Element Call is part of the Matrix ecosystem governed by the Matrix Foundation; the Apache 2.0 licence and open standard protect against vendor lock-in regardless of Element's company status.", "explanation": "As with the Matrix protocol and Element messaging client, Element Call's development is grounded in an open specification and Apache 2.0 licensed code. The Matrix Foundation (CIC) governs the protocol independently of Element as a company. Any organisation can fork Element Call, run it independently, and contribute to or diverge from Element's roadmap. This open governance structure is a strong protection against the risks associated with relying on a single commercial vendor for critical communications infrastructure.", "lastVerifiedAt": "2026-05-03" }, { "id": "614494cf-6a39-4135-ba46-f5f2dd183344", "flagGroupId": "17d007eb-ed9a-4ba0-b093-994defd5274d", "version": 1, "attachmentLevel": "vendor", "vendorId": "04146bf6-39f9-44a7-b121-639b17db1158", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Element is a small UK company; no standalone labour or supply chain transparency reporting; see messaging__element for full context.", "explanation": "Element Call is maintained by Element's engineering team. See messaging__element__2026-05-03.yaml for full labour context. No labour controversies specific to Element Call have been reported.", "lastVerifiedAt": "2026-05-03" }, { "id": "adba4fa7-be32-430b-a390-528d284253e6", "flagGroupId": "44682b6a-58a1-4fb9-997e-74e5d5c52a8f", "version": 1, "attachmentLevel": "vendor", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 1, "headline": "For free consumer users, Google Meet usage data (meeting frequency, duration, participants) may be used to improve Google's ad targeting; Google Workspace users are subject to contractual data processing restrictions.", "explanation": "Google's privacy policy distinguishes between consumer Google accounts and Google Workspace accounts. For consumer accounts (free Gmail/Meet), usage data — including meeting metadata such as who the user met with, when, and for how long — may be used to improve Google services and, indirectly, Google's advertising profile. Google Workspace customers (paid) are covered by the Google Cloud Data Processing Addendum, which limits Google's use of customer data to providing the service. For organisations, this means using Workspace (paid) provides stronger contractual data protection than the free consumer tier. Meeting content in transit is not used for advertising, but the distinction between metadata collection for free vs. paid users is a tier-1 consideration.", "lastVerifiedAt": "2026-05-03" }, { "id": "627874f2-fe91-41e5-9665-3be738fc6ebf", "flagGroupId": "2121dce0-0364-40cc-8a5a-c8b3877765a0", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d30271ea-853e-4909-87e0-94c5532df545", "valence": "context", "tier": 2, "headline": "Google Meet encrypts all calls in transit (TLS); end-to-end encryption is optionally available for personal calls but not available by default for group Workspace meetings.", "explanation": "All Google Meet calls use TLS encryption in transit. In 2022, Google added optional end-to-end encryption for one-on-one calls. For group meetings (3+ participants), even in Google Workspace, calls are encrypted in transit but not end-to-end encrypted — meaning Google's infrastructure can technically access call content. This is the standard model for cloud video conferencing but is meaningfully weaker than services that offer E2E encryption for group calls (such as Jitsi Meet with E2E mode enabled). Google has not provided a timeline for E2E encryption for all group calls.", "lastVerifiedAt": "2026-05-03" }, { "id": "97ba8548-05d4-46cf-a11d-aefcf43b1344", "flagGroupId": "4af9001b-dded-4156-abb7-9b19d1341767", "version": 1, "attachmentLevel": "vendor", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 1, "headline": "Google Meet is operated by a US company; meeting metadata and potentially call content (absent E2E encryption) are subject to CLOUD Act compulsion and FISA Section 702 demands.", "explanation": "Google LLC is a US company subject to the CLOUD Act (2018), which allows US law enforcement to compel production of data stored anywhere in the world. FISA Section 702 allows US intelligence agencies to compel access. For Google Meet, this means meeting records, participant information, recordings, and (for non-E2E calls) call content can be compelled. Google publishes a Transparency Report documenting government data requests. Workspace customers in the EU can negotiate EU Data Processing Addenda and Standard Contractual Clauses, but these do not protect against US national security demands.", "lastVerifiedAt": "2026-05-03" }, { "id": "9305e27d-47d4-45fa-ab1b-70b2fea01275", "flagGroupId": "63224133-ae00-4827-b0fb-f16fb12b4050", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d30271ea-853e-4909-87e0-94c5532df545", "valence": "concern", "tier": 3, "headline": "Google Meet uses proprietary protocols; there is no self-hosting option and no support for open standards (SIP, H.323) in the consumer or standard Workspace tiers.", "explanation": "Google Meet is a closed, cloud-only service. Users cannot deploy their own Meet infrastructure. The service uses Google's proprietary QUIC-based transport protocol rather than open standards like SIP or H.323. There is no federation with third-party conferencing systems from the consumer interface. This creates a hard dependency on Google's infrastructure and continuity of service.", "lastVerifiedAt": "2026-05-03" }, { "id": "5c7d10fc-0181-411a-9ce0-96f5161b5da7", "flagGroupId": "ff4f33ba-2789-4e3d-a05a-7ecc787c43a2", "version": 1, "attachmentLevel": "vendor", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Google has been designated a gatekeeper under the EU Digital Markets Act; its dominant position in workplace productivity (Workspace) is subject to DMA interoperability and fairness obligations.", "explanation": "Google was designated a gatekeeper by the European Commission under the Digital Markets Act (DMA) in 2023. DMA obligations apply to Google's core platform services. Workspace and Meet, as part of Google's services ecosystem, are subject to fairness and interoperability requirements. The EC has opened DMA non-compliance investigations against Google in multiple areas. For organisations using Google Meet as part of a Google Workspace dependency, the DMA is relevant context for the competitive dynamics and long-term lock-in risk.", "lastVerifiedAt": "2026-05-03" }, { "id": "1ef24c89-e2b0-4ac3-b903-da471cc8be91", "flagGroupId": "e7810f23-c7de-41fb-88de-585ac6cb4203", "version": 1, "attachmentLevel": "vendor", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Google Meet runs on Google's data centre infrastructure, which is matched 100% with renewable energy; AI-powered features (transcription, background noise cancellation) increase energy consumption per call.", "explanation": "Google has matched 100% of its electricity consumption with renewable energy since 2017 and is pursuing 24/7 carbon-free energy by 2030. Google Meet benefits from this infrastructure. However, Google Meet's AI features — including real-time transcription, translation, and noise cancellation — run on ML inference hardware, which has significantly higher energy costs per operation than simple WebRTC calls. Video conferencing is inherently energy-intensive at scale; Google Meet is one of the world's largest video conferencing platforms.", "lastVerifiedAt": "2026-05-03" }, { "id": "8172642f-4d14-4166-82c0-81536c21b5be", "flagGroupId": "54457cea-1786-4f40-9347-2a3879335a81", "version": 1, "attachmentLevel": "vendor", "vendorId": "c9343b09-ec3b-440d-a194-5d52a7280b29", "suiteId": null, "serviceId": null, "valence": "context", "tier": 3, "headline": "Google employs over 180,000 people and publishes annual diversity reports; the 2022-2023 period included significant layoffs (~12,000 in January 2023) and ongoing controversy about its extended contractor workforce.", "explanation": "Google laid off approximately 12,000 employees in January 2023 (~6% of the workforce) as part of a broader tech sector downturn. Google maintains a large \"extended workforce\" of contractors and vendors that outnumbers its full-time employee count. These workers perform functions ranging from content moderation to engineering but receive fewer benefits and protections. Google publishes annual diversity and inclusion reports showing workforce demographics by race, gender, and seniority. Google Meet's infrastructure and product development are part of Google's broader workforce.", "lastVerifiedAt": "2026-05-03" }, { "id": "52c19d94-789c-4c45-af28-a6cb11f9ce65", "flagGroupId": "9a2a55b7-1271-4116-98af-945b42925303", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "d30271ea-853e-4909-87e0-94c5532df545", "valence": "strength", "tier": 3, "headline": "Google Meet offers real-time automatic captions for all meetings, keyboard accessibility, and screen reader support, making it one of the more accessible mainstream video conferencing services.", "explanation": "Google Meet provides automatic live captions (powered by Google's speech-to-text) for meetings, accessible via the CC button. This is available in multiple languages. Captions are a critical accessibility feature for deaf and hard-of-hearing users. Google Meet also supports keyboard shortcuts for most actions, works with screen readers (VoiceOver, NVDA), and offers high-contrast display options. Google has published accessibility documentation for Meet. This accessibility capability is a notable advantage over many self-hosted alternatives.", "lastVerifiedAt": "2026-05-03" }, { "id": "b45c58cd-a777-40e1-91e8-0e83471e4799", "flagGroupId": "b73cccaa-c0fe-481d-9851-ca017011cb79", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "context", "tier": 2, "headline": "As an Australian company, Fastmail responds to Australian law enforcement warrants and states it is prohibited from disclosing data to foreign authorities.", "explanation": "The privacy page states that Fastmail is required to respond to requests made through Australian law enforcement and is forbidden by the Australian Privacy Principles (section 6) from disclosing information to foreign authorities. The company states it only responds to warrants for specific user data and does not provide dragnet access. A data transparency report is referenced as documenting the number of requests actioned each year.", "lastVerifiedAt": "2026-05-06" }, { "id": "44315cb3-7e63-41de-87e7-73e04cab1e51", "flagGroupId": "4829cd71-0b5f-47a7-9a6a-cf4dcca57163", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "strength", "tier": 2, "headline": "Fastmail proxies remote images in emails on users' behalf to prevent senders from tracking recipient location, device, and identity.", "explanation": "The privacy page describes a feature whereby Fastmail requests remotely hosted email images anonymously on the user's behalf, preventing senders from inferring the recipient's location, device type, or cross-site identity. This is a specific technical measure that reduces third-party data collection about user behaviour, going beyond what many email providers offer by default.", "lastVerifiedAt": "2026-05-06" }, { "id": "f6e3f751-ec53-4846-a67b-4515f7d6ca93", "flagGroupId": "13bd63b4-5f91-4288-9a5e-d8b152239cb2", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "strength", "tier": 2, "headline": "Fastmail offers a Masked Email feature that generates unique per-service email addresses to prevent cross-service identity tracking.", "explanation": "The privacy page describes Masked Email as a feature allowing users to create a unique email address for each online account, keeping the user's real address private. The page states that companies have no way of linking different Masked Email addresses together to track the user. This reduces the ability of third parties to build cross-service profiles linked to a single identity.", "lastVerifiedAt": "2026-05-06" }, { "id": "b6ce446e-7955-4f3d-8ecd-07c4c69a85f5", "flagGroupId": "ccab8f1c-3a3f-4909-9044-aa4a4bb6e910", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "strength", "tier": 2, "headline": "Employee access to customer data requires a specific access request with justification, is logged, and is audited.", "explanation": "The privacy page states that accessing personal data — including emails, contacts, and calendar events — requires an employee to submit a specific access request including a justification, typically linked to a support ticket where the user has given permission. All such access is logged and audited, and violations can result in termination or prosecution. The company states this policy has not been violated in its 25-year history.", "lastVerifiedAt": "2026-05-06" }, { "id": "eb1caf91-b1fe-4dca-8edf-ac818461d757", "flagGroupId": "1b11f1c1-a712-4da4-ac96-4581d648105a", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "context", "tier": 2, "headline": "Fastmail is incorporated in Australia (Fastmail Pty Ltd, ACN 142 646 580) and is subject to Australian law.", "explanation": "The Terms of Service identify the operating entity as Fastmail Pty Ltd, registered in Australia with a Melbourne postal address. This means the service is governed by Australian law, including the Australian Privacy Act and the Australian Consumer Law, rather than EU or US law. For UK and EU users, this places the service outside both GDPR-native jurisdiction and US FISA/CLOUD Act jurisdiction, but within the reach of Australian intelligence-sharing arrangements (Australia is a member of the Five Eyes alliance).", "lastVerifiedAt": "2026-05-06" }, { "id": "d4ec4fc0-52d4-44b2-8347-f9185130ffb0", "flagGroupId": "88f624af-a38b-4e5e-8db5-1f44859cdf30", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "context", "tier": 2, "headline": "Fastmail states it responds only to Australian law enforcement requests and is forbidden from disclosing data to foreign authorities under the Australian Privacy Principles.", "explanation": "The privacy features page states that as an Australian company Fastmail is required to respond to requests made through Australian law enforcement and is forbidden by the Australian Privacy Principles (section 6) from disclosing information to foreign authorities. The company states it checks all requests for legal validity, responds only to warrants for specific user data, and does not provide dragnet access. This means US authorities (e.g. under FISA Section 702 or the CLOUD Act) cannot directly compel Fastmail; however, requests could potentially be routed via Australian authorities under mutual legal assistance treaties.", "lastVerifiedAt": "2026-05-06" }, { "id": "456c5b34-71f4-4e73-9b90-82fa36bdc5d6", "flagGroupId": "cb1231b0-e4d0-4ee4-9d73-332b5a84ffca", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "strength", "tier": 2, "headline": "Fastmail publishes a data transparency report disclosing the number of law enforcement requests actioned each year.", "explanation": "The privacy features page references a transparency report that shows how many law enforcement data requests Fastmail actioned each year. The existence of such a report is a positive indicator of accountability, though the source inventory does not include the report URL itself, so the level of detail it contains (e.g. breakdown by request type, country of origin, or outcome) cannot be assessed from the available evidence.", "lastVerifiedAt": "2026-05-06" }, { "id": "cc0f7ba4-f901-4daa-9b5e-ded3353ea648", "flagGroupId": "3239b73d-3fa5-44b5-8271-186109edf9b2", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "caution", "tier": 2, "headline": "No data centre locations or EU/UK data residency guarantees are described in the available source materials.", "explanation": "None of the provided source pages (homepage, privacy features, Terms of Service, security features) specify where Fastmail's data centres are located or offer contractual guarantees of EU or UK data residency. The Terms of Service identify the company as Australian but do not describe storage geography. For UK and EU users, the absence of published data residency commitments means there is no documented assurance that personal data remains within the EEA or UK, and no EU Standard Contractual Clauses or adequacy mechanism is referenced in the available materials.", "lastVerifiedAt": "2026-05-06" }, { "id": "fba516a9-1f64-4e58-822a-d950c7c472e8", "flagGroupId": "9614fe6e-398a-499e-ac53-2675ca3da562", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "strength", "tier": 2, "headline": "Fastmail publishes open-source code used by external organisations and employs staff who contribute to open standards development.", "explanation": "The Fastmail homepage states that the company produces \"a wide range of open-source code used by organizations around the world\" and employs \"top experts on email and calendaring\" who work on open standards. The homepage also references contributions to email authentication and calendar interoperability work. The core Fastmail webmail application itself does not appear to be open-source, so this flag reflects partial rather than full source openness.", "lastVerifiedAt": "2026-05-06" }, { "id": "22595942-517c-4d97-b299-64853147da50", "flagGroupId": "359e8d84-0376-4831-a782-ab336e9bc2aa", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "strength", "tier": 1, "headline": "Fastmail developed JMAP, an IETF-standardised open email sync protocol, and supports standard protocols including IMAP, SMTP, CalDAV, and CardDAV.", "explanation": "The Fastmail homepage explicitly credits the company with \"the development of JMAP, the next-generation open sync protocol.\" JMAP (JSON Meta Application Protocol) is an open IETF standard (RFC 8620 and related RFCs) designed as a modern replacement for IMAP. The homepage also frames Fastmail's mission as keeping \"the internet open\" and preventing email from \"becoming just another walled garden.\" The security page references support for current transport standards including TLS 1.3 and Perfect Forward Secrecy. Support for IMAP, SMTP, CalDAV, and CardDAV is implied by the homepage's references to third-party app compatibility and calendar/contacts interoperability, though these are not enumerated explicitly in the provided evidence.", "lastVerifiedAt": "2026-05-06" }, { "id": "294c594c-c536-4802-a692-22859cd0d788", "flagGroupId": "c8b6e874-a274-416f-b759-56d35e05d5f0", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "strength", "tier": 2, "headline": "Fastmail explicitly states that users can retrieve their data and frames data portability as a core value, describing the data as belonging to the user.", "explanation": "The Fastmail homepage states: \"People stay because we're the best, not because it's too hard to get your data out. After all, it's your data, not ours.\" This is a direct, public commitment to data portability as a design principle rather than a compliance obligation. The homepage also references a \"Gmail transfer tool,\" indicating at least one inbound migration pathway exists. The available evidence does not specify the exact export formats supported (e.g., MBOX, EML, ICS, vCard) or whether bulk export is available via a self-service tool.", "lastVerifiedAt": "2026-05-06" }, { "id": "d27d86b3-fe3c-476b-89b8-7aacd8fccd54", "flagGroupId": "354f1785-c65c-412f-8a66-ea1a3d2f4eea", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "strength", "tier": 2, "headline": "Fastmail offers a JMAP API and supports third-party client access via standard protocols, enabling integration with external email and calendar applications.", "explanation": "The security page notes that Fastmail \"fully support[s]\" use of third-party apps for features such as PGP/S/MIME end-to-end encryption, indicating that third-party client access is an intentional and supported use case. As the developer of JMAP, Fastmail exposes this protocol for programmatic access. The homepage references calendar interoperability work, consistent with CalDAV support for third-party calendar clients. The available evidence does not detail API rate limits, authentication mechanisms (e.g., OAuth 2.0, app-specific passwords), or whether the JMAP API is publicly documented with open access.", "lastVerifiedAt": "2026-05-06" }, { "id": "3d0cc8f7-0ca6-4f9a-9452-093de41a5156", "flagGroupId": "a0d1efad-e475-4d1f-9379-d534875d3942", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "strength", "tier": 2, "headline": "Fastmail provides a Gmail transfer tool for inbound migration and publicly commits to making outbound data retrieval straightforward.", "explanation": "A user testimonial on the Fastmail homepage specifically highlights \"a Gmail transfer tool\" as a feature facilitating migration from Gmail. The homepage also contains an explicit statement that users are not retained through data lock-in: \"People stay because we're the best, not because it's too hard to get your data out.\" Together these indicate both inbound migration tooling and a stated commitment to outbound portability. The available evidence does not confirm whether transfer tools exist for other providers (e.g., Outlook, Yahoo) or detail the technical scope of the Gmail tool.", "lastVerifiedAt": "2026-05-06" }, { "id": "6ee736b4-088b-44ab-bb74-010c3ad06c41", "flagGroupId": "9dfa01f7-ee4b-490c-b122-18330c5f4b57", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "context", "tier": 2, "headline": "Fastmail is operated by Fastmail Pty Ltd, an Australian proprietary company registered in Victoria, Australia.", "explanation": "The Terms of Service identify the operating entity as Fastmail Pty Ltd, ACN 142 646 580, with a registered address at PO Box 234, Collins St West 8007, Australia. As a proprietary limited company under Australian law, Fastmail is privately held rather than publicly listed, foundation-owned, or structured as a cooperative. The homepage describes the service as 'independent' and 'private', and positions it explicitly against 'big tech' ownership.", "lastVerifiedAt": "2026-05-06" }, { "id": "5ae1612e-5962-4179-8141-5f50494e45f0", "flagGroupId": "7ca1dcbe-befd-4bb4-a478-d422d0433a42", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "strength", "tier": 2, "headline": "Fastmail operates on a paid subscription model with no advertising and states it does not mine or share user data with third parties.", "explanation": "The homepage explicitly states that 'free email isn't really free: you're paying with your privacy' and positions Fastmail as a paid service where 'we only serve you, our customer.' The company states there is 'no mining of your personal data, no sharing it with third parties, and no ads, ever.' This funding model is directly relevant to governance because it removes the advertiser-as-customer dynamic that can create conflicts of interest in ad-supported email services.", "lastVerifiedAt": "2026-05-06" }, { "id": "db52aa4c-e35c-45bf-a437-f9ad0f024c87", "flagGroupId": "780f8d60-8c05-4b15-917f-8c0905a85a11", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "strength", "tier": 2, "headline": "Fastmail publishes a data transparency report disclosing the number of law enforcement data requests actioned each year.", "explanation": "The privacy feature page states that Fastmail publishes a data transparency report showing how many law enforcement requests were actioned annually. The page also describes the company's policy of only responding to warrants for specific user data and not providing 'any kind of dragnet access.' Publishing a transparency report is a concrete, verifiable practice that supports user-aligned accountability.", "lastVerifiedAt": "2026-05-06" }, { "id": "54533397-5f26-4ee0-8d50-17235e20453b", "flagGroupId": "b4d266fd-18f8-46a6-9f21-f1c8f40cf213", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "strength", "tier": 2, "headline": "Fastmail maintains a publicly archived history of Terms of Service versions dating back to 2017, with change summaries provided for each revision.", "explanation": "The Terms of Service page lists six prior versions of the ToS (October 2017, May 2018, May 2020, May 2022, December 2022, February 2025) and provides a plain-language summary of what changed in the most recent update. This practice allows users to review the evolution of their contractual relationship with the service over time, which is a concrete indicator of decision-making transparency.", "lastVerifiedAt": "2026-05-06" }, { "id": "7969d870-2422-4f97-bc2d-3b9285cff05c", "flagGroupId": "b3f8121e-b09c-47c2-b93f-ffa5d18b09e3", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "strength", "tier": 3, "headline": "Fastmail states a commitment to keeping email open through contributions to open standards and open-source code, including development of the JMAP protocol.", "explanation": "The homepage describes Fastmail's role in developing JMAP, described as 'the next-generation open sync protocol', and states the company employs 'top experts on email and calendaring' working on open standards. The company frames this as a deliberate strategic choice to prevent email from becoming 'just another walled garden.' While this is a company self-description, participation in open standards bodies is an externally verifiable activity that reflects governance values around interoperability and user data portability.", "lastVerifiedAt": "2026-05-06" }, { "id": "0c3b4974-816a-475c-85e6-c1d34f28bf03", "flagGroupId": "a2e6cb2d-64d8-473f-bc37-5342cddee859", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "strength", "tier": 2, "headline": "Fastmail's domain is verified as green-hosted by the Green Web Foundation, attributed to Cloudflare infrastructure.", "explanation": "The Green Web Foundation's API check returns a positive green-hosting result for www.fastmail.com, with Cloudflare listed as the hosting provider. This is a third-party dataset verification rather than self-reported corporate marketing, which aligns with the dimension's preference for independent verification over corporate claims.", "lastVerifiedAt": "2026-05-06" }, { "id": "2dc9815f-292a-4213-9893-1a8d726c2233", "flagGroupId": "ade78f7a-deed-4604-9af3-18c619350afb", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "context", "tier": 2, "headline": "Cloudflare, Fastmail's infrastructure provider, has published a 2023 emissions inventory covering Scope 1, 2, and 3 emissions.", "explanation": "The Green Web Foundation's supporting documentation for Fastmail's green-hosting status includes Cloudflare's 2023 Emissions Inventory. Cloudflare has also published a blog post on its climate commitments. Because Fastmail's green-hosting verification is attributed to Cloudflare, the credibility of that status depends in part on the quality of Cloudflare's own emissions and renewable energy reporting. This is contextual rather than a direct Fastmail commitment.", "lastVerifiedAt": "2026-05-06" }, { "id": "c3920288-e62c-48ac-9c24-f2d3649cbb56", "flagGroupId": "598420a1-7fb7-4246-9597-0a82a9ecf44d", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "valence": "concern", "tier": 2, "headline": "Fastmail publishes no independently identifiable emissions disclosure, sustainability report, or environmental policy on its website.", "explanation": "None of the Fastmail-owned pages in the source inventory — including the homepage, privacy features page, security features page, and terms of service — contain references to carbon emissions, energy consumption, renewable energy commitments, or environmental reporting. The absence of any such disclosure means Fastmail's environmental impact cannot be assessed from the company's own communications, and users must rely entirely on third-party infrastructure-level data.", "lastVerifiedAt": "2026-05-06" }, { "id": "7bcb2a60-583c-4d76-be66-2948cb1112a9", "flagGroupId": "c4925924-9b58-40eb-8cc0-fa5a345b80dd", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "strength", "tier": 1, "headline": "Proton AG is domiciled in Geneva, Switzerland, placing it outside US and EU legal jurisdiction.", "explanation": "The privacy policy states that services are operated by Proton AG, domiciled at Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland, and are therefore governed by Swiss law. Switzerland is not an EU member state and is not subject to US jurisdiction frameworks such as FISA Section 702 or the CLOUD Act. Proton explicitly states that under Article 271 of the Swiss Criminal Code, it may not transmit data to foreign authorities directly, and rejects all such requests. Swiss authorities may assist foreign authorities only where requests comply with Swiss law and international legal assistance procedures.", "lastVerifiedAt": "2026-05-06" }, { "id": "27990d8f-407c-4eef-b08c-870f5a39c75f", "flagGroupId": "81ffbc4b-9cff-486b-a686-27134f18fdf0", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "context", "tier": 2, "headline": "Proton has a designated EU representative (Proton Europe sàrl) in Luxembourg for GDPR Article 27 purposes.", "explanation": "The privacy policy identifies Proton Europe sàrl, rue de Grünewald 94, L-1912 Luxembourg as the designated EU representative under GDPR Article 27. This entity exists to facilitate GDPR compliance and data subject rights for EU residents, but the primary data controller remains Proton AG in Switzerland. Editors should consider whether this Luxembourg presence creates any additional EU legal exposure or whether it is purely a compliance mechanism.", "lastVerifiedAt": "2026-05-06" }, { "id": "9ea11ae0-3550-47f3-86fe-e73873a7878b", "flagGroupId": "0657c502-e698-40ea-a3b1-98e5094e2041", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "caution", "tier": 2, "headline": "Proton complied with 8,313 of 9,301 legal orders for Proton Mail in 2025, all routed through Swiss authorities.", "explanation": "Proton's transparency report shows that in 2025, it received 9,301 legal orders for Proton Mail, contested 988, and complied with 8,313. All legally binding requests must come through official Swiss channels; Proton states it rejects direct requests from foreign authorities. The volume of complied orders has grown substantially year-on-year (from 336 in 2018 to 8,313 in 2025). Proton notes that complied data is limited to what is technically accessible — email content is end-to-end encrypted and cannot be decrypted by Proton, so complied information is typically account metadata rather than message content.", "lastVerifiedAt": "2026-05-06" }, { "id": "774d0776-7b3e-4dde-912d-c55b431abd07", "flagGroupId": "4a9f851a-4b08-43de-9ecd-b3c53c25c04f", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "strength", "tier": 1, "headline": "Proton states it cannot technically decrypt email content, limiting what can be disclosed under legal compulsion.", "explanation": "The privacy policy states that Proton does not have the technical means to access the content of encrypted emails, files, calendar events, passwords, or notes. The transparency report reiterates that all emails, files, and invites are encrypted and Proton has no means to decrypt them. This means that even when Proton complies with a legally binding Swiss order, the content of messages is not accessible to disclose.", "lastVerifiedAt": "2026-05-06" }, { "id": "13722368-d1df-47a3-8012-ec547d63a355", "flagGroupId": "7eaeddaf-a5a5-4237-b56c-4649b56fde77", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "strength", "tier": 1, "headline": "Proton publishes annual aggregate transparency data for Proton Mail and Proton VPN, including contested and complied order counts.", "explanation": "Proton's transparency report provides year-by-year aggregate statistics for legal orders received for both Proton Mail and Proton VPN, broken down into total orders received, orders contested, and orders complied with. Data is available from 2017 through 2025 for Proton Mail and from 2019 through 2025 for Proton VPN. The report was last updated January 6, 2026. This level of granularity — including contested orders — is more detailed than many comparable email providers publish.", "lastVerifiedAt": "2026-05-06" }, { "id": "5d76b44b-f0e3-45c2-aac9-892860975b8d", "flagGroupId": "faf4383e-c977-4955-acd3-d4f5809972cb", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "context", "tier": 2, "headline": "Proton's privacy policy does not specify data centre locations or make explicit contractual data residency guarantees.", "explanation": "The privacy policy and other available sources do not identify specific data centre locations or provide contractual commitments that user data will remain within a particular country or region. Proton's homepage and privacy policy reference Swiss law and Swiss-based operations, and Proton is publicly known to operate infrastructure in Switzerland, but the provided source materials do not contain explicit data residency guarantees or named data centre locations that could be cited as a formal commitment.", "lastVerifiedAt": "2026-05-06" }, { "id": "05d023c8-2374-46a4-8a3d-9b404730d7e5", "flagGroupId": "4b68b2b3-823c-4145-95b8-0089886e7d3e", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "strength", "tier": 1, "headline": "All Proton apps are published as open-source and independently audited by third-party security experts.", "explanation": "Proton's homepage states that all its apps are open source and independently audited by security experts, allowing anyone to inspect and verify the code. This applies across the Proton product suite, including Proton Mail. The company frames open-source publication as a deliberate transparency measure rooted in its scientific founding ethos of peer review.", "lastVerifiedAt": "2026-05-06" }, { "id": "5d6b7beb-4667-4aba-9940-5dbef5e1348c", "flagGroupId": "1ea4f983-1f9b-41f9-bd29-5aa654f99033", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "concern", "tier": 3, "headline": "Lumo AI assistant is powered by open-source language models, but server-side inference infrastructure details are not disclosed in available sources.", "explanation": "The Lumo security model blog post states that Lumo is 'Powered by open-source language models,' which indicates the underlying model weights are from open-source projects. However, the available evidence does not describe whether Proton's server-side inference stack or orchestration code is itself open source or auditable. This creates a partial transparency gap distinct from the client-app open-source posture described elsewhere.", "lastVerifiedAt": "2026-05-06" }, { "id": "cad23627-8193-401e-afb5-b3207b4c8ea2", "flagGroupId": "e210f2f9-99a9-4ca2-8645-9059dd1278f3", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "strength", "tier": 2, "headline": "Proton Mail supports standard email protocols, enabling interoperability with external email services and clients.", "explanation": "Proton Mail operates as an email service that can send and receive messages with any standard SMTP-compatible email address, as evidenced by its positioning as a replacement for services such as Google and Outlook. The homepage references an 'Easy Switch' import tool compatible with Google and Outlook, implying standard protocol support for inbound migration. However, the available source inventory does not contain explicit documentation of IMAP/SMTP/POP3 support or bridge software details, so this flag is based on inferential evidence from the sources provided.", "lastVerifiedAt": "2026-05-06" }, { "id": "3741741f-6f9a-4408-919e-b2a8409fb5a6", "flagGroupId": "6c448fb3-7621-4300-9c0f-3fc0d0a68cd0", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "strength", "tier": 2, "headline": "Proton provides an 'Easy Switch' tool to import data from Google, Outlook, and other services into Proton Mail.", "explanation": "The Proton homepage explicitly describes 'Easy Switch' as a feature that lets users import and encrypt their data from Google, Outlook, or other services in a few clicks. This indicates inbound data portability is supported. The available sources do not describe outbound export capabilities (e.g., exporting Proton Mail messages to standard formats such as MBOX or EML), so the full portability picture cannot be confirmed from the provided evidence alone.", "lastVerifiedAt": "2026-05-06" }, { "id": "6c785af1-8b78-4e93-9aec-914311f92525", "flagGroupId": "cc2d5748-efb8-46a3-9e9a-13b6bc994d70", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "concern", "tier": 3, "headline": "End-to-end encryption of stored messages may complicate outbound migration, as message content is inaccessible to Proton's servers for bulk export.", "explanation": "Proton's privacy policy and homepage both state that Proton does not have the technical means to access the content of encrypted emails. While this is a privacy strength, it also means that server-side bulk export of message content in plaintext formats would require client-side decryption. This architectural characteristic may increase the complexity of migrating away from Proton Mail compared with services that store messages in accessible formats. The available sources do not describe any dedicated outbound migration or export tooling.", "lastVerifiedAt": "2026-05-06" }, { "id": "8fcdfec6-8c49-4a0b-aeb9-a16974f5f2ea", "flagGroupId": "2330b63d-63e6-4ea4-b951-0c6fe3b8bc3d", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "strength", "tier": 1, "headline": "Proton AG's primary shareholder is the nonprofit Proton Foundation, whose stated mission is to promote an open internet.", "explanation": "According to Proton's homepage, the company describes its primary shareholder as the nonprofit Proton Foundation, with a stated mission to \"fight for an open internet that promotes freedom of speech and freedom of information.\" This structure places a nonprofit entity in the controlling ownership position rather than venture capital investors or public shareholders. Proton AG is domiciled in Geneva, Switzerland, and is governed by Swiss law, as confirmed by the privacy policy.", "lastVerifiedAt": "2026-05-06" }, { "id": "ecc04199-ed56-41b5-9700-a62d534ed7ed", "flagGroupId": "110451a9-5159-4d86-958f-3f41885900d7", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "strength", "tier": 2, "headline": "Proton AG is incorporated in Switzerland and subject to Swiss law, including Swiss data protection statutes.", "explanation": "The privacy policy states that Proton AG is domiciled at Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland, and that the services are governed by Swiss law and regulations. Switzerland is not an EU member state and is not part of the Five Eyes or Fourteen Eyes intelligence-sharing alliances, which is a structurally distinct legal jurisdiction compared to US- or UK-incorporated email providers. The company also designates Proton Europe sàrl in Luxembourg as its EU GDPR representative.", "lastVerifiedAt": "2026-05-06" }, { "id": "93a7ccdc-7cb5-4b20-936f-64bcc0f634be", "flagGroupId": "cc05826a-52fe-429e-9d10-e600037e0772", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "strength", "tier": 2, "headline": "Proton states it does not sell advertising or user data, and funds operations through paid subscription upgrades.", "explanation": "The Proton homepage states that the service has no ads and does not sell user data, and that users can support the service by upgrading to a paid account with more features. This subscription-based funding model is explicitly contrasted with ad-supported models. The homepage also notes that a free tier is maintained as a permanent offering on the basis that \"privacy is a human right.\"", "lastVerifiedAt": "2026-05-06" }, { "id": "196f785e-d475-417f-adec-9d38b5bb6b8d", "flagGroupId": "1ba30477-7b23-4048-9bbe-980724db0a46", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "strength", "tier": 2, "headline": "Proton publishes an annual transparency report disclosing aggregate counts of legal orders received, contested, and complied with for both Proton Mail and Proton VPN.", "explanation": "The transparency report (updated January 6, 2026) provides year-by-year aggregate statistics for legal orders received by Proton Mail and Proton VPN dating back to at least 2019. For Proton Mail in 2025, the report lists 9,301 legal orders received, 988 contested, and 8,313 complied with. For Proton VPN, all orders across every reported year were denied. The report also explains the legal framework under which orders are evaluated, including the requirement that foreign requests be routed through Swiss authorities.", "lastVerifiedAt": "2026-05-06" }, { "id": "4b148b26-0bc5-4312-a716-20a319b5fdc7", "flagGroupId": "617749e8-a185-4a01-a61c-e2b22d5a7875", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "strength", "tier": 2, "headline": "All Proton client applications are open source, which the company states enables independent inspection and audit by security researchers.", "explanation": "The Proton homepage states that all apps are open source and independently audited by security experts, framing this as a mechanism for earning user trust through transparency and peer review. Open-source publication of client code allows external parties to verify that the software behaves as described, which is a structural accountability measure relevant to governance. The homepage attributes this approach to the scientific backgrounds of the founders.", "lastVerifiedAt": "2026-05-06" }, { "id": "f8a51161-4cde-4c12-a533-25b6808dade1", "flagGroupId": "e0cb5f94-1eb0-4629-95a9-3a86eb6789a2", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "concern", "tier": 2, "headline": "Proton Mail's primary domain (proton.me) is not verified as green-hosted by the Green Web Foundation.", "explanation": "The Green Web Foundation's dataset, which cross-references hosting providers against verified renewable energy certificates and power purchase agreements, returns a 'not green' result for proton.me as of April 2026. This indicates that Proton has not submitted verifiable evidence of renewable energy use to this third-party registry for its primary domain. The absence of a verified green-hosting record does not confirm fossil-fuel use, but it does mean no independently verified renewable energy claim is on file with this widely used reference dataset.", "lastVerifiedAt": "2026-05-06" }, { "id": "a37850b9-1ace-4503-91a3-2534aba9d60a", "flagGroupId": "4ae2561e-4238-488b-82c1-63c81ebd9fe9", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "concern", "tier": 2, "headline": "Proton publishes no emissions disclosure (Scope 1, 2, or 3) in any available public document.", "explanation": "None of the sources in the provided inventory — including Proton's transparency report, privacy policy, homepage, and blog — contain any reference to greenhouse gas emissions, carbon footprint, energy consumption figures, or sustainability reporting. The transparency report (updated January 2026) is limited to legal request statistics. There is no sustainability report, environmental policy page, or emissions data accessible via the provided URLs.", "lastVerifiedAt": "2026-05-06" }, { "id": "abc4da69-86bd-474a-b2ac-692f1e9c3969", "flagGroupId": "19d575c7-1de7-4737-ae11-a4e652c7d8ee", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "concern", "tier": 2, "headline": "No public climate commitments, net-zero targets, or environmental pledges are identifiable in Proton's published materials.", "explanation": "Proton's public-facing materials, including its homepage, transparency report, and blog, make no reference to climate targets, net-zero commitments, science-based targets, or membership in environmental initiatives such as the Climate Neutral Data Centre Pact or RE100. The company's stated mission centres on privacy and freedom of information; environmental commitments are not mentioned. In the absence of any such commitment, there is nothing to verify or assess for credibility.", "lastVerifiedAt": "2026-05-06" }, { "id": "d3f0fd37-75dc-4c64-9055-7fabbadc49f7", "flagGroupId": "3aeaa2fd-1f51-493c-9b84-8941a410fdb8", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "concern", "tier": 2, "headline": "No dedicated accessibility statement or WCAG compliance declaration is publicly available on Proton's website.", "explanation": "A review of the available Proton web pages — including the homepage, privacy policy, transparency report, and blog — found no published accessibility statement, no declared WCAG conformance level, and no documented process for users to report accessibility barriers. The absence of such a statement makes it impossible for users with disabilities to assess whether the service meets their needs before committing to it.", "lastVerifiedAt": "2026-05-06" }, { "id": "bb148fad-ce30-42e2-9e04-e9d80e68717d", "flagGroupId": "3da5f8b8-0c6f-43a1-a5c6-8d1a9c1530ae", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "concern", "tier": 2, "headline": "No WCAG conformance level is declared for Proton Mail in any of the publicly available company materials.", "explanation": "None of the source materials provided — including the main Proton website, legal pages, and blog — contain any reference to WCAG (Web Content Accessibility Guidelines) conformance testing, a declared conformance level (A, AA, or AAA), or third-party accessibility audits for Proton Mail. Without a declared conformance level, users relying on assistive technologies cannot determine whether the service has been evaluated against recognised accessibility standards.", "lastVerifiedAt": "2026-05-06" }, { "id": "2c1886a7-8879-469c-85c6-91b6e3e7e7b0", "flagGroupId": "9b5a98a9-2f79-4988-9a35-63456e143999", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "64a9b145-e613-482e-a28b-666d4cc697a5", "valence": "concern", "tier": 3, "headline": "The available source materials do not document the number of languages supported by Proton Mail or any localisation policy.", "explanation": "The Proton homepage and associated legal and blog pages reviewed for this audit contain no explicit statement about the languages in which Proton Mail's interface is available, nor any localisation roadmap or community translation programme. While the homepage itself appears to be in English, no information about multilingual support is surfaced in the provided materials, making it difficult to assess inclusion for non-English-speaking users.", "lastVerifiedAt": "2026-05-06" }, { "id": "e98a7976-5bad-49b3-a141-20c04c615227", "flagGroupId": "78145ba2-0035-4e5f-9390-a30268ed5da3", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "96a65b88-3c28-4d93-8ac2-e99256f2bc22", "valence": "context", "tier": 2, "headline": "Ecosia search results are powered in part by Microsoft Bing; Ecosia states user data shared with Bing is anonymised and subject to a separate privacy agreement.", "explanation": "Ecosia uses Microsoft Bing's search index as a primary source for its results and serves Bing-powered advertisements. Some user data (including anonymised search queries) must be transmitted to Microsoft's infrastructure to retrieve results and ads. Ecosia states it has a separate privacy agreement with Microsoft that prohibits Microsoft from using this data for advertising profiling. However, this arrangement means user searches pass through a US-based company (Microsoft) subject to US law including the CLOUD Act and FISA.", "lastVerifiedAt": "2026-05-07" }, { "id": "54f2d202-2613-44a4-9ddf-4b22c5b20b1c", "flagGroupId": "f38a63d3-2b73-42c9-887b-500efb4a9575", "version": 1, "attachmentLevel": "vendor", "vendorId": "59e07a96-1e7c-4221-8bd2-c2f6124a8279", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 1, "headline": "Ecosia transferred control of the company to the Purpose Foundation in 2018, legally preventing sale of the company or private profit distribution, embedding the environmental mission structurally.", "explanation": "In 2018, Ecosia founder Christian Kroll transferred the company's shares to the Purpose Foundation (Stiftung), a German stewardship foundation model. Under this structure, the shares are held in trust and cannot be sold to a third-party buyer without the Foundation's consent. Profits cannot be distributed to private shareholders. This legal arrangement means the environmental mission is embedded in the ownership structure, not just stated as a policy that could be reversed by a future owner. Ecosia is also a certified B Corporation.", "lastVerifiedAt": "2026-05-07" }, { "id": "ae8d3030-50cc-421b-8580-fab746953c13", "flagGroupId": "e97b1c3b-8b75-43cb-9505-ed40b2434391", "version": 1, "attachmentLevel": "vendor", "vendorId": "59e07a96-1e7c-4221-8bd2-c2f6124a8279", "suiteId": null, "serviceId": null, "valence": "strength", "tier": 1, "headline": "Ecosia publishes monthly financial reports showing the proportion of ad revenue donated to tree-planting and climate projects, providing verifiable transparency on environmental spending.", "explanation": "Ecosia publishes monthly financial reports on its website showing total revenue, operating costs, and the amount donated to tree-planting and climate projects. Historically, Ecosia has committed to donating 80% or more of its profits (after operating costs) to environmental projects. This combination of transparent financial reporting and structural ownership (Purpose Foundation) makes the environmental commitment more verifiable than a typical corporate sustainability statement. Ecosia's projects include direct partnerships with tree-planting organisations in over 30 countries.", "lastVerifiedAt": "2026-05-07" }, { "id": "68fbcf28-ee26-4138-9374-952d07f603b8", "flagGroupId": "1ed5f759-72bf-4dbf-b60a-c4c6957afe66", "version": 1, "attachmentLevel": "vendor", "vendorId": "e23b7832-3b08-4950-8fa7-1b04b5b7e6e7", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 1, "headline": "Despite Opera's operational base in Norway (EU-adjacent), majority Chinese ownership means Chinese law — including the National Intelligence Law requiring cooperation with intelligence agencies — could apply to Opera's data and operations.", "explanation": "Opera Limited is incorporated in the Cayman Islands and listed on NASDAQ, with operational headquarters in Oslo, Norway. However, the majority controlling investors are Chinese entities (Kunlun Tech, Qihoo 360). China's National Intelligence Law (2017) requires Chinese organisations and citizens to cooperate with state intelligence work. While the extent to which this law reaches a foreign-listed company majority-owned by Chinese investors is a contested legal question, it represents a material structural risk that distinguishes Opera from Norwegian- or US-controlled browser vendors. Norwegian data protection law (GDPR) applies to Opera Norway AS's operations, but this does not eliminate the risk posed by the Chinese ownership chain.", "lastVerifiedAt": "2026-05-07" }, { "id": "9c319e84-09f9-4a5e-a9be-1c05fcbf98ed", "flagGroupId": "533bfdfc-d6f4-4e3e-a762-4650913fb0db", "version": 1, "attachmentLevel": "vendor", "vendorId": "e23b7832-3b08-4950-8fa7-1b04b5b7e6e7", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 1, "headline": "Opera Limited has been majority-owned by a Chinese investor consortium (Kunlun Tech / Qihoo 360) since 2016; Qihoo 360 is a Chinese cybersecurity company with reported links to Chinese government security apparatus.", "explanation": "In 2016, Opera Software ASA (the original Norwegian company) was acquired for approximately US$600 million by a Chinese consortium comprising Kunlun Tech Co., Ltd., Qihoo 360 Technology Co. (now 360 Security Technology), and Golden Brick Capital Management. Chinese investors retain majority voting control. Qihoo 360 is a major Chinese cybersecurity company; reporting by security researchers has noted its historical relationships with Chinese government security bodies. A browser controlled by Chinese-affiliated investors — which has access to user browsing behaviour, stored credentials, and built-in proxy infrastructure — represents a material trust and data sovereignty risk for users in Western jurisdictions. This concern is heightened by China's National Intelligence Law (2017), which requires Chinese companies and citizens to cooperate with Chinese intelligence agencies on request.", "lastVerifiedAt": "2026-05-07" }, { "id": "3e6cbc36-369a-4634-be64-049966dd6583", "flagGroupId": "ddf2e25c-d4d8-4b2e-8f26-8ec9644d217d", "version": 1, "attachmentLevel": "vendor", "vendorId": "e23b7832-3b08-4950-8fa7-1b04b5b7e6e7", "suiteId": null, "serviceId": null, "valence": "concern", "tier": 2, "headline": "Opera has been associated with predatory short-term lending apps (OKash, OPesa, CashBean) in Africa and Asia; the US Consumer Financial Protection Bureau and Google removed these apps following investigations.", "explanation": "Opera's non-browser business has included short-term lending apps operating in Kenya, Nigeria, India, and other markets under brands including OKash, OPesa, and CashBean. Investigative reporting and regulatory scrutiny found these apps charged exceptionally high annualised interest rates, used aggressive debt collection practices (including contacting borrowers' contacts without consent), and overstated repayment periods. Google removed some Opera lending apps from the Play Store following its review. This conduct is relevant to Opera's overall governance and ethics profile as a vendor, even though it relates to non-browser products.", "lastVerifiedAt": "2026-05-07" }, { "id": "e7c281f3-887c-403d-b1c2-f59644857b7f", "flagGroupId": "809c044f-313d-4f93-82af-5c67aed610a3", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "84211f4b-0841-4745-9726-3b1f3ac8c989", "valence": "concern", "tier": 1, "headline": "Google may use Google Calendar data (event details, locations, attendees) to personalise advertising for free-tier consumer accounts under Google's privacy policy.", "explanation": "Google's privacy policy states that Google uses information from across its products to improve and personalise services, including targeted advertising. As a free consumer product, Google Calendar data — including event titles, descriptions, locations, and attendees — may contribute to Google's advertising profile for free-tier users. Business Workspace users have separate contractual terms that restrict use of customer data for advertising. The extent to which calendar-specific data is used for advertising targeting is not explicitly detailed in Google's public privacy policy, making this difficult to assess precisely.", "lastVerifiedAt": "2026-05-07" }, { "id": "cce38ac4-bee1-4c71-a475-f72c3ad7672a", "flagGroupId": "d7aa7ea7-3fbe-483c-a712-168a69645fac", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "84211f4b-0841-4745-9726-3b1f3ac8c989", "valence": "strength", "tier": 2, "headline": "Google Calendar supports CalDAV and iCal (iCalendar/ICS) standards, enabling use with third-party clients and migration to other calendar services.", "explanation": "Google Calendar implements CalDAV for calendar synchronisation with third-party applications (Apple Calendar, Thunderbird, etc.) and supports exporting calendars in the iCalendar (.ics) format for portability. This open standard support means that calendar data can be accessed from non-Google clients and migrated to other CalDAV-compatible services without data loss. CalDAV access is available for both free and Workspace accounts.", "lastVerifiedAt": "2026-05-07" }, { "id": "2dc45b07-efc5-43d0-97be-d1a0368014ff", "flagGroupId": "7c1988f7-7d57-4cee-b0b2-0050c2b1eaba", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "0b93706d-5f36-48cb-8ffb-500bfa176cc5", "valence": "strength", "tier": 1, "headline": "Proton Calendar applies end-to-end encryption to calendar event data, meaning Proton itself cannot read event titles, descriptions, locations, or other content.", "explanation": "Proton states that Proton Calendar uses end-to-end encryption for calendar data, so that the content of events is encrypted on the user's device before being stored on Proton's servers. This zero-access architecture means that even in the event of a server breach or legal compulsion, Proton cannot read or disclose the content of calendar events. This is a significant differentiator from services like Google Calendar, where event content is accessible to the provider. The specific scope of what fields are encrypted (title, description, location, attendees, notifications) should be confirmed from Proton's technical documentation.", "lastVerifiedAt": "2026-05-07" }, { "id": "f3844de8-9182-4cad-966a-3f017d75ce2f", "flagGroupId": "feb7ce0c-3317-41a5-bb65-30fc3512e556", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "0b93706d-5f36-48cb-8ffb-500bfa176cc5", "valence": "strength", "tier": 2, "headline": "Proton Calendar is operated by Proton AG, a Swiss corporation subject to Swiss law, outside US and EU jurisdiction frameworks.", "explanation": "As a service of Proton AG (Geneva, Switzerland), Proton Calendar is governed by Swiss law. Switzerland is not an EU member state and is not subject to US jurisdiction frameworks such as the CLOUD Act or FISA Section 702. Combined with the end-to-end encryption architecture, this means that even legally compelled disclosure would be limited to metadata rather than event content.", "lastVerifiedAt": "2026-05-07" }, { "id": "07ebae92-f2e3-4646-80cd-1c69a0ef785f", "flagGroupId": "77083791-193c-4c90-9c96-73dc1502860d", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "0b93706d-5f36-48cb-8ffb-500bfa176cc5", "valence": "context", "tier": 2, "headline": "Proton Calendar supports iCal export but CalDAV sync with third-party clients may be limited or require specific configuration; end-to-end encryption may not be maintained over standard CalDAV connections.", "explanation": "Proton Calendar supports export of calendars in iCalendar (.ics) format for portability. However, the zero-access encryption architecture creates a technical challenge for CalDAV synchronisation: standard CalDAV requires the server to provide calendar data in readable form, which conflicts with end-to-end encryption. Proton may provide a limited CalDAV bridge or require decryption for CalDAV access (similar to Proton Bridge for email). This should be verified from Proton's current technical documentation before publishing.", "lastVerifiedAt": "2026-05-07" }, { "id": "e9b18766-080c-4751-952a-3eb932685c22", "flagGroupId": "9541e2d5-487f-4342-99f4-0dc9415f3d3e", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "82b0f93c-a208-4b55-b351-8dde1ba67edd", "valence": "strength", "tier": 1, "headline": "Tuta Calendar applies end-to-end encryption to calendar event data, meaning Tutao GmbH cannot read event content stored on its servers.", "explanation": "Tuta states that Tuta Calendar uses end-to-end encryption for calendar data, consistent with its architecture for email. Event content — titles, descriptions, and other fields — is encrypted on the user's device before transmission and storage. Tutao GmbH cannot access or read the content of calendar events. This is a significant differentiator from services like Google Calendar, where event content is accessible to the provider. The specific scope of encrypted fields should be verified from Tuta's technical documentation.", "lastVerifiedAt": "2026-05-07" }, { "id": "aa945111-2e25-4b1b-84f1-838ab8caa3fc", "flagGroupId": "84d48394-85b0-45f6-86a0-faa5dfd36932", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "82b0f93c-a208-4b55-b351-8dde1ba67edd", "valence": "strength", "tier": 2, "headline": "Tuta Calendar is operated by Tutao GmbH, a German private company subject to German law and the EU General Data Protection Regulation.", "explanation": "Tutao GmbH is incorporated and headquartered in Hanover, Germany, making Tuta Calendar subject to German data protection law and the EU GDPR. Germany has some of the strongest data protection enforcement in the EU. Combined with Tuta's end-to-end encryption architecture, legally compelled disclosure would be limited to metadata rather than event content.", "lastVerifiedAt": "2026-05-07" }, { "id": "4454e966-8457-42d3-9869-704d0e0f3081", "flagGroupId": "e0a24411-a0f4-4679-8134-af52400857c0", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "82b0f93c-a208-4b55-b351-8dde1ba67edd", "valence": "context", "tier": 2, "headline": "Tuta Calendar may have limited CalDAV compatibility with third-party clients due to its end-to-end encryption architecture; verify before assuming standard client support.", "explanation": "Tuta Calendar's end-to-end encryption means event data is encrypted before leaving the user's device. Standard CalDAV protocol requires the server to provide calendar data in readable form to connecting clients, which is technically incompatible with a pure server-side E2EE model. Whether Tuta provides a CalDAV bridge (analogous to Proton Bridge for email) or has found another solution should be verified from Tuta's current documentation. Users relying on third-party calendar clients (Apple Calendar, Thunderbird) should check compatibility before switching to Tuta Calendar.", "lastVerifiedAt": "2026-05-07" }, { "id": "be798f74-3736-488a-893a-735fbdefd088", "flagGroupId": "1657823b-6959-40c3-92a4-4735571e4917", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "8481545c-8d43-4288-aca1-8b09b0643805", "valence": "context", "tier": 2, "headline": "Fastmail Calendar uses standard transport encryption but does not offer end-to-end encryption; Fastmail can technically access calendar event content on its servers.", "explanation": "Fastmail Calendar, like most non-E2EE calendar services, stores calendar data in a form accessible to Fastmail Pty Ltd on its servers. Transport encryption (TLS) protects data in transit, but event titles, descriptions, and other content are not encrypted end-to-end. Fastmail's privacy policy states it does not sell user data or use it for advertising, but the technical capability to read stored data exists. For users with high sensitivity requirements, this is a relevant limitation compared to E2EE services such as Proton Calendar or Tuta Calendar.", "lastVerifiedAt": "2026-05-07" }, { "id": "a0a0214f-3d1d-4030-ad31-05c9b83181a1", "flagGroupId": "e248d163-74aa-4aa1-b2d8-d4bf60cf90a0", "version": 1, "attachmentLevel": "service", "vendorId": null, "suiteId": null, "serviceId": "8481545c-8d43-4288-aca1-8b09b0643805", "valence": "strength", "tier": 2, "headline": "Fastmail Calendar is fully CalDAV-compliant and supports iCal export, enabling seamless use with standard third-party calendar clients and easy migration.", "explanation": "Fastmail Calendar implements CalDAV for calendar synchronisation with third-party applications (Apple Calendar, Thunderbird, Android apps, etc.) and supports the iCalendar (.ics) format for data export. Unlike E2EE-first services (Proton Calendar, Tuta Calendar), Fastmail's server-side model is fully compatible with standard CalDAV clients without requiring bridge software. This makes Fastmail Calendar one of the most interoperable subscription calendar services.", "lastVerifiedAt": "2026-05-07" } ], "flag_sources": [ { "flagId": "a692f8dd-a3b3-4c47-a096-8a80f890127a", "sourceId": "5df9ba90-3bbc-4027-8503-cb5765a7f1f3", "quoteExcerpt": "all emails, files and invites are encrypted and we have no means to decrypt them", "note": null }, { "flagId": "a692f8dd-a3b3-4c47-a096-8a80f890127a", "sourceId": "97302903-9282-41ed-bd71-6317fb72b22a", "quoteExcerpt": "your messages are encrypted on your device before being sent to the servers", "note": null }, { "flagId": "38ac99c3-3178-4091-aaaa-623e3337a0ba", "sourceId": "5df9ba90-3bbc-4027-8503-cb5765a7f1f3", "quoteExcerpt": "Number of legal orders: 9,301", "note": null }, { "flagId": "5d18e9ef-3793-4363-b1b2-33d694931e4d", "sourceId": "e3f2db30-dd24-480a-8817-4959a743ca43", "quoteExcerpt": "We don't sell ads and can't share your data.", "note": null }, { "flagId": "fc41428e-3fce-4691-a29f-7e8366918c01", "sourceId": "97302903-9282-41ed-bd71-6317fb72b22a", "quoteExcerpt": "their data will train language models, be exploited by Big Tech", "note": null }, { "flagId": "33417d41-3938-4fe8-8d21-47d3dfdef759", "sourceId": "0c557629-f851-4a06-9b79-7175c7fb9999", "quoteExcerpt": "Privacy isn't an optional mode — it's just the way that Signal works.", "note": null }, { "flagId": "19125eaa-a820-4a81-8795-c13450ab894c", "sourceId": "0c557629-f851-4a06-9b79-7175c7fb9999", "quoteExcerpt": "No ads. No trackers. No kidding.", "note": null }, { "flagId": "a2e234ab-58c5-4265-86b2-b8a34d52cbf5", "sourceId": "0c557629-f851-4a06-9b79-7175c7fb9999", "quoteExcerpt": "We're not tied to any major tech companies", "note": null }, { "flagId": "7d0c8efa-1b59-4eaf-b3e0-c733138ab06c", "sourceId": "0c557629-f851-4a06-9b79-7175c7fb9999", "quoteExcerpt": "Signal is an independent nonprofit.", "note": null }, { "flagId": "f3ad7d7e-6935-4fca-a8b8-1de3c1074670", "sourceId": "0c557629-f851-4a06-9b79-7175c7fb9999", "quoteExcerpt": "We can't read your messages or listen to your calls", "note": null }, { "flagId": "99000062-5491-47a7-ac1a-ff9b5b9cc4fc", "sourceId": "0c557629-f851-4a06-9b79-7175c7fb9999", "quoteExcerpt": "powered by the open source Signal Protocol", "note": null }, { "flagId": "138efe77-1ecc-4aa6-ba78-7dc9bc9dba1d", "sourceId": "0c557629-f851-4a06-9b79-7175c7fb9999", "quoteExcerpt": "Signal is an independent nonprofit.", "note": null }, { "flagId": "81b31c65-ea07-4866-a337-34db274dcb8d", "sourceId": "0c557629-f851-4a06-9b79-7175c7fb9999", "quoteExcerpt": "we can never be acquired by one either.", "note": null }, { "flagId": "0c79c5b8-ac67-472c-a01d-dd182a108278", "sourceId": "0c557629-f851-4a06-9b79-7175c7fb9999", "quoteExcerpt": "supported by grants and donations from people like you.", "note": null }, { "flagId": "47f35f89-5880-4eb9-8a47-8027bc198f4a", "sourceId": "60fc4922-a5a5-494f-8938-b931df6c5c0e", "quoteExcerpt": null, "note": null }, { "flagId": "47f35f89-5880-4eb9-8a47-8027bc198f4a", "sourceId": "6e44589d-df87-46df-ba66-6139c706f31e", "quoteExcerpt": null, "note": null }, { "flagId": "967798ff-3923-46ae-9b94-518eb9c87f5a", "sourceId": "4ef7f1ce-11fd-4c59-9dde-ab65e56d2d62", "quoteExcerpt": null, "note": null }, { "flagId": "967798ff-3923-46ae-9b94-518eb9c87f5a", "sourceId": "60fc4922-a5a5-494f-8938-b931df6c5c0e", "quoteExcerpt": null, "note": null }, { "flagId": "3fb42a80-d4c5-46c9-a951-4d319a5e3aa3", "sourceId": "0c557629-f851-4a06-9b79-7175c7fb9999", "quoteExcerpt": null, "note": null }, { "flagId": "42557124-839f-4f45-8c82-08706588d392", "sourceId": "0c557629-f851-4a06-9b79-7175c7fb9999", "quoteExcerpt": "Signal is an independent nonprofit. We're not tied to any major tech companies", "note": null }, { "flagId": "31bfd695-7f0c-4a24-bfc0-7b645c931653", "sourceId": "0c557629-f851-4a06-9b79-7175c7fb9999", "quoteExcerpt": null, "note": null }, { "flagId": "c8448e47-eb73-4a96-889a-7992475a6528", "sourceId": "41e0eec0-099e-4b6a-94ff-88b9f551f1ce", "quoteExcerpt": "We consistently rely on (EC)DHE algorithms with Perfect Forward Secrecy (PFS).", "note": null }, { "flagId": "fde09c88-0a85-4551-8a82-9149a2793b2d", "sourceId": "ae5b2e83-4874-41c1-9192-268855948568", "quoteExcerpt": "we collect: Preexisting confirmed email address (required as inventory data)", "note": null }, { "flagId": "b0f63fee-2326-49cb-b1a6-9d460295ee77", "sourceId": "ae5b2e83-4874-41c1-9192-268855948568", "quoteExcerpt": "No tracking or analytics cookies are employed.", "note": null }, { "flagId": "b0f63fee-2326-49cb-b1a6-9d460295ee77", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": "No Advertising, No Tracking", "note": null }, { "flagId": "e423e36e-a239-45a8-9470-16529ddd4f29", "sourceId": "ae5b2e83-4874-41c1-9192-268855948568", "quoteExcerpt": "We never disclose this data to third parties except for payment data", "note": null }, { "flagId": "78918b15-c6c2-4d81-b530-c33c99680bf4", "sourceId": "ae5b2e83-4874-41c1-9192-268855948568", "quoteExcerpt": "personal data will be deleted within 30 days unless", "note": null }, { "flagId": "848f9886-6543-40ca-9dae-076d23691b2f", "sourceId": "ae5b2e83-4874-41c1-9192-268855948568", "quoteExcerpt": "Encrypted transmission of data.", "note": null }, { "flagId": "848f9886-6543-40ca-9dae-076d23691b2f", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": "non-obsolete secure communication protocols", "note": null }, { "flagId": "f5148aa4-bce0-4f90-a599-a76379ec4758", "sourceId": "ae5b2e83-4874-41c1-9192-268855948568", "quoteExcerpt": "Swiss Federal Data Protection Act (DPA)", "note": null }, { "flagId": "f87ff559-b680-4e75-a388-e8df3bb1ffc8", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": "do not access, analyse, scan or share any user data", "note": null }, { "flagId": "f87ff559-b680-4e75-a388-e8df3bb1ffc8", "sourceId": "ae5b2e83-4874-41c1-9192-268855948568", "quoteExcerpt": null, "note": null }, { "flagId": "57cd7000-2682-441c-9fd7-fb95216c0b5f", "sourceId": "ae5b2e83-4874-41c1-9192-268855948568", "quoteExcerpt": "Migadu-Mail GmbH\nRohnen 587\nCH-9414 Schachen\nSwitzerland", "note": null }, { "flagId": "57cd7000-2682-441c-9fd7-fb95216c0b5f", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": "self-funded, independent and a profitable company registered in Switzerland", "note": null }, { "flagId": "fa69cd4b-4546-4724-953f-1f800b2dcf07", "sourceId": "4705e8f6-08df-4a09-8072-e302aa997ce8", "quoteExcerpt": "we do not connect data that we obtain during payment with email accounts", "note": null }, { "flagId": "7c5bd33c-3e66-4267-a6cd-71562ef43ecb", "sourceId": "4705e8f6-08df-4a09-8072-e302aa997ce8", "quoteExcerpt": "we do not save your IP address when you visit or use our website", "note": null }, { "flagId": "dccb416a-746c-442c-ab95-7b6b21b57578", "sourceId": "4705e8f6-08df-4a09-8072-e302aa997ce8", "quoteExcerpt": "We refrain from using tracking tools in order to protect your privacy", "note": null }, { "flagId": "dccb416a-746c-442c-ab95-7b6b21b57578", "sourceId": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "quoteExcerpt": null, "note": null }, { "flagId": "a844e8f6-d56b-4dfd-87e9-a08460511f1d", "sourceId": "4705e8f6-08df-4a09-8072-e302aa997ce8", "quoteExcerpt": "we don't pass data on or trade it with anyone", "note": null }, { "flagId": "ff3e396e-987f-41ea-a821-53f5f450c90e", "sourceId": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "quoteExcerpt": "All data can be encrypted at the touch of a button", "note": null }, { "flagId": "ff3e396e-987f-41ea-a821-53f5f450c90e", "sourceId": "4705e8f6-08df-4a09-8072-e302aa997ce8", "quoteExcerpt": null, "note": null }, { "flagId": "0ae21213-dbeb-42b3-ab7a-b28e6c325bc2", "sourceId": "7ecadb60-0803-49b2-92cd-bcb1fc9d37b4", "quoteExcerpt": "we published a transparency report in May 2014", "note": null }, { "flagId": "6423a9c7-4c82-4c8c-93e6-f8c1264d395b", "sourceId": "4705e8f6-08df-4a09-8072-e302aa997ce8", "quoteExcerpt": "These are saved for a period of seven days", "note": null }, { "flagId": "0c3af698-5a67-4724-9465-274f7e96f6a2", "sourceId": "820c88a1-c23e-4dc5-803a-bb4e044009e9", "quoteExcerpt": null, "note": null }, { "flagId": "04bbbe66-49b1-4394-aed2-d996474848c5", "sourceId": "4705e8f6-08df-4a09-8072-e302aa997ce8", "quoteExcerpt": "All data is stored exclusively in Germany and kept redundantly in two main locations.", "note": null }, { "flagId": "57f4f9e8-1140-4cff-b23f-8747e4bedb6c", "sourceId": "4705e8f6-08df-4a09-8072-e302aa997ce8", "quoteExcerpt": null, "note": null }, { "flagId": "57f4f9e8-1140-4cff-b23f-8747e4bedb6c", "sourceId": "7ecadb60-0803-49b2-92cd-bcb1fc9d37b4", "quoteExcerpt": null, "note": null }, { "flagId": "e46cfd58-896a-4d47-b730-31ef0092e8af", "sourceId": "7ecadb60-0803-49b2-92cd-bcb1fc9d37b4", "quoteExcerpt": "we possess neither personal data (user data like names and addresses), nor the IP addresses", "note": null }, { "flagId": "c0979798-5386-4340-bdc8-8a24cc9b2832", "sourceId": "4705e8f6-08df-4a09-8072-e302aa997ce8", "quoteExcerpt": "All data is stored exclusively in Germany", "note": null }, { "flagId": "f10d16e5-fb0f-43ff-961b-a8490ed92326", "sourceId": "7ecadb60-0803-49b2-92cd-bcb1fc9d37b4", "quoteExcerpt": "first German telecommunications provider to publish a transparency report", "note": null }, { "flagId": "54d1251a-5099-4aed-bba9-5b7ece3dc4bb", "sourceId": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "quoteExcerpt": "Compatible with all devices and apps (IMAP, POP3)", "note": null }, { "flagId": "7fa66574-c8c9-486f-8e6e-7be5ccda859c", "sourceId": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "quoteExcerpt": "Import and export ICS files", "note": null }, { "flagId": "22ddbd8b-13ee-4d18-ad64-6f5e76efeba7", "sourceId": "820c88a1-c23e-4dc5-803a-bb4e044009e9", "quoteExcerpt": null, "note": null }, { "flagId": "c2319947-152a-43e8-8f38-0033e63aefb9", "sourceId": "820c88a1-c23e-4dc5-803a-bb4e044009e9", "quoteExcerpt": null, "note": null }, { "flagId": "c2319947-152a-43e8-8f38-0033e63aefb9", "sourceId": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "quoteExcerpt": null, "note": null }, { "flagId": "822aa0a9-0cc6-4207-82b8-bf11e38cacce", "sourceId": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "quoteExcerpt": "100% independent and financed by our users", "note": null }, { "flagId": "027e50af-76a6-4a45-b27d-b7ed671bae67", "sourceId": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "quoteExcerpt": "100% financed by our users", "note": null }, { "flagId": "c9043a29-74e3-499c-accf-7400aea65d3c", "sourceId": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "quoteExcerpt": null, "note": null }, { "flagId": "7737936b-706b-44e5-9997-18cec5e5b888", "sourceId": "7ecadb60-0803-49b2-92cd-bcb1fc9d37b4", "quoteExcerpt": "first German telecommunications provider to do so", "note": null }, { "flagId": "00fbdd69-7084-4d6d-a3b7-2ec10fb57427", "sourceId": "7ecadb60-0803-49b2-92cd-bcb1fc9d37b4", "quoteExcerpt": "grave security problems exist, there are regular breaches", "note": null }, { "flagId": "6745d98b-b2d8-4383-88cc-63e6ec92e141", "sourceId": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "quoteExcerpt": "100% real green energy from Green Planet Energy", "note": null }, { "flagId": "60bf5809-8f29-41d9-9fe3-7f350837b126", "sourceId": "ecbe8ce5-2478-4f0a-9568-69092dab36d5", "quoteExcerpt": null, "note": null }, { "flagId": "60bf5809-8f29-41d9-9fe3-7f350837b126", "sourceId": "18c2bdb0-a8b4-41cf-8a9b-bcf6fdb18965", "quoteExcerpt": null, "note": null }, { "flagId": "97ad251e-d5e4-430c-802e-423bef1ae784", "sourceId": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "quoteExcerpt": "Conserving resources with appropriately sized servers", "note": null }, { "flagId": "1530ac9b-49ca-4ae3-ac13-223456198e93", "sourceId": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "quoteExcerpt": "No business flights since our founding in 2009", "note": null }, { "flagId": "b6ffa8fa-0f92-48e8-8e79-2d1057f5da0a", "sourceId": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "quoteExcerpt": null, "note": null }, { "flagId": "b6ffa8fa-0f92-48e8-8e79-2d1057f5da0a", "sourceId": "7ecadb60-0803-49b2-92cd-bcb1fc9d37b4", "quoteExcerpt": null, "note": null }, { "flagId": "0ee71fef-43e6-481e-9888-96851f721197", "sourceId": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "quoteExcerpt": "Organic, vegetarian canteen, sustainable workplace", "note": null }, { "flagId": "1ccdd575-9568-4b79-b7c7-9adf71f10277", "sourceId": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "quoteExcerpt": "No business flights since our founding in 2009", "note": null }, { "flagId": "70122e6c-0788-4809-a54e-662a04d0791e", "sourceId": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "quoteExcerpt": "Two levels of contrast per color", "note": null }, { "flagId": "2df91a4d-9e1e-4565-bd96-2e9c358f27dd", "sourceId": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "quoteExcerpt": null, "note": null }, { "flagId": "0e781b0e-dda0-4d4e-bf29-9fc855ef4878", "sourceId": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "quoteExcerpt": null, "note": null }, { "flagId": "0e781b0e-dda0-4d4e-bf29-9fc855ef4878", "sourceId": "820c88a1-c23e-4dc5-803a-bb4e044009e9", "quoteExcerpt": null, "note": null }, { "flagId": "96d29cbc-e09b-4db2-b128-dc86fa87546f", "sourceId": "55c57815-fc54-476b-a00d-aa50ff20b3cd", "quoteExcerpt": "encrypts all your data end-to-end with post-quantum cryptography", "note": null }, { "flagId": "96d29cbc-e09b-4db2-b128-dc86fa87546f", "sourceId": "cfd218ed-f9e0-4b3a-9fe6-6a7a3d87ff84", "quoteExcerpt": "only when data is encrypted end-to-end, it is truly inaccessible", "note": null }, { "flagId": "fe2a4961-e916-494a-86aa-aae9fa7dc61a", "sourceId": "cfd218ed-f9e0-4b3a-9fe6-6a7a3d87ff84", "quoteExcerpt": "no tracking, open source", "note": null }, { "flagId": "fe2a4961-e916-494a-86aa-aae9fa7dc61a", "sourceId": "55c57815-fc54-476b-a00d-aa50ff20b3cd", "quoteExcerpt": "No Google Push, not even on Android", "note": null }, { "flagId": "f608d4c8-dbe8-482b-aaa2-9efc3161a95c", "sourceId": "6685ab12-c258-489f-bdb4-4f221ad89727", "quoteExcerpt": "we at Tuta do not plan to invest time and money into developing an AI", "note": null }, { "flagId": "e4f3d1ed-6285-4df7-903b-31fd08c16197", "sourceId": "6685ab12-c258-489f-bdb4-4f221ad89727", "quoteExcerpt": "The data they collect is next to nothing (if any)", "note": null }, { "flagId": "e4f3d1ed-6285-4df7-903b-31fd08c16197", "sourceId": "cfd218ed-f9e0-4b3a-9fe6-6a7a3d87ff84", "quoteExcerpt": null, "note": null }, { "flagId": "f56ef924-037c-4b7e-b2b2-dae811ae3a0f", "sourceId": "cfd218ed-f9e0-4b3a-9fe6-6a7a3d87ff84", "quoteExcerpt": null, "note": null }, { "flagId": "f56ef924-037c-4b7e-b2b2-dae811ae3a0f", "sourceId": "55c57815-fc54-476b-a00d-aa50ff20b3cd", "quoteExcerpt": null, "note": null }, { "flagId": "b7077e1a-b967-4169-a5d5-e5c54f6e58f3", "sourceId": "cfd218ed-f9e0-4b3a-9fe6-6a7a3d87ff84", "quoteExcerpt": "Who pays for it? The users or the advertisers?", "note": null }, { "flagId": "b7077e1a-b967-4169-a5d5-e5c54f6e58f3", "sourceId": "6685ab12-c258-489f-bdb4-4f221ad89727", "quoteExcerpt": null, "note": null }, { "flagId": "b9e10fe4-0c34-412f-ac3c-cbb812b39ce6", "sourceId": "4f023639-efde-4a86-b8b3-d40e01b1302c", "quoteExcerpt": "Tutao GmbH Address: Deisterstr. 17a, 30449 Hanover", "note": null }, { "flagId": "4d889d68-d74a-4724-9a0b-12b58fd64494", "sourceId": "4f023639-efde-4a86-b8b3-d40e01b1302c", "quoteExcerpt": "Tutao GmbH Address: Deisterstr. 17a, 30449 Hanover", "note": null }, { "flagId": "e718e68b-5cd4-41a5-83cd-939fece5d45f", "sourceId": "4f023639-efde-4a86-b8b3-d40e01b1302c", "quoteExcerpt": null, "note": null }, { "flagId": "e718e68b-5cd4-41a5-83cd-939fece5d45f", "sourceId": "cfd218ed-f9e0-4b3a-9fe6-6a7a3d87ff84", "quoteExcerpt": null, "note": null }, { "flagId": "d4ac4cf7-28db-4d0a-a5eb-2315ae00900c", "sourceId": "6685ab12-c258-489f-bdb4-4f221ad89727", "quoteExcerpt": null, "note": null }, { "flagId": "b3febd61-6ef8-463d-be03-9441cf9895a9", "sourceId": "cfd218ed-f9e0-4b3a-9fe6-6a7a3d87ff84", "quoteExcerpt": "all-round encryption, no tracking, open source", "note": null }, { "flagId": "cf0ff476-d5a8-4492-adb3-7e8159c7f223", "sourceId": "cfd218ed-f9e0-4b3a-9fe6-6a7a3d87ff84", "quoteExcerpt": "we have built our entire clients — web, Android, iOS", "note": null }, { "flagId": "af3c6c2b-5615-47eb-9f9a-e249a3c34e11", "sourceId": "4f023639-efde-4a86-b8b3-d40e01b1302c", "quoteExcerpt": null, "note": null }, { "flagId": "11e017fb-edd1-477e-b3c1-733e3891576a", "sourceId": "cfd218ed-f9e0-4b3a-9fe6-6a7a3d87ff84", "quoteExcerpt": null, "note": null }, { "flagId": "ad69ef02-e3e0-4998-923b-c2955714deb9", "sourceId": "cfd218ed-f9e0-4b3a-9fe6-6a7a3d87ff84", "quoteExcerpt": "we have built our entire clients — web, Android, iOS", "note": null }, { "flagId": "ad69ef02-e3e0-4998-923b-c2955714deb9", "sourceId": "4f023639-efde-4a86-b8b3-d40e01b1302c", "quoteExcerpt": null, "note": null }, { "flagId": "6980f70d-c7ab-470f-99fb-bef2651f5f39", "sourceId": "4f023639-efde-4a86-b8b3-d40e01b1302c", "quoteExcerpt": "The Tutao GmbH Address: Deisterstr. 17a, 30449 Hanover", "note": null }, { "flagId": "b6df1f9c-8072-4f6c-ae6d-620b537071de", "sourceId": "55c57815-fc54-476b-a00d-aa50ff20b3cd", "quoteExcerpt": "freedom to communicate confidentially, without any tracking or personalized ads", "note": null }, { "flagId": "b6df1f9c-8072-4f6c-ae6d-620b537071de", "sourceId": "6685ab12-c258-489f-bdb4-4f221ad89727", "quoteExcerpt": null, "note": null }, { "flagId": "c61de61b-af9a-43d1-9000-850403ecad51", "sourceId": "4f023639-efde-4a86-b8b3-d40e01b1302c", "quoteExcerpt": "the German version shall prevail", "note": null }, { "flagId": "c6e6c664-a7ad-49da-820c-a3a318f15595", "sourceId": "55c57815-fc54-476b-a00d-aa50ff20b3cd", "quoteExcerpt": "No Google Push, not even on Android", "note": null }, { "flagId": "1c548bf7-edba-45d4-ac14-fd7a04eb40c8", "sourceId": "55c57815-fc54-476b-a00d-aa50ff20b3cd", "quoteExcerpt": "only use renewable energy to power your emails, calendars, and contacts", "note": null }, { "flagId": "1c548bf7-edba-45d4-ac14-fd7a04eb40c8", "sourceId": "628e2a8e-e5ae-419a-af05-bc56e2a7b790", "quoteExcerpt": null, "note": null }, { "flagId": "563e187a-dc8f-4d4a-9886-fe383ad48300", "sourceId": "55c57815-fc54-476b-a00d-aa50ff20b3cd", "quoteExcerpt": "only use renewable energy to power your emails, calendars, and contacts", "note": null }, { "flagId": "563e187a-dc8f-4d4a-9886-fe383ad48300", "sourceId": "628e2a8e-e5ae-419a-af05-bc56e2a7b790", "quoteExcerpt": null, "note": null }, { "flagId": "df44e648-308b-4b72-bcc0-2332d8d20092", "sourceId": "55c57815-fc54-476b-a00d-aa50ff20b3cd", "quoteExcerpt": null, "note": null }, { "flagId": "043819f8-d664-47a5-b55c-4de63bf1bf7a", "sourceId": "55c57815-fc54-476b-a00d-aa50ff20b3cd", "quoteExcerpt": null, "note": null }, { "flagId": "043819f8-d664-47a5-b55c-4de63bf1bf7a", "sourceId": "4f023639-efde-4a86-b8b3-d40e01b1302c", "quoteExcerpt": null, "note": null }, { "flagId": "8b9a82e9-9a5b-43d0-8f89-0b7e80e15436", "sourceId": "55c57815-fc54-476b-a00d-aa50ff20b3cd", "quoteExcerpt": null, "note": null }, { "flagId": "8b9a82e9-9a5b-43d0-8f89-0b7e80e15436", "sourceId": "cfd218ed-f9e0-4b3a-9fe6-6a7a3d87ff84", "quoteExcerpt": null, "note": null }, { "flagId": "e79becb2-2546-43d7-9572-fd6619f5f42d", "sourceId": "55c57815-fc54-476b-a00d-aa50ff20b3cd", "quoteExcerpt": "Use the free Tuta Mail apps for Android or iPhone", "note": null }, { "flagId": "375562a5-56ca-4a46-93b4-8e6adab42750", "sourceId": "a0914b81-e8d2-4cd8-a5dc-8dead6343a17", "quoteExcerpt": "end-to-end encrypted and open-source", "note": null }, { "flagId": "7106e19f-b672-4bbc-8a6f-83226c27007c", "sourceId": "a0914b81-e8d2-4cd8-a5dc-8dead6343a17", "quoteExcerpt": "free of tracking", "note": null }, { "flagId": "22972467-b5bf-473d-a7e0-5d39cca6e46f", "sourceId": "a0914b81-e8d2-4cd8-a5dc-8dead6343a17", "quoteExcerpt": null, "note": null }, { "flagId": "f982ee93-1997-452c-8b9d-98ceca6522da", "sourceId": "17e3a790-bab1-473b-8820-3cedb479137d", "quoteExcerpt": null, "note": null }, { "flagId": "512d92de-ba0a-4782-9c52-dc7191533e74", "sourceId": "a0914b81-e8d2-4cd8-a5dc-8dead6343a17", "quoteExcerpt": "end-to-end encrypted and open-source", "note": null }, { "flagId": "65085d1e-97ba-47bb-9ad5-7cb482f87ffd", "sourceId": "a0914b81-e8d2-4cd8-a5dc-8dead6343a17", "quoteExcerpt": null, "note": null }, { "flagId": "eff0bd6e-f7ff-47a3-82bb-31b3a468e385", "sourceId": "a0914b81-e8d2-4cd8-a5dc-8dead6343a17", "quoteExcerpt": "end-to-end encrypted and open-source", "note": null }, { "flagId": "e9996c6c-001b-48a0-a2ec-f4b696e9842c", "sourceId": "a0914b81-e8d2-4cd8-a5dc-8dead6343a17", "quoteExcerpt": "it was easy to set up an own instance", "note": null }, { "flagId": "4887599a-029b-46df-ab6c-01d571a3d849", "sourceId": "a0914b81-e8d2-4cd8-a5dc-8dead6343a17", "quoteExcerpt": null, "note": null }, { "flagId": "ee7ae2b8-abff-43c7-860c-87fc198080a7", "sourceId": "a0914b81-e8d2-4cd8-a5dc-8dead6343a17", "quoteExcerpt": null, "note": null }, { "flagId": "4f7b05dd-1a62-43be-a66a-ef769043abba", "sourceId": "a3bb55a6-fd38-45fd-80a1-e3c1076d7c7b", "quoteExcerpt": null, "note": null }, { "flagId": "4f7b05dd-1a62-43be-a66a-ef769043abba", "sourceId": "17e3a790-bab1-473b-8820-3cedb479137d", "quoteExcerpt": null, "note": null }, { "flagId": "cbd40b82-482a-4c4f-8141-153814046c75", "sourceId": "a0914b81-e8d2-4cd8-a5dc-8dead6343a17", "quoteExcerpt": null, "note": null }, { "flagId": "b232056a-a38a-406d-8487-40e39b88cd22", "sourceId": "a9f74185-5bf8-40a5-9ffa-44d69661f560", "quoteExcerpt": null, "note": null }, { "flagId": "81676dd6-6803-4fb0-9a0a-d81d45dabd91", "sourceId": "e30db3dc-93f6-44f1-99d1-189f8a5af6de", "quoteExcerpt": "cannot currently include the exact number we receive", "note": null }, { "flagId": "634472fa-2781-450a-b08b-a2e2f555737c", "sourceId": "e30db3dc-93f6-44f1-99d1-189f8a5af6de", "quoteExcerpt": "exact number of government data requests received", "note": null }, { "flagId": "ca9f4251-3048-44e5-95d2-c5adc492e4a8", "sourceId": "a9f74185-5bf8-40a5-9ffa-44d69661f560", "quoteExcerpt": "shares infrastructure, systems, and technology with other Dropbox Companies", "note": null }, { "flagId": "f5165780-a946-4c95-9b01-964748f24f37", "sourceId": "a9f74185-5bf8-40a5-9ffa-44d69661f560", "quoteExcerpt": null, "note": null }, { "flagId": "0b40e3ce-5131-46d1-a423-6ed0fa3c1bdf", "sourceId": "40f28a5c-17d3-4906-a065-3dd6205310c7", "quoteExcerpt": "previews for 175+ file types", "note": null }, { "flagId": "62227dec-3e81-4199-b62c-33d81145c05c", "sourceId": "a9f74185-5bf8-40a5-9ffa-44d69661f560", "quoteExcerpt": null, "note": null }, { "flagId": "62227dec-3e81-4199-b62c-33d81145c05c", "sourceId": "051f03e1-9a96-4f33-9249-1060bd5dbcd8", "quoteExcerpt": "full-resolution copies to cloud storage", "note": null }, { "flagId": "aba025ba-e1ff-4951-bcf4-dc0f32c42642", "sourceId": "27aedb50-e59b-4379-9c9e-0bed414d0f16", "quoteExcerpt": "Integrations with best in-class security solutions", "note": null }, { "flagId": "aba025ba-e1ff-4951-bcf4-dc0f32c42642", "sourceId": "a9f74185-5bf8-40a5-9ffa-44d69661f560", "quoteExcerpt": null, "note": null }, { "flagId": "7bdabfe7-5429-43ff-b26c-a941dd348fa1", "sourceId": "40f28a5c-17d3-4906-a065-3dd6205310c7", "quoteExcerpt": null, "note": null }, { "flagId": "a3e5ccb9-f1d3-4035-a02e-6a55bcd3906c", "sourceId": "27aedb50-e59b-4379-9c9e-0bed414d0f16", "quoteExcerpt": "180 days to restore deleted files", "note": null }, { "flagId": "a22fda7c-b7f3-4994-b11d-fd3f0ea30d03", "sourceId": "40f28a5c-17d3-4906-a065-3dd6205310c7", "quoteExcerpt": null, "note": null }, { "flagId": "4ed1c023-ee80-4df3-a603-7f7d35019080", "sourceId": "e30db3dc-93f6-44f1-99d1-189f8a5af6de", "quoteExcerpt": "we publish the exact number of government data requests received", "note": null }, { "flagId": "a62473fc-6042-446c-aeb6-6f028b09aa5a", "sourceId": "40f28a5c-17d3-4906-a065-3dd6205310c7", "quoteExcerpt": "never sells your data", "note": null }, { "flagId": "a62473fc-6042-446c-aeb6-6f028b09aa5a", "sourceId": "e30db3dc-93f6-44f1-99d1-189f8a5af6de", "quoteExcerpt": "we notify the user when it has expired", "note": null }, { "flagId": "58079ef7-833f-43f2-bd08-21337d8e3b61", "sourceId": "26eff636-4190-4cf0-b971-c23a09e405f0", "quoteExcerpt": null, "note": null }, { "flagId": "d0a1bbca-c616-46e0-bde6-17bed9bab21d", "sourceId": "26eff636-4190-4cf0-b971-c23a09e405f0", "quoteExcerpt": null, "note": null }, { "flagId": "d0a1bbca-c616-46e0-bde6-17bed9bab21d", "sourceId": "e30db3dc-93f6-44f1-99d1-189f8a5af6de", "quoteExcerpt": null, "note": null }, { "flagId": "32364af8-6272-41a3-ad60-5c0c7cde1f93", "sourceId": "e30db3dc-93f6-44f1-99d1-189f8a5af6de", "quoteExcerpt": null, "note": null }, { "flagId": "32364af8-6272-41a3-ad60-5c0c7cde1f93", "sourceId": "40f28a5c-17d3-4906-a065-3dd6205310c7", "quoteExcerpt": null, "note": null }, { "flagId": "bf2edd89-5d94-4739-b467-9b2363614a0a", "sourceId": "40f28a5c-17d3-4906-a065-3dd6205310c7", "quoteExcerpt": null, "note": null }, { "flagId": "11fe2293-e99f-4435-b472-24d3b6e65def", "sourceId": "40f28a5c-17d3-4906-a065-3dd6205310c7", "quoteExcerpt": null, "note": null }, { "flagId": "11fe2293-e99f-4435-b472-24d3b6e65def", "sourceId": "27aedb50-e59b-4379-9c9e-0bed414d0f16", "quoteExcerpt": null, "note": null }, { "flagId": "1b61d616-6141-4104-b11a-85e3d4c88396", "sourceId": "40f28a5c-17d3-4906-a065-3dd6205310c7", "quoteExcerpt": "previews for 175+ file types, your content stays organized", "note": null }, { "flagId": "084f1aa0-1de0-4354-baeb-3c1e6f20a8f1", "sourceId": "48d77edd-b7dc-4abc-b981-15aa6e2c1c0f", "quoteExcerpt": "No data leaks to third parties", "note": null }, { "flagId": "084f1aa0-1de0-4354-baeb-3c1e6f20a8f1", "sourceId": "e22a7719-ba15-4552-a228-b4aece314412", "quoteExcerpt": null, "note": null }, { "flagId": "fc9dcee6-b837-4a99-96a4-8814e8eaa433", "sourceId": "e22a7719-ba15-4552-a228-b4aece314412", "quoteExcerpt": "The data is not analysed for marketing purposes.", "note": null }, { "flagId": "93c1d0d5-ddd4-4c5c-9179-aadd8219acf5", "sourceId": "e22a7719-ba15-4552-a228-b4aece314412", "quoteExcerpt": null, "note": null }, { "flagId": "3b68b1fd-c4e6-42ac-96ad-af7c767af66d", "sourceId": "e22a7719-ba15-4552-a228-b4aece314412", "quoteExcerpt": "No data is passed on to third parties", "note": null }, { "flagId": "8fc06ae0-9fb3-4d5d-b70f-6fdf05d7d817", "sourceId": "e22a7719-ba15-4552-a228-b4aece314412", "quoteExcerpt": null, "note": null }, { "flagId": "8fc06ae0-9fb3-4d5d-b70f-6fdf05d7d817", "sourceId": "f6aa7aca-e52e-4cae-8441-375f4201cd4d", "quoteExcerpt": "best security in the on-premises content collaboration industry", "note": null }, { "flagId": "5868962b-9672-4e18-9cc0-3c442d9ad500", "sourceId": "e22a7719-ba15-4552-a228-b4aece314412", "quoteExcerpt": null, "note": null }, { "flagId": "5868962b-9672-4e18-9cc0-3c442d9ad500", "sourceId": "48d77edd-b7dc-4abc-b981-15aa6e2c1c0f", "quoteExcerpt": null, "note": null }, { "flagId": "51bb770b-58ba-4902-bb27-9ddac5404edc", "sourceId": "e22a7719-ba15-4552-a228-b4aece314412", "quoteExcerpt": "deleted or blocked", "note": null }, { "flagId": "1e2386a6-236f-4563-a043-7760e40476ae", "sourceId": "e22a7719-ba15-4552-a228-b4aece314412", "quoteExcerpt": "Nextcloud GmbH Hauptmannsreute 44a 70192 Stuttgart Germany", "note": null }, { "flagId": "e1382e60-fcd9-4c92-bb90-9cfe50c2a550", "sourceId": "13d509b2-c625-4da9-b64e-7338513f3fc8", "quoteExcerpt": "Keep your data on servers you own, at all times.", "note": null }, { "flagId": "e1382e60-fcd9-4c92-bb90-9cfe50c2a550", "sourceId": "48d77edd-b7dc-4abc-b981-15aa6e2c1c0f", "quoteExcerpt": "No data leaks to third parties", "note": null }, { "flagId": "9d253766-1004-4b23-9a61-25d35f61e228", "sourceId": "e22a7719-ba15-4552-a228-b4aece314412", "quoteExcerpt": null, "note": null }, { "flagId": "329b769e-e5df-401e-b76f-41d4ed8c81a6", "sourceId": "e22a7719-ba15-4552-a228-b4aece314412", "quoteExcerpt": null, "note": null }, { "flagId": "329b769e-e5df-401e-b76f-41d4ed8c81a6", "sourceId": "f6aa7aca-e52e-4cae-8441-375f4201cd4d", "quoteExcerpt": null, "note": null }, { "flagId": "296ae4e0-99a7-4430-a0fd-5a6c508fbde3", "sourceId": "48d77edd-b7dc-4abc-b981-15aa6e2c1c0f", "quoteExcerpt": "most popular open source content collaboration platform", "note": null }, { "flagId": "f9123f6b-0a11-4345-9c75-556c2a8f62b1", "sourceId": "48d77edd-b7dc-4abc-b981-15aa6e2c1c0f", "quoteExcerpt": "Open Collaboration Services API for streamlined collaboration across services", "note": null }, { "flagId": "c71c9416-8aa2-4915-92e4-b5f55a947d51", "sourceId": "48d77edd-b7dc-4abc-b981-15aa6e2c1c0f", "quoteExcerpt": "supports all major document, spreadsheet and presentation file formats", "note": null }, { "flagId": "ca427e7c-bf4e-43fa-92b9-37f484568ed1", "sourceId": "48d77edd-b7dc-4abc-b981-15aa6e2c1c0f", "quoteExcerpt": "Protect, control and monitor data and communication across your company", "note": null }, { "flagId": "24ac3dc2-7fc1-4947-8ff8-96f2eb8017d4", "sourceId": "48d77edd-b7dc-4abc-b981-15aa6e2c1c0f", "quoteExcerpt": "Open Collaboration Services API for streamlined collaboration across services", "note": null }, { "flagId": "c860c745-bd46-4699-8a4e-48415e9c7813", "sourceId": "48d77edd-b7dc-4abc-b981-15aa6e2c1c0f", "quoteExcerpt": "The better Microsoft 365 for private clouds", "note": null }, { "flagId": "b968487e-a841-4d67-ae3c-f6ecb1467d3a", "sourceId": "e22a7719-ba15-4552-a228-b4aece314412", "quoteExcerpt": "Nextcloud GmbH (hereinafter collectively referred to as \"the controller\")", "note": null }, { "flagId": "9cca747c-155c-4742-90f4-b7d1aee9e394", "sourceId": "48d77edd-b7dc-4abc-b981-15aa6e2c1c0f", "quoteExcerpt": "entirely open-source community development model, free of lockins or paywalls", "note": null }, { "flagId": "2e999408-7ac7-4f07-aa11-7524658fa4d5", "sourceId": "48d77edd-b7dc-4abc-b981-15aa6e2c1c0f", "quoteExcerpt": "thriving and transparent, entirely open-source community development model", "note": null }, { "flagId": "eed9255e-6881-4538-a1fd-a6eb3f006483", "sourceId": "496fe931-e9db-4f1d-95a2-93b138861480", "quoteExcerpt": null, "note": null }, { "flagId": "eed9255e-6881-4538-a1fd-a6eb3f006483", "sourceId": "139e44c7-5b3f-4d82-8731-0426e1530033", "quoteExcerpt": null, "note": null }, { "flagId": "3603d957-76f6-4a74-be2f-e2973cca8b2c", "sourceId": "b95fa691-1579-46f4-a423-cc87ab2e2a40", "quoteExcerpt": null, "note": null }, { "flagId": "3603d957-76f6-4a74-be2f-e2973cca8b2c", "sourceId": "a2e81598-9496-46cb-83f7-5a99b04be150", "quoteExcerpt": null, "note": null }, { "flagId": "3603d957-76f6-4a74-be2f-e2973cca8b2c", "sourceId": "496fe931-e9db-4f1d-95a2-93b138861480", "quoteExcerpt": null, "note": null }, { "flagId": "c9cd5cb0-d45c-46bc-b8ef-2554adcf0b4b", "sourceId": "356563bc-d0c7-4019-a0da-dc5bf0d522dc", "quoteExcerpt": null, "note": null }, { "flagId": "c9cd5cb0-d45c-46bc-b8ef-2554adcf0b4b", "sourceId": "496fe931-e9db-4f1d-95a2-93b138861480", "quoteExcerpt": null, "note": null }, { "flagId": "c8f26b13-9977-48e3-bb28-5c0f6f6d10bf", "sourceId": "48d77edd-b7dc-4abc-b981-15aa6e2c1c0f", "quoteExcerpt": null, "note": null }, { "flagId": "c8f26b13-9977-48e3-bb28-5c0f6f6d10bf", "sourceId": "e22a7719-ba15-4552-a228-b4aece314412", "quoteExcerpt": null, "note": null }, { "flagId": "eb3adc5b-8801-42df-88f1-4125c6636078", "sourceId": "48d77edd-b7dc-4abc-b981-15aa6e2c1c0f", "quoteExcerpt": null, "note": null }, { "flagId": "eb3adc5b-8801-42df-88f1-4125c6636078", "sourceId": "13d509b2-c625-4da9-b64e-7338513f3fc8", "quoteExcerpt": null, "note": null }, { "flagId": "c966b098-f23d-492e-8ade-c24f9412e4ea", "sourceId": "48d77edd-b7dc-4abc-b981-15aa6e2c1c0f", "quoteExcerpt": "thriving and transparent, entirely open-source community development model", "note": null }, { "flagId": "57ae1e66-9dbf-4f05-a441-4c36586e2a95", "sourceId": "b393c7ed-8175-4d67-a653-b5a20a521522", "quoteExcerpt": null, "note": null }, { "flagId": "57ae1e66-9dbf-4f05-a441-4c36586e2a95", "sourceId": "5a92225f-b06e-4ea6-b1f1-a5ddb0a504d7", "quoteExcerpt": null, "note": null }, { "flagId": "6380f5c1-bc4a-4ff6-bc65-a4f47e6a292e", "sourceId": "7e44f0e6-3372-43d7-8242-e92472e6f9f4", "quoteExcerpt": null, "note": null }, { "flagId": "6380f5c1-bc4a-4ff6-bc65-a4f47e6a292e", "sourceId": "57687988-594b-44a4-99bb-f1574766b205", "quoteExcerpt": null, "note": null }, { "flagId": "f5a02453-68d2-40c1-96d3-8e9e291261dd", "sourceId": "5a92225f-b06e-4ea6-b1f1-a5ddb0a504d7", "quoteExcerpt": null, "note": null }, { "flagId": "f5a02453-68d2-40c1-96d3-8e9e291261dd", "sourceId": "e980bb83-e3ae-46da-ad38-b5a3d0be06eb", "quoteExcerpt": null, "note": null }, { "flagId": "f5a02453-68d2-40c1-96d3-8e9e291261dd", "sourceId": "57687988-594b-44a4-99bb-f1574766b205", "quoteExcerpt": null, "note": null }, { "flagId": "9f19581c-3447-419c-bffd-d87aec2f8ae4", "sourceId": "10ffac12-72d6-4458-b356-690f23d367fb", "quoteExcerpt": null, "note": null }, { "flagId": "9f19581c-3447-419c-bffd-d87aec2f8ae4", "sourceId": "5a92225f-b06e-4ea6-b1f1-a5ddb0a504d7", "quoteExcerpt": null, "note": null }, { "flagId": "9f19581c-3447-419c-bffd-d87aec2f8ae4", "sourceId": "7e44f0e6-3372-43d7-8242-e92472e6f9f4", "quoteExcerpt": null, "note": null }, { "flagId": "58a9dae2-d8b8-4538-907d-371fb57946a8", "sourceId": "8f792e02-753c-45b6-8f35-73d3dbc9738d", "quoteExcerpt": null, "note": null }, { "flagId": "a5d0cd08-e0c9-45b7-bb27-4c717d9e8acf", "sourceId": "8f792e02-753c-45b6-8f35-73d3dbc9738d", "quoteExcerpt": null, "note": null }, { "flagId": "7fc0f472-c62f-4139-a078-c8dd2efe53d7", "sourceId": "9d338aed-3020-4ba6-ad20-936322308692", "quoteExcerpt": null, "note": null }, { "flagId": "575e57e8-eeac-44d7-806d-c6ef2968eccc", "sourceId": "9d338aed-3020-4ba6-ad20-936322308692", "quoteExcerpt": null, "note": null }, { "flagId": "666a287d-7ab5-4a34-997a-ae516256931a", "sourceId": "9d338aed-3020-4ba6-ad20-936322308692", "quoteExcerpt": null, "note": null }, { "flagId": "51d04d2f-9be4-4598-8669-23c5fa7efe2a", "sourceId": "9d338aed-3020-4ba6-ad20-936322308692", "quoteExcerpt": null, "note": null }, { "flagId": "2a84f4c4-eae3-40c5-879d-35738c6b92ed", "sourceId": "98f89fb8-5e5f-441e-a580-48048add7c51", "quoteExcerpt": null, "note": null }, { "flagId": "2a84f4c4-eae3-40c5-879d-35738c6b92ed", "sourceId": "5a92225f-b06e-4ea6-b1f1-a5ddb0a504d7", "quoteExcerpt": null, "note": null }, { "flagId": "f1873b7b-2056-483f-8a86-9062be88ffdf", "sourceId": "7e44f0e6-3372-43d7-8242-e92472e6f9f4", "quoteExcerpt": null, "note": null }, { "flagId": "8a4d30dd-f14b-477c-a476-e1f1691637d5", "sourceId": "5a92225f-b06e-4ea6-b1f1-a5ddb0a504d7", "quoteExcerpt": null, "note": null }, { "flagId": "8a4d30dd-f14b-477c-a476-e1f1691637d5", "sourceId": "e980bb83-e3ae-46da-ad38-b5a3d0be06eb", "quoteExcerpt": null, "note": null }, { "flagId": "8a4d30dd-f14b-477c-a476-e1f1691637d5", "sourceId": "57687988-594b-44a4-99bb-f1574766b205", "quoteExcerpt": null, "note": null }, { "flagId": "c2d21d57-624b-444d-9d06-c3b275e19873", "sourceId": "10ffac12-72d6-4458-b356-690f23d367fb", "quoteExcerpt": null, "note": null }, { "flagId": "c2d21d57-624b-444d-9d06-c3b275e19873", "sourceId": "5a92225f-b06e-4ea6-b1f1-a5ddb0a504d7", "quoteExcerpt": null, "note": null }, { "flagId": "585549c8-a42c-4217-b8a4-8de517c09282", "sourceId": "8f792e02-753c-45b6-8f35-73d3dbc9738d", "quoteExcerpt": null, "note": null }, { "flagId": "e2edb9b9-75ce-4131-918c-959cbf57a597", "sourceId": "8f792e02-753c-45b6-8f35-73d3dbc9738d", "quoteExcerpt": null, "note": null }, { "flagId": "746712e2-6a80-4da5-b24b-d062c5625399", "sourceId": "2c810089-5dbc-4c34-9f74-596343768ae4", "quoteExcerpt": null, "note": null }, { "flagId": "aef87035-39b1-4c84-95e7-720d4460716c", "sourceId": "2c810089-5dbc-4c34-9f74-596343768ae4", "quoteExcerpt": null, "note": null }, { "flagId": "68240734-12ea-474f-b18c-6edbda4de424", "sourceId": "cece303a-cf3b-4f37-80f7-7132d177d1d9", "quoteExcerpt": null, "note": null }, { "flagId": "3ab701e0-89e3-4060-b9a1-123f379c5535", "sourceId": "f2f9f274-66c5-4287-81bf-aacd0486dd87", "quoteExcerpt": null, "note": null }, { "flagId": "4999228a-7fa1-4b17-ad75-7276ff787c1c", "sourceId": "cece303a-cf3b-4f37-80f7-7132d177d1d9", "quoteExcerpt": null, "note": null }, { "flagId": "45e9efe6-7935-4e29-aa63-4a916db93520", "sourceId": "cece303a-cf3b-4f37-80f7-7132d177d1d9", "quoteExcerpt": null, "note": null }, { "flagId": "59d9bca9-5ed6-4c30-aeb2-bac89ef247f9", "sourceId": "cece303a-cf3b-4f37-80f7-7132d177d1d9", "quoteExcerpt": null, "note": null }, { "flagId": "62dcc523-615a-479f-ad7e-813b0bab0183", "sourceId": "9374ff6e-80bb-4e07-b550-efa2ceb23419", "quoteExcerpt": null, "note": null }, { "flagId": "ddf119da-0a2f-4b98-bfbd-75a7a2256167", "sourceId": "b0a323da-698d-4513-91a1-f75c34620ba5", "quoteExcerpt": null, "note": null }, { "flagId": "4b25e186-d06a-4c3c-a91b-8ea3d1b7e634", "sourceId": "ce0ff5bc-c602-44fd-a1a2-ef0d3904d819", "quoteExcerpt": null, "note": null }, { "flagId": "c0124628-4fc3-4f9e-bdab-c787d775b8ea", "sourceId": "a074daad-a2a9-4a44-bfc1-5cea344c648d", "quoteExcerpt": null, "note": null }, { "flagId": "434d099a-afd1-43a3-9e91-8ba6af2a8be0", "sourceId": "a074daad-a2a9-4a44-bfc1-5cea344c648d", "quoteExcerpt": null, "note": null }, { "flagId": "092f7407-9794-431e-b2ca-a8af0bfc2708", "sourceId": "a074daad-a2a9-4a44-bfc1-5cea344c648d", "quoteExcerpt": null, "note": null }, { "flagId": "6418964d-09a8-4bd5-a50d-ea7c71e0b2db", "sourceId": "cef49fe3-d30f-4e25-808c-9d0120b425a8", "quoteExcerpt": null, "note": null }, { "flagId": "c03f00c1-5aa6-423f-beaa-419b1bfa9a84", "sourceId": "b46b392b-a5fa-4f5a-93be-499372b8b6eb", "quoteExcerpt": null, "note": null }, { "flagId": "3b24396c-04a9-4341-8fbe-f85c31ccb1f7", "sourceId": "8ba1a343-0b81-4efc-8512-6474d3101987", "quoteExcerpt": null, "note": null }, { "flagId": "af704a84-793e-4703-9b15-a546fd9acb55", "sourceId": "644dbd66-e889-44ba-83e4-bc543475ce3f", "quoteExcerpt": null, "note": null }, { "flagId": "f77d270a-81fb-44d2-a75d-fc4a2e29a1a9", "sourceId": "82786e30-b5c0-4838-a997-ccc7ed875832", "quoteExcerpt": null, "note": null }, { "flagId": "1b3ca58e-72d6-4224-a632-bc4f296d3529", "sourceId": "0fe1ffbc-dbda-4c24-b819-ca51fd299c70", "quoteExcerpt": null, "note": null }, { "flagId": "e8f454ab-8623-4bc3-b7f3-ea9f6b1cbb8d", "sourceId": "a6846228-3540-4607-b6a5-68b65bf477b6", "quoteExcerpt": null, "note": null }, { "flagId": "f55319b5-571c-4aa3-9f14-d58b1343bbc0", "sourceId": "6fccd2cd-6d06-470c-ab58-6f70d5f48438", "quoteExcerpt": null, "note": null }, { "flagId": "58bec71b-58e2-41c3-852d-ed59cbe57d47", "sourceId": "6fccd2cd-6d06-470c-ab58-6f70d5f48438", "quoteExcerpt": null, "note": null }, { "flagId": "dc3b13c4-02df-42b3-be70-acb2cf03694d", "sourceId": "6a3239c8-3198-43eb-866c-513472b51d4c", "quoteExcerpt": null, "note": null }, { "flagId": "340655da-65a4-43dd-8103-5e32f20996d1", "sourceId": "e15ede03-8142-4a56-b29e-741751b4f53d", "quoteExcerpt": null, "note": null }, { "flagId": "0521821c-f16e-46ab-b1ef-83fea00a0140", "sourceId": "46774117-9f5a-4a25-b6f5-6eeb2f25c232", "quoteExcerpt": null, "note": null }, { "flagId": "fe1cf871-26c0-4d60-8512-95aaece1e7dd", "sourceId": "d86e8cd3-e349-4f8a-9d8b-27cc4c23bf96", "quoteExcerpt": null, "note": null }, { "flagId": "fabacd81-c7b6-4135-9995-665847546698", "sourceId": "d110fd53-2fc9-4cea-900d-6592e0627df9", "quoteExcerpt": null, "note": null }, { "flagId": "aa696227-f7fb-45e3-812c-00bb3ac00b4e", "sourceId": "0d42e54b-6405-4e63-97f8-67f2369d17ef", "quoteExcerpt": null, "note": null }, { "flagId": "da5c7526-6b4b-4066-9eaf-3c2bf4e395f1", "sourceId": "f8112c9a-65c7-4fbc-a2e2-14ac45e3a8bc", "quoteExcerpt": null, "note": null }, { "flagId": "84a774d2-6e33-4e22-a4b2-576fe368a1ef", "sourceId": "9578845a-cd31-49c7-bf69-cade156963c7", "quoteExcerpt": null, "note": null }, { "flagId": "a082cefc-3bd2-47b2-a4c2-407279a9ea6d", "sourceId": "10ffac12-72d6-4458-b356-690f23d367fb", "quoteExcerpt": null, "note": null }, { "flagId": "40205e12-6e32-4778-92f6-1502ba44a2c7", "sourceId": "10222a18-9b17-4736-846f-470e6a80f53a", "quoteExcerpt": null, "note": null }, { "flagId": "a2dac34c-9a48-43bc-89ee-fb703e3d53e0", "sourceId": "1aebb6b0-1709-43bc-9000-6d3e1dc88a70", "quoteExcerpt": null, "note": null }, { "flagId": "95ffd328-33db-4b0f-96da-9bdcf43dd5ca", "sourceId": "4232762c-fad2-4d53-a339-6e9f615466e8", "quoteExcerpt": null, "note": null }, { "flagId": "4e4e7108-ed6f-472d-89ce-da65b159bb0b", "sourceId": "d2a9e867-9fef-4839-9159-265e4c9ed40c", "quoteExcerpt": null, "note": null }, { "flagId": "4627d38e-1537-498c-973d-d46971373444", "sourceId": "9784c328-96a6-4f7f-adbc-c56bc3bc3ff1", "quoteExcerpt": null, "note": null }, { "flagId": "44512388-afc8-42c6-901c-8a0581c2336a", "sourceId": "d2a9e867-9fef-4839-9159-265e4c9ed40c", "quoteExcerpt": null, "note": null }, { "flagId": "cf10abdf-e3bc-41bc-a5b3-1e54f7056b3a", "sourceId": "7f8d5c69-743f-4b5d-b99a-2d3f7fd3dc01", "quoteExcerpt": null, "note": null }, { "flagId": "92d354ff-7fe5-448c-a5f9-a9ed35dadfd4", "sourceId": "522574c4-75f7-445a-b6df-726f65de5638", "quoteExcerpt": null, "note": null }, { "flagId": "8db6a0bb-f095-489e-9163-d76987b9ff9d", "sourceId": "f46d1576-1bb3-4117-9233-68e0c4ad9066", "quoteExcerpt": null, "note": null }, { "flagId": "991e470b-2a1f-444d-b69f-6fc3c78afe99", "sourceId": "d30f7cd3-e7b3-47fe-a60d-02e10c554cfb", "quoteExcerpt": null, "note": null }, { "flagId": "d8468b99-05da-4961-8f68-6552ec2bf51b", "sourceId": "ae37ec41-70af-4e60-bd3c-c885c8518837", "quoteExcerpt": null, "note": null }, { "flagId": "8f3e2ecf-e70c-4546-aed7-d668240cae78", "sourceId": "5ec14447-4def-48ee-bf8b-7b06209d9c12", "quoteExcerpt": null, "note": null }, { "flagId": "fb69ab78-79a2-45ed-8a00-74ad6a650137", "sourceId": "acaf8343-dacb-4e25-8575-1c11190afc85", "quoteExcerpt": null, "note": null }, { "flagId": "c1bb1f08-b71b-4125-8c7d-6d7c4bc2b087", "sourceId": "ddbd5e30-8600-476a-b051-86fa40732e3e", "quoteExcerpt": null, "note": null }, { "flagId": "251b56c3-de83-4351-8d15-01663b6d37e5", "sourceId": "66a752d5-2a32-45fc-8601-c120d0d0da3a", "quoteExcerpt": null, "note": null }, { "flagId": "c4818d2e-33b8-4677-b0e4-853732a6861f", "sourceId": "66a752d5-2a32-45fc-8601-c120d0d0da3a", "quoteExcerpt": null, "note": null }, { "flagId": "fa67101c-6e01-4064-ae8c-3d274ecc7f58", "sourceId": "e7362686-53a3-4b6b-93f8-704c8a80e00d", "quoteExcerpt": null, "note": null }, { "flagId": "954b1a15-5e39-4500-9092-02af990c9c9d", "sourceId": "2fa8a1dc-6760-46f3-8586-e7f6d55a36e3", "quoteExcerpt": null, "note": null }, { "flagId": "5e12ae71-d39f-4a70-be00-bcbbc2667e0f", "sourceId": "2fa8a1dc-6760-46f3-8586-e7f6d55a36e3", "quoteExcerpt": null, "note": null }, { "flagId": "0a6285a0-50e5-4780-8fdb-d7748d48e73e", "sourceId": "e7362686-53a3-4b6b-93f8-704c8a80e00d", "quoteExcerpt": null, "note": null }, { "flagId": "ccf29445-5b18-41c7-bca4-c77213a99da9", "sourceId": "bbe0a57b-7efa-472a-b108-27f664c8f687", "quoteExcerpt": null, "note": null }, { "flagId": "99b404c0-a156-4c9f-b287-6c5b06e7b662", "sourceId": "6e1f918a-5575-41b0-85e5-0e5cc2910e28", "quoteExcerpt": null, "note": null }, { "flagId": "a5f25217-cd8c-4225-8171-80c553e89e6d", "sourceId": "725fe69e-bac7-44ff-acb4-33943795f257", "quoteExcerpt": null, "note": null }, { "flagId": "fcd52b3e-a8b1-4337-baf3-b9f32a190ff9", "sourceId": "50457275-286e-43f1-8cb2-2318af7ea388", "quoteExcerpt": null, "note": null }, { "flagId": "c6e30b64-81f3-4a4b-92b1-a25484e1a538", "sourceId": "cf13ce86-9119-4ddd-a809-e8667462c017", "quoteExcerpt": null, "note": null }, { "flagId": "987d6f71-eb52-48ca-94b0-5fe59f8a2e96", "sourceId": "918e6770-bb8d-4de2-bdc3-dec17f737a4a", "quoteExcerpt": null, "note": null }, { "flagId": "5adfbe2d-fa68-4dcb-9e50-20ba30118bcd", "sourceId": "918e6770-bb8d-4de2-bdc3-dec17f737a4a", "quoteExcerpt": null, "note": null }, { "flagId": "0fc9ee37-2104-4a12-9cb7-abaa8ba243cf", "sourceId": "918e6770-bb8d-4de2-bdc3-dec17f737a4a", "quoteExcerpt": null, "note": null }, { "flagId": "881d7ced-a053-4242-92ca-564135d2a8eb", "sourceId": "f048226a-ad79-49ac-a5f7-ca2311c4e0e2", "quoteExcerpt": null, "note": null }, { "flagId": "a19f84b6-3dbc-4ed9-bc1f-e7a3e712578b", "sourceId": "9d992b04-869a-42b4-8543-acef3cb8942e", "quoteExcerpt": null, "note": null }, { "flagId": "0792ae34-e915-4292-8f30-0c4815499674", "sourceId": "7005703a-985e-4503-8389-0e81b9f7f624", "quoteExcerpt": null, "note": null }, { "flagId": "335e051f-615e-4b5f-857a-eea34f9f64dc", "sourceId": "bd822159-9d37-4b66-8b9b-db8473a6bcba", "quoteExcerpt": null, "note": null }, { "flagId": "bc3ca942-66f3-4c2e-bba8-9057516abc9c", "sourceId": "7005703a-985e-4503-8389-0e81b9f7f624", "quoteExcerpt": null, "note": null }, { "flagId": "4be245c3-64a7-42b5-81ac-2ab2a1e400bd", "sourceId": "7005703a-985e-4503-8389-0e81b9f7f624", "quoteExcerpt": null, "note": null }, { "flagId": "f3c16a46-3e2a-4d85-b00e-103f771d537f", "sourceId": "7005703a-985e-4503-8389-0e81b9f7f624", "quoteExcerpt": null, "note": null }, { "flagId": "7be801a3-e26b-4d4a-9bf5-0f27e8d58ccb", "sourceId": "24324270-3177-40e1-b52a-24851ab32b64", "quoteExcerpt": null, "note": null }, { "flagId": "96804586-b162-449a-b0f7-4ae8f70f2153", "sourceId": "abb8f64f-1db2-497f-86ec-0461ffc9315e", "quoteExcerpt": null, "note": null }, { "flagId": "07e30fbf-0309-4820-ab03-c3158c411576", "sourceId": "abb8f64f-1db2-497f-86ec-0461ffc9315e", "quoteExcerpt": null, "note": null }, { "flagId": "b08e7ab9-9642-4194-b324-8f84faca2578", "sourceId": "abb8f64f-1db2-497f-86ec-0461ffc9315e", "quoteExcerpt": null, "note": null }, { "flagId": "ca450e2f-9d45-416c-ab17-83a4e6181821", "sourceId": "d5012c06-4a66-4b88-98ab-0a608664f1c7", "quoteExcerpt": null, "note": null }, { "flagId": "3f444934-562b-41e5-9478-8f5b6f48b225", "sourceId": "e15ede03-8142-4a56-b29e-741751b4f53d", "quoteExcerpt": null, "note": null }, { "flagId": "5ff1b2fe-ce57-4d45-9508-757722934cb4", "sourceId": "46774117-9f5a-4a25-b6f5-6eeb2f25c232", "quoteExcerpt": null, "note": null }, { "flagId": "f1741000-b12b-43ca-b8d2-f220242f2062", "sourceId": "d110fd53-2fc9-4cea-900d-6592e0627df9", "quoteExcerpt": null, "note": null }, { "flagId": "1ae56fe4-fd92-4930-a1ad-7bca01bc5867", "sourceId": "e15ede03-8142-4a56-b29e-741751b4f53d", "quoteExcerpt": null, "note": null }, { "flagId": "7e384adb-947a-4434-9a76-2cb3127c01fa", "sourceId": "46774117-9f5a-4a25-b6f5-6eeb2f25c232", "quoteExcerpt": null, "note": null }, { "flagId": "b5fddd30-2e5f-4f29-a6a7-467bdccc93d7", "sourceId": "257c0e56-9103-4a2d-962e-4e4d595c3cc0", "quoteExcerpt": null, "note": null }, { "flagId": "40b04250-470e-4eaf-9f6c-36138fd81ef8", "sourceId": "10ffac12-72d6-4458-b356-690f23d367fb", "quoteExcerpt": null, "note": null }, { "flagId": "53eae637-b6a7-4c36-a493-f96d71523174", "sourceId": "10222a18-9b17-4736-846f-470e6a80f53a", "quoteExcerpt": null, "note": null }, { "flagId": "e9eb42bb-fc78-4b22-a852-1389e5c7980b", "sourceId": "1aebb6b0-1709-43bc-9000-6d3e1dc88a70", "quoteExcerpt": null, "note": null }, { "flagId": "df37c463-c474-4d27-9f7b-beaa8786000c", "sourceId": "2f37c3ed-1297-48a8-8bda-ca7bb84bd212", "quoteExcerpt": null, "note": null }, { "flagId": "e49d389c-5d5b-4286-b137-f909d58ba9ff", "sourceId": "2f37c3ed-1297-48a8-8bda-ca7bb84bd212", "quoteExcerpt": null, "note": null }, { "flagId": "eae85dde-bc60-4689-b472-53aa624f9c98", "sourceId": "39f2b2bd-03e6-47f8-986e-13a30a7598ae", "quoteExcerpt": null, "note": null }, { "flagId": "eae85dde-bc60-4689-b472-53aa624f9c98", "sourceId": "471ac829-a954-49ba-8710-afc1236e574d", "quoteExcerpt": null, "note": null }, { "flagId": "d6cc1556-aab2-451e-a098-cfe06b0ea5b7", "sourceId": "2f37c3ed-1297-48a8-8bda-ca7bb84bd212", "quoteExcerpt": null, "note": null }, { "flagId": "e932c291-2e65-4b4b-9ae2-2f11518ff7a2", "sourceId": "83263373-8b9e-4c0b-af94-348fbf6ad382", "quoteExcerpt": null, "note": null }, { "flagId": "e932c291-2e65-4b4b-9ae2-2f11518ff7a2", "sourceId": "cb81ce04-fe44-44ea-b586-5c42d5073a77", "quoteExcerpt": null, "note": null }, { "flagId": "edc54c62-4985-44d1-84ea-403c89832b3d", "sourceId": "2f37c3ed-1297-48a8-8bda-ca7bb84bd212", "quoteExcerpt": null, "note": null }, { "flagId": "3048488f-c91d-4a3c-8748-995d4a06fb18", "sourceId": "83263373-8b9e-4c0b-af94-348fbf6ad382", "quoteExcerpt": null, "note": null }, { "flagId": "ff48e42f-ea9b-42dd-8724-a8442fa2148c", "sourceId": "39f2b2bd-03e6-47f8-986e-13a30a7598ae", "quoteExcerpt": null, "note": null }, { "flagId": "ff48e42f-ea9b-42dd-8724-a8442fa2148c", "sourceId": "83263373-8b9e-4c0b-af94-348fbf6ad382", "quoteExcerpt": null, "note": null }, { "flagId": "ac91086e-1d15-4a74-9262-b9f0e08c88b3", "sourceId": "83263373-8b9e-4c0b-af94-348fbf6ad382", "quoteExcerpt": null, "note": null }, { "flagId": "37cf877f-5bad-4e33-ad33-8f8ac7ee4d39", "sourceId": "3e5d7f2c-dd8f-4c20-8956-cbda3cef43d2", "quoteExcerpt": null, "note": null }, { "flagId": "c91c643a-1e1e-4a73-b3b3-fe4f889c7c84", "sourceId": "cb81ce04-fe44-44ea-b586-5c42d5073a77", "quoteExcerpt": null, "note": null }, { "flagId": "5b9ae708-9060-48a5-a9f3-56872f05f503", "sourceId": "3e5d7f2c-dd8f-4c20-8956-cbda3cef43d2", "quoteExcerpt": null, "note": null }, { "flagId": "dfd4b415-9abb-47d7-bf6a-569090bbe5c3", "sourceId": "7b0b0c3f-29e1-42c0-a1b5-a791e30732f7", "quoteExcerpt": null, "note": null }, { "flagId": "cff55397-822c-4521-bf33-aa23e33055a0", "sourceId": "7b0b0c3f-29e1-42c0-a1b5-a791e30732f7", "quoteExcerpt": null, "note": null }, { "flagId": "0c674d48-eb97-420c-9bcb-b7403db10367", "sourceId": "7d0afd36-0141-48b3-86ca-65c0ac9fba19", "quoteExcerpt": null, "note": null }, { "flagId": "0c674d48-eb97-420c-9bcb-b7403db10367", "sourceId": "290d41e6-c189-49be-92b5-23ffa9aff3c2", "quoteExcerpt": null, "note": null }, { "flagId": "114dd278-f9b1-4e96-8135-3abb7410c766", "sourceId": "28ab8cfd-5832-4452-953b-db5dbb439010", "quoteExcerpt": null, "note": null }, { "flagId": "114dd278-f9b1-4e96-8135-3abb7410c766", "sourceId": "5edd573e-dc36-4ec3-91c0-f8331433810b", "quoteExcerpt": null, "note": null }, { "flagId": "9d020eeb-948e-4637-8800-067511b55399", "sourceId": "b945b00d-2d8d-4146-960b-83409067a465", "quoteExcerpt": null, "note": null }, { "flagId": "9d020eeb-948e-4637-8800-067511b55399", "sourceId": "88cf4f44-370d-4c36-bd1b-a1c9091bbc6c", "quoteExcerpt": null, "note": null }, { "flagId": "f5c7d008-6b4f-485d-a12a-0a53c03be368", "sourceId": "93a5b651-dcd4-4629-a5ab-572ae6f1993d", "quoteExcerpt": null, "note": null }, { "flagId": "c3f489ed-854d-47a9-b0b8-9205c9040b36", "sourceId": "ca985ea2-9f3d-4280-a758-a82db9f4bfb9", "quoteExcerpt": null, "note": null }, { "flagId": "2646299a-f3f0-4d34-a8c4-176af5524d03", "sourceId": "93a5b651-dcd4-4629-a5ab-572ae6f1993d", "quoteExcerpt": null, "note": null }, { "flagId": "2646299a-f3f0-4d34-a8c4-176af5524d03", "sourceId": "66207585-f0d5-47e4-a6e0-4d730323d255", "quoteExcerpt": null, "note": null }, { "flagId": "a2a8cf43-daab-4723-be60-4d483c36d5ea", "sourceId": "93a5b651-dcd4-4629-a5ab-572ae6f1993d", "quoteExcerpt": null, "note": null }, { "flagId": "96abcb8a-b0a4-4a84-b32b-45cc130754d0", "sourceId": "ca985ea2-9f3d-4280-a758-a82db9f4bfb9", "quoteExcerpt": null, "note": null }, { "flagId": "d7e87977-2a6c-4d36-bcad-d0be93db0e51", "sourceId": "f8385d45-9100-45fc-b658-9b0a0c67cfa7", "quoteExcerpt": null, "note": null }, { "flagId": "84c1d13f-867d-4d1c-adcd-659980417c6c", "sourceId": "f8385d45-9100-45fc-b658-9b0a0c67cfa7", "quoteExcerpt": null, "note": null }, { "flagId": "5028bb4f-9fbf-4690-ad93-391f9f8a8c30", "sourceId": "93a5b651-dcd4-4629-a5ab-572ae6f1993d", "quoteExcerpt": null, "note": null }, { "flagId": "54944873-2233-4bb0-a34f-a51157c42b4c", "sourceId": "8b406577-42fc-4863-94f1-7bb17334f076", "quoteExcerpt": null, "note": null }, { "flagId": "391e850a-6748-4c0d-b95d-ef9e89e1ab8c", "sourceId": "b945b00d-2d8d-4146-960b-83409067a465", "quoteExcerpt": null, "note": null }, { "flagId": "806fc006-54df-4bae-9200-9ee9a7dce02f", "sourceId": "ab8b8c36-e946-40a9-bbc5-fc32dd18a699", "quoteExcerpt": null, "note": null }, { "flagId": "2cf75abe-7e97-4161-86a8-4b6ce30b7358", "sourceId": "755a5736-a718-4bce-86a1-4c2bba457d59", "quoteExcerpt": null, "note": null }, { "flagId": "09a0e838-066e-4313-b6d0-4f736169807b", "sourceId": "ab8b8c36-e946-40a9-bbc5-fc32dd18a699", "quoteExcerpt": null, "note": null }, { "flagId": "1c6eef2a-49e3-4e88-9de6-a889fed6583e", "sourceId": "8d489154-e8ce-4e2e-b93c-433d125a8a84", "quoteExcerpt": null, "note": null }, { "flagId": "49babefc-8b9d-4f33-8cc3-8c97c2344c1d", "sourceId": "8d489154-e8ce-4e2e-b93c-433d125a8a84", "quoteExcerpt": null, "note": null }, { "flagId": "71a4b559-0a6e-4c76-9eb0-9b09393ff9f5", "sourceId": "d55b202e-fbdb-4f23-a88d-c6458ea6917b", "quoteExcerpt": null, "note": null }, { "flagId": "2845f6b6-5666-4353-9220-180088c04154", "sourceId": "7c464e18-7937-47df-8ce4-dd39d69c36aa", "quoteExcerpt": null, "note": null }, { "flagId": "7ad2a5c3-2efc-43ad-ac22-3a9bb3a2262b", "sourceId": "7bf452a7-950a-483d-b41f-e7bf1e52c873", "quoteExcerpt": null, "note": null }, { "flagId": "64cd10e2-1412-460f-a390-bc218c2746a5", "sourceId": "969c1856-7df5-41c7-a236-8365ccf33b68", "quoteExcerpt": null, "note": null }, { "flagId": "14397647-4867-432f-a02e-4562b0d7285d", "sourceId": "ff21d7b9-ca69-4640-87f3-dc62d2a1df2e", "quoteExcerpt": null, "note": null }, { "flagId": "1c6d4d21-e58c-4383-9001-f044f2b36312", "sourceId": "4e19142a-f8e1-457f-89b5-ef01bbd42222", "quoteExcerpt": null, "note": null }, { "flagId": "3e520148-7995-4644-a33d-f2f53ffbbcbc", "sourceId": "26b05aca-314a-4076-9f2b-f3fe88403a0a", "quoteExcerpt": null, "note": null }, { "flagId": "dd38497f-9428-4200-82a3-6411f26f3526", "sourceId": "ff21d7b9-ca69-4640-87f3-dc62d2a1df2e", "quoteExcerpt": null, "note": null }, { "flagId": "b81121f5-c0a4-4c79-b3a2-3ea44c43f232", "sourceId": "897aef27-9d50-4779-8286-0460028a927a", "quoteExcerpt": null, "note": null }, { "flagId": "a400949c-3b2e-4c20-b948-24d42bbc76c6", "sourceId": "3ed13c70-803c-4cea-9ea2-2fa39f19b355", "quoteExcerpt": null, "note": null }, { "flagId": "296972eb-0dcd-4cc8-b819-37fce8d3b0c0", "sourceId": "101413b1-3040-4bca-ad66-e435b96d1271", "quoteExcerpt": null, "note": null }, { "flagId": "9a8eb041-301f-4cec-98cb-388f520ff079", "sourceId": "b1d57b95-9ab0-4ecf-a3b5-c868fa2c75c0", "quoteExcerpt": null, "note": null }, { "flagId": "1da9600e-b59a-4074-96e3-315e1c08a84f", "sourceId": "03f08fa3-7951-43d8-96c3-e4a7d0b58615", "quoteExcerpt": null, "note": null }, { "flagId": "ebd73245-6bce-4a8b-9a93-5d1022a6b685", "sourceId": "3c91f030-b74d-4291-8f87-20539767e534", "quoteExcerpt": null, "note": null }, { "flagId": "9bab0c95-403c-4767-97dc-e498636a26af", "sourceId": "03f08fa3-7951-43d8-96c3-e4a7d0b58615", "quoteExcerpt": null, "note": null }, { "flagId": "63e5a5a8-3624-497f-9478-d49535cdd28e", "sourceId": "3d831dc4-2643-4946-a193-13fa2aef23ec", "quoteExcerpt": null, "note": null }, { "flagId": "4a8917c8-566e-4649-946e-cbff63986fac", "sourceId": "3f299c96-af5f-462e-b0dd-cca1278906fd", "quoteExcerpt": null, "note": null }, { "flagId": "9ef8bfed-e45c-409e-a3d4-0acfec66a96c", "sourceId": "3d831dc4-2643-4946-a193-13fa2aef23ec", "quoteExcerpt": null, "note": null }, { "flagId": "12a564cf-2afb-4469-b2c9-e2719aa79323", "sourceId": "87355840-a496-4c04-b979-4a2a59b3e88f", "quoteExcerpt": null, "note": null }, { "flagId": "dbc3df71-e703-4ebf-a235-5989b79d7907", "sourceId": "a5d35b17-c251-4c8c-9e7e-1ea1796dc8e2", "quoteExcerpt": null, "note": null }, { "flagId": "28cceeff-761c-4cf6-a640-aa2150f0e333", "sourceId": "3d831dc4-2643-4946-a193-13fa2aef23ec", "quoteExcerpt": null, "note": null }, { "flagId": "b4762a62-cfa9-4a12-a5ca-c24de4015dcb", "sourceId": "a5d35b17-c251-4c8c-9e7e-1ea1796dc8e2", "quoteExcerpt": null, "note": null }, { "flagId": "4dbf1d76-c911-4194-99da-80a570d0adf0", "sourceId": "577aaa7d-4980-4bf0-98ec-8a7ffbe0f171", "quoteExcerpt": null, "note": null }, { "flagId": "9d12f42a-7220-42bb-b27d-6041d2a8171f", "sourceId": "4b972565-3f4b-4c2a-a1bf-b6d6cdd0d417", "quoteExcerpt": null, "note": null }, { "flagId": "8b082f5b-1ea5-4430-bcc7-f8fd7f87feb2", "sourceId": "4b972565-3f4b-4c2a-a1bf-b6d6cdd0d417", "quoteExcerpt": null, "note": null }, { "flagId": "c4e89709-0e17-48bc-b2f9-1514ec832077", "sourceId": "ca1b11c2-1624-41da-b953-361985bba240", "quoteExcerpt": null, "note": null }, { "flagId": "b30c5736-fa3f-40de-8f8a-b47e02a3bd2a", "sourceId": "04b9f3e6-5081-4ada-aac7-0b17fd4d8255", "quoteExcerpt": null, "note": null }, { "flagId": "f94fd852-aa53-4ccf-a5d7-26620f0db593", "sourceId": "4df95067-afa9-4a22-b274-2bcb1e2a5526", "quoteExcerpt": null, "note": null }, { "flagId": "93d909d7-78b9-4de3-b6a3-0f2f536fa208", "sourceId": "04b9f3e6-5081-4ada-aac7-0b17fd4d8255", "quoteExcerpt": null, "note": null }, { "flagId": "acdda824-b951-4d1a-88d8-dc87f632c5d5", "sourceId": "8dc57ff7-1583-44c6-a031-0a53da8b3a16", "quoteExcerpt": null, "note": null }, { "flagId": "75ffee9b-6682-408f-a2f6-6237f893a5eb", "sourceId": "13e4fbe1-4cba-49f2-9d6e-a6a0b01faa83", "quoteExcerpt": null, "note": null }, { "flagId": "ebabaa72-b18e-4eb4-9a11-cee85082a9cc", "sourceId": "ca0463d1-d92a-495a-84e9-036ee1e864e9", "quoteExcerpt": null, "note": null }, { "flagId": "ebabaa72-b18e-4eb4-9a11-cee85082a9cc", "sourceId": "c829c806-736d-4e0d-ad65-f02a5bf24701", "quoteExcerpt": null, "note": null }, { "flagId": "3b0f073f-4a6d-4f03-ada3-88cad1452753", "sourceId": "26b12618-e4b2-4764-87d2-892268852df4", "quoteExcerpt": null, "note": null }, { "flagId": "793a4eb5-2559-4f3c-a660-f5b64a460228", "sourceId": "d110fd53-2fc9-4cea-900d-6592e0627df9", "quoteExcerpt": null, "note": null }, { "flagId": "ea49b33a-ad1a-4e85-af91-f1ea95f42694", "sourceId": "b6388951-4152-4c61-9d48-0b68a4709936", "quoteExcerpt": null, "note": null }, { "flagId": "bc7a16c6-2589-4856-928f-5b66b5480fd5", "sourceId": "0832212a-d67d-489a-8037-63d20c9dbf0d", "quoteExcerpt": null, "note": null }, { "flagId": "7a3d6126-38fb-4680-a9f7-ac784f32d4f9", "sourceId": "f911c800-82a0-4518-b348-2c34e19db2fd", "quoteExcerpt": null, "note": null }, { "flagId": "afabacba-f531-4fde-9920-df7b2c9ba0b8", "sourceId": "dd6a83d5-8aa9-4fb0-9730-80e4319a11a8", "quoteExcerpt": null, "note": null }, { "flagId": "2c216968-41e1-42a2-82c7-adc0b0a1e753", "sourceId": "1aebb6b0-1709-43bc-9000-6d3e1dc88a70", "quoteExcerpt": null, "note": null }, { "flagId": "45715455-83d7-455d-a713-bc1b15ea9427", "sourceId": "563faa8b-b9ca-4012-becb-6a0617ebef58", "quoteExcerpt": null, "note": null }, { "flagId": "7bf93aeb-596b-4250-aa65-ebbc5006f9a8", "sourceId": "563faa8b-b9ca-4012-becb-6a0617ebef58", "quoteExcerpt": null, "note": null }, { "flagId": "7bf93aeb-596b-4250-aa65-ebbc5006f9a8", "sourceId": "eb27bafc-5299-41da-986d-5f894d414c62", "quoteExcerpt": null, "note": null }, { "flagId": "b6922ae9-83aa-4715-9b7e-ad358e712d6a", "sourceId": "c7f34d4e-347a-4d7a-85a4-24dcf05c3bd6", "quoteExcerpt": null, "note": null }, { "flagId": "b6922ae9-83aa-4715-9b7e-ad358e712d6a", "sourceId": "13dd159a-b9e7-4b92-8699-6f5ca1a8276f", "quoteExcerpt": null, "note": null }, { "flagId": "4ff7d5de-462d-4185-b5d7-fd54d558c3f7", "sourceId": "be2143da-bfd8-417a-9e89-64859a937d91", "quoteExcerpt": null, "note": null }, { "flagId": "c2c36bf2-25b9-480a-ad51-5672968aea14", "sourceId": "a33bcac2-e751-4c75-895e-793a8e4a1690", "quoteExcerpt": null, "note": null }, { "flagId": "82839d1a-d040-418f-954f-6994d6129bd6", "sourceId": "73a3bf49-4236-4bd8-b118-a5f00253fe75", "quoteExcerpt": null, "note": null }, { "flagId": "bb0bb7d9-69ae-449c-b605-40f91cf037af", "sourceId": "a33bcac2-e751-4c75-895e-793a8e4a1690", "quoteExcerpt": null, "note": null }, { "flagId": "f95c27de-fecd-4f19-83d7-286403ed798d", "sourceId": "b37410ca-7edd-4329-ab85-3c607a384f1c", "quoteExcerpt": null, "note": null }, { "flagId": "32861b6f-af64-4edc-acdf-134b6cede344", "sourceId": "b37410ca-7edd-4329-ab85-3c607a384f1c", "quoteExcerpt": null, "note": null }, { "flagId": "d6c8a001-cef7-44bc-bf3e-d9e5dd9853d7", "sourceId": "b37410ca-7edd-4329-ab85-3c607a384f1c", "quoteExcerpt": null, "note": null }, { "flagId": "d6c8a001-cef7-44bc-bf3e-d9e5dd9853d7", "sourceId": "4d7fab36-cee9-4104-a13a-d30dbd315014", "quoteExcerpt": null, "note": null }, { "flagId": "a7ff79f1-f522-44a0-96f6-e90c3c8933a3", "sourceId": "b37410ca-7edd-4329-ab85-3c607a384f1c", "quoteExcerpt": null, "note": null }, { "flagId": "92560b0b-376e-4a27-86be-f06d0218d4bd", "sourceId": "e9f932cc-55ac-4164-b626-7a6316ad80bd", "quoteExcerpt": null, "note": null }, { "flagId": "730b371d-d714-481e-8924-82c5c857340a", "sourceId": "7cd0d3e2-ac1c-4b98-8152-0a215ba04ae3", "quoteExcerpt": null, "note": null }, { "flagId": "d5f844d2-a8ea-4549-b0e3-28ecf1971508", "sourceId": "b37410ca-7edd-4329-ab85-3c607a384f1c", "quoteExcerpt": null, "note": null }, { "flagId": "b58e3c79-29a1-47f4-a214-fcee21525339", "sourceId": "c6f3ebdb-f228-4f4e-8181-a5da7a0fa0b8", "quoteExcerpt": null, "note": null }, { "flagId": "b58e3c79-29a1-47f4-a214-fcee21525339", "sourceId": "0143ba28-e3b9-4bfb-ab03-1c38dc3b465b", "quoteExcerpt": null, "note": null }, { "flagId": "661af12a-857c-44c0-b068-8a2d7a83e190", "sourceId": "c6f3ebdb-f228-4f4e-8181-a5da7a0fa0b8", "quoteExcerpt": null, "note": null }, { "flagId": "b9c99c5d-c81d-4564-8f38-7bdb4c196c8b", "sourceId": "8899df8d-f1f2-411d-a52a-0656407a79d8", "quoteExcerpt": null, "note": null }, { "flagId": "b9c99c5d-c81d-4564-8f38-7bdb4c196c8b", "sourceId": "d55b202e-fbdb-4f23-a88d-c6458ea6917b", "quoteExcerpt": null, "note": null }, { "flagId": "6f4c15eb-21a8-4a72-b150-2d4a81e9357d", "sourceId": "3cc27b92-97fb-44e8-8293-c2c5cf469ce5", "quoteExcerpt": null, "note": null }, { "flagId": "863a981d-a326-46d5-9ef9-bbfb17cbd909", "sourceId": "30f2260e-bbc0-4d5d-b812-1a23ba8331c9", "quoteExcerpt": null, "note": null }, { "flagId": "aab0dbb5-240f-4ba5-9e1d-a5ba7b9a2285", "sourceId": "c18b1136-95f6-4342-a498-d9fa706659f0", "quoteExcerpt": null, "note": null }, { "flagId": "f49aa537-8beb-4eb0-8696-144f87d0e31f", "sourceId": "39a66e85-d280-47b6-931c-a0d97bf95fb6", "quoteExcerpt": null, "note": null }, { "flagId": "f8e39476-842b-489e-9be5-413512323cc3", "sourceId": "dd6a83d5-8aa9-4fb0-9730-80e4319a11a8", "quoteExcerpt": null, "note": null }, { "flagId": "728c22f5-6dc3-45c2-8aaf-87a6564fcd22", "sourceId": "60ab5e9c-031e-4682-bafa-bf5647dbc2f9", "quoteExcerpt": null, "note": null }, { "flagId": "0f4beab1-9b4a-48f3-b9ff-2d9c08b78f49", "sourceId": "48841360-2fb9-4284-9d0a-edb25d6d58c4", "quoteExcerpt": null, "note": null }, { "flagId": "0f4beab1-9b4a-48f3-b9ff-2d9c08b78f49", "sourceId": "8361d726-3afb-4b20-8d4d-d502cc8a0e01", "quoteExcerpt": null, "note": null }, { "flagId": "47c0e25d-bdcd-4c20-bab1-088aa86573e1", "sourceId": "46774117-9f5a-4a25-b6f5-6eeb2f25c232", "quoteExcerpt": null, "note": null }, { "flagId": "5c61fca1-2473-4791-a885-b476ce84a6d0", "sourceId": "3bcf071e-1678-4111-a302-6974277c6736", "quoteExcerpt": null, "note": null }, { "flagId": "4a927754-b093-4021-9666-3edb6a4d4ade", "sourceId": "71ae9e87-e789-4d1c-91e6-307dd2f95194", "quoteExcerpt": null, "note": null }, { "flagId": "4a927754-b093-4021-9666-3edb6a4d4ade", "sourceId": "0832212a-d67d-489a-8037-63d20c9dbf0d", "quoteExcerpt": null, "note": null }, { "flagId": "7cd1157d-922a-4719-aef8-70a9ab0bbd5c", "sourceId": "43069c61-1e10-4aad-9218-39d14a7bbb77", "quoteExcerpt": null, "note": null }, { "flagId": "e4ec136f-122e-4126-a601-e9b391c4cd23", "sourceId": "f015ad50-a24a-4650-97de-8ccfb79358f9", "quoteExcerpt": null, "note": null }, { "flagId": "4fea36d0-b49b-4cf2-ba19-5d561c742d06", "sourceId": "46b181e0-61a9-4fe3-bba0-3dd49fb76f49", "quoteExcerpt": null, "note": null }, { "flagId": "88183020-7316-4af2-8a1a-a5249bd7466c", "sourceId": "65119f5c-23f8-42f3-918c-dc019ff41213", "quoteExcerpt": null, "note": null }, { "flagId": "eede73b7-6c67-4442-8639-7bb06f945244", "sourceId": "50e6d4db-6893-45a5-a2c2-63647738c128", "quoteExcerpt": null, "note": null }, { "flagId": "eede73b7-6c67-4442-8639-7bb06f945244", "sourceId": "933da49f-8c26-47f0-820c-5cb5e3a2dceb", "quoteExcerpt": null, "note": null }, { "flagId": "8fb23537-1200-471e-97b7-ff21ceaee55e", "sourceId": "76a171b4-639a-427b-aa5e-91267acf2a16", "quoteExcerpt": null, "note": null }, { "flagId": "db7ef2c7-6022-4f6e-8819-cd5cb21d0ba6", "sourceId": "50e6d4db-6893-45a5-a2c2-63647738c128", "quoteExcerpt": null, "note": null }, { "flagId": "ba507bcf-0a91-4076-8762-3d5d44016945", "sourceId": "69adfcb2-1b9f-4878-a4d0-2fa8c94ab502", "quoteExcerpt": null, "note": null }, { "flagId": "b24a8afd-c16b-42f2-be96-a66e2f689af7", "sourceId": "d60c2c19-7289-43fa-9cf4-b2f87419634c", "quoteExcerpt": null, "note": null }, { "flagId": "505872d0-0d73-42cb-bd19-d7e2766e3879", "sourceId": "e7c2a8bf-a932-4394-a550-cba5dd5250c0", "quoteExcerpt": null, "note": null }, { "flagId": "cf9037b2-c3a5-40b4-ab3b-204a549ca14c", "sourceId": "50e6d4db-6893-45a5-a2c2-63647738c128", "quoteExcerpt": null, "note": null }, { "flagId": "06e948ed-1567-4a4d-a5af-31321794b4eb", "sourceId": "50e6d4db-6893-45a5-a2c2-63647738c128", "quoteExcerpt": null, "note": null }, { "flagId": "35d3b046-49c9-4843-8aff-2ecd36154b9c", "sourceId": "4bbc1e68-1d7e-4b06-b1fb-51e052c0f648", "quoteExcerpt": null, "note": null }, { "flagId": "35d3b046-49c9-4843-8aff-2ecd36154b9c", "sourceId": "6109924d-5aa3-4069-b5a9-707aea1df423", "quoteExcerpt": null, "note": null }, { "flagId": "190d0619-808c-4be5-bfd3-2a0ae02c0174", "sourceId": "8b3ea33a-7610-4bc6-98b7-4d10e89b145c", "quoteExcerpt": null, "note": null }, { "flagId": "51d8475a-651f-432c-860b-f2458ac3df75", "sourceId": "d55b202e-fbdb-4f23-a88d-c6458ea6917b", "quoteExcerpt": null, "note": null }, { "flagId": "c29c6258-cde0-4c03-9c19-298beb7fe231", "sourceId": "029535fe-ace0-4dd3-94f0-ebd92ab6969c", "quoteExcerpt": null, "note": null }, { "flagId": "4c930c09-ece5-4b24-9474-8c9c690355e7", "sourceId": "0832212a-d67d-489a-8037-63d20c9dbf0d", "quoteExcerpt": null, "note": null }, { "flagId": "3684caf4-ea0d-447a-b2c2-d545560ee88d", "sourceId": "39a66e85-d280-47b6-931c-a0d97bf95fb6", "quoteExcerpt": null, "note": null }, { "flagId": "1300be27-9039-45c0-ab48-105fa2637352", "sourceId": "dd6a83d5-8aa9-4fb0-9730-80e4319a11a8", "quoteExcerpt": null, "note": null }, { "flagId": "50d5cf08-b975-4978-af7d-c5383448c649", "sourceId": "8eb98b44-b228-4ea0-be68-e37fa4fd8558", "quoteExcerpt": null, "note": null }, { "flagId": "fb786b2d-7892-4bd5-b4af-ba37c627d9ca", "sourceId": "b9156cce-91af-491b-b694-62489c62cf9a", "quoteExcerpt": null, "note": null }, { "flagId": "fb786b2d-7892-4bd5-b4af-ba37c627d9ca", "sourceId": "9e863608-bafe-4bed-a34e-d8e41b0b0d77", "quoteExcerpt": null, "note": null }, { "flagId": "e68e3585-71f6-4180-a2d7-6938805116eb", "sourceId": "b8a6ef2a-2636-4594-a900-e1170d4ad0ca", "quoteExcerpt": null, "note": null }, { "flagId": "17590942-174e-4038-9b94-a383c204638c", "sourceId": "b54918fa-2863-4dec-bd3c-97a4c817433f", "quoteExcerpt": null, "note": null }, { "flagId": "264276a2-50cb-455c-82a7-03e5c71860b6", "sourceId": "c08f5089-a30b-43cf-aaa7-85e24032a72b", "quoteExcerpt": null, "note": null }, { "flagId": "d521af0b-4953-4097-9eca-c33e3d74e258", "sourceId": "ebc57c51-d374-4b72-adf5-42c1f028823b", "quoteExcerpt": null, "note": null }, { "flagId": "9c528efd-d891-49e3-a3e7-b9b8eb0d6c13", "sourceId": "b54918fa-2863-4dec-bd3c-97a4c817433f", "quoteExcerpt": null, "note": null }, { "flagId": "a5252eb3-4e55-4f23-b5bf-0a576f065b79", "sourceId": "e10de82f-b93c-4121-b3e7-eea2c66e0e24", "quoteExcerpt": null, "note": null }, { "flagId": "08580dd2-9f02-4984-bc18-88a2aeedb7b4", "sourceId": "b8a6ef2a-2636-4594-a900-e1170d4ad0ca", "quoteExcerpt": null, "note": null }, { "flagId": "4f8958a4-6fa2-46c2-9d79-7b9e125a2b66", "sourceId": "fc3285ca-f528-4866-a892-0737fdaa1d1a", "quoteExcerpt": null, "note": null }, { "flagId": "f5f03791-38ef-464f-9b60-df1e498bb636", "sourceId": "94c094dc-4fc3-459b-8c28-b2a386455b11", "quoteExcerpt": null, "note": null }, { "flagId": "7dd8c9a0-9764-4758-a943-bac037cfcd2a", "sourceId": "7e038ba4-c203-42b0-9afb-6024c1262e9b", "quoteExcerpt": null, "note": null }, { "flagId": "995155e4-f4e0-4cdd-8b7c-f628105d0f26", "sourceId": "94c094dc-4fc3-459b-8c28-b2a386455b11", "quoteExcerpt": null, "note": null }, { "flagId": "017ea3dc-52d0-4e25-9834-5f49336af965", "sourceId": "0e28517b-1ea9-4b87-b72e-82cd974563c4", "quoteExcerpt": null, "note": null }, { "flagId": "5e4c924b-fe81-45e0-9c41-237dde624ea4", "sourceId": "94c094dc-4fc3-459b-8c28-b2a386455b11", "quoteExcerpt": null, "note": null }, { "flagId": "7e7953c9-5d6d-40ce-ade7-919dba2ee283", "sourceId": "2ce2b129-1294-42d8-8e12-6dfa63c81b29", "quoteExcerpt": null, "note": null }, { "flagId": "81e6017e-1d4b-4520-b152-30b030cdda32", "sourceId": "37021124-5f3d-4600-91da-313c14a7b337", "quoteExcerpt": null, "note": null }, { "flagId": "81e6017e-1d4b-4520-b152-30b030cdda32", "sourceId": "7b21618f-32a6-49a7-870e-161f256665ae", "quoteExcerpt": null, "note": null }, { "flagId": "88528eda-5d79-44f5-84ee-b442332f3df1", "sourceId": "37021124-5f3d-4600-91da-313c14a7b337", "quoteExcerpt": null, "note": null }, { "flagId": "d6070181-057d-4e31-ae51-2f8983c6f862", "sourceId": "c96e4b7f-1881-43d2-b7a6-1af293e9663b", "quoteExcerpt": null, "note": null }, { "flagId": "a6ae9658-4537-450f-89b8-9bf8b2514c6f", "sourceId": "a8fec1c1-3f31-487f-b5ef-64a70bd221c4", "quoteExcerpt": null, "note": null }, { "flagId": "75dfdac9-12e2-44e5-a0d7-c8e90d0c268d", "sourceId": "cb1aa451-ca9f-4518-87b0-076344e885bd", "quoteExcerpt": null, "note": null }, { "flagId": "f15a31d0-9bf1-4d4c-87d3-84dc24604d2b", "sourceId": "6c4c3e6b-e8b6-48aa-84f8-c784e627900d", "quoteExcerpt": null, "note": null }, { "flagId": "e4f442a6-0792-481c-9f90-e4911a0cfc16", "sourceId": "849cbaf1-a73c-406e-9f08-330bab90941b", "quoteExcerpt": null, "note": null }, { "flagId": "33b53493-97d1-4952-b690-04edd6fd24a8", "sourceId": "1c4836b3-016a-4012-b275-a3624b6bcd8f", "quoteExcerpt": null, "note": null }, { "flagId": "f5c28403-bea3-41d7-b559-f581f9f3d23a", "sourceId": "15d8b9eb-cc08-4a6e-9584-b2aa0d36487d", "quoteExcerpt": null, "note": null }, { "flagId": "7c0d9e3b-8e4d-4050-b9a2-c9dd41495255", "sourceId": "15d8b9eb-cc08-4a6e-9584-b2aa0d36487d", "quoteExcerpt": null, "note": null }, { "flagId": "4905013d-c681-4624-b018-14a2157919c5", "sourceId": "1992b69d-22aa-4264-87b6-c2f4780aec82", "quoteExcerpt": null, "note": null }, { "flagId": "14d77119-ec09-4e61-8708-db5534f664fe", "sourceId": "00bee3b0-deb4-42be-b938-28fcc254f9b1", "quoteExcerpt": null, "note": null }, { "flagId": "f9ce16ad-30db-49bf-921d-a5b4c908e98f", "sourceId": "fb274feb-4297-4f13-81f1-b86c83823049", "quoteExcerpt": null, "note": null }, { "flagId": "3ac45944-3e30-4d7d-a88b-34b627175283", "sourceId": "d1eb9891-8530-4aff-b4e6-fa3794926592", "quoteExcerpt": null, "note": null }, { "flagId": "62e1502b-5b0e-482e-9816-7c658cdad8fa", "sourceId": "79f18415-81b2-40d7-b109-4762a9a1f658", "quoteExcerpt": null, "note": null }, { "flagId": "1d6a9e26-4313-4f7b-a4a4-85c0e1f89295", "sourceId": "6bcb747d-aba6-49c7-b7a2-8ef4c4fcacc3", "quoteExcerpt": null, "note": null }, { "flagId": "e73bfb2d-e94d-49ce-a534-a4511ad0994c", "sourceId": "1e87328d-ea12-4c82-bcce-e62d66d616b2", "quoteExcerpt": null, "note": null }, { "flagId": "eb0964f0-f51a-4e82-b6d1-c2eae0010d5a", "sourceId": "cceebe79-e4c1-4911-b082-acf2eece2488", "quoteExcerpt": null, "note": null }, { "flagId": "eb0964f0-f51a-4e82-b6d1-c2eae0010d5a", "sourceId": "b3f2e600-e9fa-487d-b9aa-e543468ff3e2", "quoteExcerpt": null, "note": null }, { "flagId": "566d08b3-fbd1-489c-9fb9-19adff2b002b", "sourceId": "818c1fd2-1ce1-40a4-8a46-f99a806be28d", "quoteExcerpt": null, "note": null }, { "flagId": "a0aaf523-954a-464f-9ee6-ecbbf9b2c63b", "sourceId": "a0f5de76-c1b3-459b-89db-3840626ddea7", "quoteExcerpt": null, "note": null }, { "flagId": "18b75ca5-a007-401e-af22-a4db9c93bb12", "sourceId": "a92a773b-2518-4601-b032-accd336c25a0", "quoteExcerpt": null, "note": null }, { "flagId": "13748bc4-659f-4d83-9de8-bdeda240eb3f", "sourceId": "e1932abe-c422-40a5-b5a5-161f840ce902", "quoteExcerpt": null, "note": null }, { "flagId": "9dd241dd-2345-4be0-aef0-ecf339b1575b", "sourceId": "2dcd136b-9f61-480e-88f6-6f5494ba8516", "quoteExcerpt": null, "note": null }, { "flagId": "f69ebe40-ffb9-4c2e-a0d4-dce7462677ea", "sourceId": "fc38fab4-a113-44bd-9411-1866f8c9c2b6", "quoteExcerpt": null, "note": null }, { "flagId": "a793a533-30d8-4fe0-a1e8-f39a87fe6823", "sourceId": "0782c584-3347-427f-bcbf-7d0a5b0a148b", "quoteExcerpt": null, "note": null }, { "flagId": "a793a533-30d8-4fe0-a1e8-f39a87fe6823", "sourceId": "7f02e19b-c90b-4333-b3dd-0d84efd20336", "quoteExcerpt": null, "note": null }, { "flagId": "df8aaf9a-049d-41d3-b26f-ccc8daaf594d", "sourceId": "9d767476-a07f-4078-bae8-f0f587c4b622", "quoteExcerpt": null, "note": null }, { "flagId": "64b39ea5-3fcd-4259-a580-440a4dc9cd15", "sourceId": "30e6b174-3d0d-4416-8aa4-126d1a20c002", "quoteExcerpt": null, "note": null }, { "flagId": "c1b77111-a39b-43ff-9b25-0edcfae8784c", "sourceId": "db9c8bc0-71a3-47d0-8667-41efcccd3fe1", "quoteExcerpt": null, "note": null }, { "flagId": "c1b77111-a39b-43ff-9b25-0edcfae8784c", "sourceId": "d8ca41b0-1f15-4a44-92a7-b3070266b5c9", "quoteExcerpt": null, "note": null }, { "flagId": "05f552a2-939e-43df-9ee3-a1650536272c", "sourceId": "9d767476-a07f-4078-bae8-f0f587c4b622", "quoteExcerpt": null, "note": null }, { "flagId": "1aed1293-3eb4-4527-acd4-98dabf71f863", "sourceId": "f048226a-ad79-49ac-a5f7-ca2311c4e0e2", "quoteExcerpt": null, "note": null }, { "flagId": "d3392363-4444-4eaf-882f-b06f2c3e8245", "sourceId": "b9c30cb8-e9c0-4f84-9e64-5d920d5a571b", "quoteExcerpt": null, "note": null }, { "flagId": "10c10db8-e21b-4685-bd48-c3e59c6442d4", "sourceId": "03af2905-a2df-491e-99be-6ea261502554", "quoteExcerpt": null, "note": null }, { "flagId": "f51e5fce-f71b-4968-9eac-45cc38fa2e15", "sourceId": "0ff34d82-9b02-42e8-9652-bff82f947f23", "quoteExcerpt": null, "note": null }, { "flagId": "5ae7b612-3a11-422d-8ff6-fdd525343b52", "sourceId": "bf32b1fb-1565-46ee-99a9-ba0ba2b82a95", "quoteExcerpt": null, "note": null }, { "flagId": "826d7f30-d1b1-4297-90af-13168dfd6962", "sourceId": "49eb4b60-c3bc-41cc-8e26-0e6054cd3da6", "quoteExcerpt": null, "note": null }, { "flagId": "979ea995-62d8-4ed0-aae0-d6ed70f12213", "sourceId": "bcc97dd8-1a05-4424-9846-ac87bb230c72", "quoteExcerpt": null, "note": null }, { "flagId": "adc370f7-a374-4292-aca0-0478bad36791", "sourceId": "bcc97dd8-1a05-4424-9846-ac87bb230c72", "quoteExcerpt": null, "note": null }, { "flagId": "e32ce397-896b-4475-a8b6-6b8ff38cbacb", "sourceId": "a38a8ed9-7b8d-471d-95dd-f50fbb9a40f9", "quoteExcerpt": null, "note": null }, { "flagId": "95f44ae3-7136-4beb-8e53-a86810d57c85", "sourceId": "e9af7483-0e08-496c-bca0-3bda4dd25a96", "quoteExcerpt": null, "note": null }, { "flagId": "2b76c46f-5c5e-4da0-bb8f-948989a6d5f1", "sourceId": "9cc3211f-58eb-42ac-92ae-ba78dd45f8d1", "quoteExcerpt": null, "note": null }, { "flagId": "538f11ff-d939-4766-a0fe-c595a1c12dbf", "sourceId": "2bcbd0df-8b35-4d0b-ad66-7c2d9fa1cabd", "quoteExcerpt": null, "note": null }, { "flagId": "5fd509b9-23f8-4332-b3ab-887d4ff09b54", "sourceId": "442e14c8-f704-42b3-a388-1542ec319f53", "quoteExcerpt": null, "note": null }, { "flagId": "49199feb-3c82-4252-91af-6d1511bb9933", "sourceId": "9cc3211f-58eb-42ac-92ae-ba78dd45f8d1", "quoteExcerpt": null, "note": null }, { "flagId": "07a2d75c-90d9-4234-a9b5-0f53dc621039", "sourceId": "4ced219e-de40-48e4-951f-1905b5c2b237", "quoteExcerpt": null, "note": null }, { "flagId": "c6fee45f-e092-4edc-97ca-3e115df1493c", "sourceId": "5b7752ea-82d9-40eb-aac6-5e2067adeb98", "quoteExcerpt": null, "note": null }, { "flagId": "449170a9-9925-4739-bdb8-0b991e3b09c6", "sourceId": "3f07e045-a985-4c03-b528-b8758bcf1344", "quoteExcerpt": null, "note": null }, { "flagId": "6dd6463c-aa5d-49cb-8922-6926fda4ed64", "sourceId": "4cfc9ab7-798d-40c6-a687-fe21f6332752", "quoteExcerpt": null, "note": null }, { "flagId": "429a0b29-3814-485e-b6db-6abf807bcec9", "sourceId": "6cde628a-ce03-4b18-886c-10a272f4798a", "quoteExcerpt": null, "note": null }, { "flagId": "429a0b29-3814-485e-b6db-6abf807bcec9", "sourceId": "b605d8c0-c3ad-41f7-87cc-2bd3ba9a7200", "quoteExcerpt": null, "note": null }, { "flagId": "df9d4515-d69c-423f-a2a2-94bf7d26220d", "sourceId": "cea6e737-e2a3-4c3f-b9f7-d133ca897648", "quoteExcerpt": null, "note": null }, { "flagId": "7b1e3a36-2b1c-451f-8c2c-c49a248f131c", "sourceId": "cb07dfc8-dc64-4478-acde-4cdd85bf645c", "quoteExcerpt": null, "note": null }, { "flagId": "805c02ec-3c01-47c6-9cf5-4e4da1707375", "sourceId": "b605d8c0-c3ad-41f7-87cc-2bd3ba9a7200", "quoteExcerpt": null, "note": null }, { "flagId": "805c02ec-3c01-47c6-9cf5-4e4da1707375", "sourceId": "2423ccbb-e766-495a-a57f-baf6a8ee8ed3", "quoteExcerpt": null, "note": null }, { "flagId": "e1750c12-9b66-41fd-9137-962aec106467", "sourceId": "ffb04279-489e-4165-86df-f6baa615e181", "quoteExcerpt": null, "note": null }, { "flagId": "939d3328-a873-4db5-aec5-af6b2e94b9db", "sourceId": "be3f2fbc-9c5e-48b0-84f1-e83ded35795b", "quoteExcerpt": null, "note": null }, { "flagId": "1efdad69-7bcd-4c8c-bbe7-50ecce172284", "sourceId": "ce2864d9-f23d-4765-8ee3-77fb2c1a9909", "quoteExcerpt": null, "note": null }, { "flagId": "6bef610d-fb50-40d2-b463-89c4598aeb46", "sourceId": "67f5fb4d-0cbc-4a7a-906e-f0ca16ad3c9a", "quoteExcerpt": null, "note": null }, { "flagId": "f5f2e0de-9bb1-4e22-85f2-801abcb08ab6", "sourceId": "3b903e65-9e98-46cd-aea8-230dc513bff2", "quoteExcerpt": null, "note": null }, { "flagId": "f5f2e0de-9bb1-4e22-85f2-801abcb08ab6", "sourceId": "4e37d28f-dc55-477c-abe3-a0dd0c9bea2a", "quoteExcerpt": null, "note": null }, { "flagId": "100ecf98-550d-43e0-81b8-50b34fa84e34", "sourceId": "999eb818-c634-48a7-bc7c-d27b728940e0", "quoteExcerpt": null, "note": null }, { "flagId": "4b0385aa-38a1-4e7a-86f5-6231c1f37123", "sourceId": "d6e331da-0d2f-4cd5-8a8b-03b9e53bd1f8", "quoteExcerpt": null, "note": null }, { "flagId": "f1677839-e0e1-448d-8dde-02b48b598669", "sourceId": "f3c64dfe-e65e-4272-8296-bffb87f10734", "quoteExcerpt": null, "note": null }, { "flagId": "3a676463-1278-4ca7-b34e-bf068bd8f82f", "sourceId": "a97c629d-875c-40ed-9b40-a7d8a56fabac", "quoteExcerpt": null, "note": null }, { "flagId": "ac0818b8-e374-4c11-a30a-afaaf45f28e9", "sourceId": "fb274feb-4297-4f13-81f1-b86c83823049", "quoteExcerpt": null, "note": null }, { "flagId": "9b0e79fb-5d9c-4d98-aa97-3b1170414535", "sourceId": "e145eb5f-ccbf-43b9-8789-0740025605f6", "quoteExcerpt": null, "note": null }, { "flagId": "7b54eea9-e9cb-4e4c-b88e-7db9219c9f41", "sourceId": "1ff0cda2-0b53-45b3-99e5-139d45e8cb6a", "quoteExcerpt": null, "note": null }, { "flagId": "ce2b0616-c24a-475b-ab7a-59b3c382b9bc", "sourceId": "ccfa3af4-11fe-4eb3-91f8-934ac22932e9", "quoteExcerpt": null, "note": null }, { "flagId": "ce2b0616-c24a-475b-ab7a-59b3c382b9bc", "sourceId": "a71b5081-b0f2-4ee5-befe-5e63f30acd92", "quoteExcerpt": null, "note": null }, { "flagId": "2bed3224-cc1b-435e-9368-0d1c18b258d9", "sourceId": "9ef0d89e-ce7b-40c9-b9e2-52a727c041c8", "quoteExcerpt": null, "note": null }, { "flagId": "6027d8ff-a8e2-4c5c-8352-b03a13230989", "sourceId": "6b1f3e00-ef48-476f-b23c-eeeed274d356", "quoteExcerpt": null, "note": null }, { "flagId": "2408e3b4-564d-4e5e-8efc-3658104de303", "sourceId": "ce15e5de-6092-4991-8c72-7334595264dd", "quoteExcerpt": null, "note": null }, { "flagId": "c37dc2bb-5094-4499-93bc-0bf2a9ccc404", "sourceId": "03c14840-f4fd-4693-841e-72d4d4c6a69f", "quoteExcerpt": null, "note": null }, { "flagId": "c37dc2bb-5094-4499-93bc-0bf2a9ccc404", "sourceId": "0832212a-d67d-489a-8037-63d20c9dbf0d", "quoteExcerpt": null, "note": null }, { "flagId": "e761bf19-30aa-4496-86d5-a11b081fe77d", "sourceId": "445bec1e-a714-4fc4-99fc-ce385691a196", "quoteExcerpt": null, "note": null }, { "flagId": "d07ae808-288c-4cad-9373-51848c31ad14", "sourceId": "2562830a-6e89-413d-8670-e5b50e0caf14", "quoteExcerpt": null, "note": null }, { "flagId": "662834db-f176-407a-8020-95577fa1a276", "sourceId": "fd4514b1-1d81-4acb-a7a9-c33cad2bd0cf", "quoteExcerpt": null, "note": null }, { "flagId": "0be9d6ef-d2de-4418-a5b2-55fdcfefbd44", "sourceId": "9a052ca6-dca5-47d3-bd5f-482c1cf3d8b5", "quoteExcerpt": null, "note": null }, { "flagId": "8504d1ac-28db-4f65-b1a0-547a54e4186f", "sourceId": "7bf452a7-950a-483d-b41f-e7bf1e52c873", "quoteExcerpt": null, "note": null }, { "flagId": "8504d1ac-28db-4f65-b1a0-547a54e4186f", "sourceId": "4a9cab81-cec2-4039-8ee8-d13a6825fe78", "quoteExcerpt": null, "note": null }, { "flagId": "3363c7e8-be0e-489c-aae0-3a81f28cd791", "sourceId": "7bf452a7-950a-483d-b41f-e7bf1e52c873", "quoteExcerpt": null, "note": null }, { "flagId": "e6fedd3e-d452-43c4-9df9-3b5d5444facd", "sourceId": "d55b202e-fbdb-4f23-a88d-c6458ea6917b", "quoteExcerpt": null, "note": null }, { "flagId": "4e06cbcd-f49d-4ab1-b5f0-af80c0cf7e14", "sourceId": "3b5936f0-d941-4730-a27f-c89ee32a193e", "quoteExcerpt": null, "note": null }, { "flagId": "35a66510-eb95-46a5-ab76-b507a250eb1c", "sourceId": "0832212a-d67d-489a-8037-63d20c9dbf0d", "quoteExcerpt": null, "note": null }, { "flagId": "71c2a71a-7d11-4622-b694-ce149f8dbb8c", "sourceId": "39a66e85-d280-47b6-931c-a0d97bf95fb6", "quoteExcerpt": null, "note": null }, { "flagId": "84413c4e-2c06-4b8e-9030-b6f7fbc85831", "sourceId": "dd6a83d5-8aa9-4fb0-9730-80e4319a11a8", "quoteExcerpt": null, "note": null }, { "flagId": "8d46024e-1946-4885-b59c-0f5c5e824b9b", "sourceId": "f1056792-2691-41a3-a282-53e3ba05bc98", "quoteExcerpt": null, "note": null }, { "flagId": "0dfb273f-c621-47d0-b5db-83418fbf4682", "sourceId": "41ba268d-1dbb-4a92-941d-c350a1f02cc5", "quoteExcerpt": null, "note": null }, { "flagId": "361fe68a-4644-48b2-8039-42cf69c98394", "sourceId": "1a59a34f-5817-4c6e-8d0a-633d7c67effa", "quoteExcerpt": null, "note": null }, { "flagId": "3f655e74-be5e-45d6-9d2b-f515fcb243ca", "sourceId": "41ba268d-1dbb-4a92-941d-c350a1f02cc5", "quoteExcerpt": null, "note": null }, { "flagId": "739c4b58-d0b8-416d-a1a2-73d8976bc212", "sourceId": "f44dcc34-7583-40be-b23e-e35fc94deb09", "quoteExcerpt": null, "note": null }, { "flagId": "5de4bdc0-dfd3-45bd-bf22-3dc2eefab7a6", "sourceId": "5e23688e-498b-4e6e-9894-04145dcdc842", "quoteExcerpt": null, "note": null }, { "flagId": "0510697e-e561-411d-8934-8170f01d6634", "sourceId": "6fccd2cd-6d06-470c-ab58-6f70d5f48438", "quoteExcerpt": null, "note": null }, { "flagId": "5aaf1099-4ba5-4166-9a23-dc59f44bd80f", "sourceId": "dca8dabb-3a69-4bf3-b127-9c0981988e96", "quoteExcerpt": null, "note": null }, { "flagId": "741dbb46-df44-4971-ba74-3cfd43871de8", "sourceId": "24ff3dee-ef70-4a7e-ad63-484695f24b88", "quoteExcerpt": null, "note": null }, { "flagId": "5c5e7777-54af-48f4-adcc-878d91f55f33", "sourceId": "3512f33e-26ce-4be1-9427-1fd8d5e0d19d", "quoteExcerpt": null, "note": null }, { "flagId": "6d797663-252f-4549-893a-7eb6292a714a", "sourceId": "3512f33e-26ce-4be1-9427-1fd8d5e0d19d", "quoteExcerpt": null, "note": null }, { "flagId": "87f05e79-3187-47aa-b578-9ecec5ded36b", "sourceId": "3512f33e-26ce-4be1-9427-1fd8d5e0d19d", "quoteExcerpt": null, "note": null }, { "flagId": "ce18ec06-ea6b-48b9-89ca-d473fe536fd8", "sourceId": "e17d0b88-7cbf-4659-85ca-8c44dcbab283", "quoteExcerpt": null, "note": null }, { "flagId": "b20a1825-9c92-4345-ad87-438e5f4b4f42", "sourceId": "62ac47a9-68eb-41db-ad14-b66998aa0dff", "quoteExcerpt": null, "note": null }, { "flagId": "5f3f25bd-f9ec-4163-808a-5ea76d464dc1", "sourceId": "a38f16a2-18a2-4227-8f70-c49f0a52f5da", "quoteExcerpt": null, "note": null }, { "flagId": "b68987d7-8494-44b7-9231-10055d54d4ed", "sourceId": "62ac47a9-68eb-41db-ad14-b66998aa0dff", "quoteExcerpt": null, "note": null }, { "flagId": "6398c2ec-146f-449b-99b4-372082d1d7c6", "sourceId": "f9820d3d-e7f8-4281-8a8b-3ba99ebf3eb6", "quoteExcerpt": null, "note": null }, { "flagId": "3a4916af-039f-4477-834a-37b0f7976b30", "sourceId": "806918ea-bd67-40c9-b170-f8c339ec23bd", "quoteExcerpt": null, "note": null }, { "flagId": "3dd433a1-1efa-4d5a-8c16-e071aa0d0593", "sourceId": "9e038e3f-3a16-447e-a358-44b6920ef790", "quoteExcerpt": null, "note": null }, { "flagId": "0a16478f-d846-4504-9bb4-2575de5ca18f", "sourceId": "806918ea-bd67-40c9-b170-f8c339ec23bd", "quoteExcerpt": null, "note": null }, { "flagId": "eeea2940-0cd0-4541-baeb-f81169385a0c", "sourceId": "24a6799c-085a-45d8-bf9b-5fd0cb1b8896", "quoteExcerpt": null, "note": null }, { "flagId": "89e25aed-09b8-495b-95d8-5a7065cf10ff", "sourceId": "24a6799c-085a-45d8-bf9b-5fd0cb1b8896", "quoteExcerpt": null, "note": null }, { "flagId": "2673e575-0140-4c93-9a9b-c4329e9bdf89", "sourceId": "4bfd9c8e-3ff6-4cad-8835-debb85b7eff7", "quoteExcerpt": null, "note": null }, { "flagId": "84c26e58-578b-43d1-9b18-33ca2f88285c", "sourceId": "24a6799c-085a-45d8-bf9b-5fd0cb1b8896", "quoteExcerpt": null, "note": null }, { "flagId": "9de931a7-e60b-449d-bf43-fad3def5d488", "sourceId": "4bfd9c8e-3ff6-4cad-8835-debb85b7eff7", "quoteExcerpt": null, "note": null }, { "flagId": "93b8fbc8-7765-4a30-95b4-79597c8bb5e0", "sourceId": "69235eea-ae87-49bb-8014-c192ab0373e7", "quoteExcerpt": null, "note": null }, { "flagId": "26bd7a05-6324-4d02-be8a-196117cde9c3", "sourceId": "5194caba-c58e-4f5c-8f04-57dd9e478e44", "quoteExcerpt": null, "note": null }, { "flagId": "f53fd1d9-2c3e-4f6a-b1d7-627039aaabb4", "sourceId": "1fd5f9a7-2eff-4ada-8c50-05eb36ee0c16", "quoteExcerpt": null, "note": null }, { "flagId": "e20ea1fa-1eb1-4c7e-b409-5b438d580c08", "sourceId": "3be84652-5978-4b0f-bd8a-8ef1dc8435c8", "quoteExcerpt": null, "note": null }, { "flagId": "1929514a-5de2-4415-8b3d-fca42cb7a007", "sourceId": "4bccdb9c-c6dd-4b44-b3e6-70c43d2c4a75", "quoteExcerpt": null, "note": null }, { "flagId": "22c85f99-0186-4cb0-83e7-a38b96dc9021", "sourceId": "7e173650-2d2f-49cc-a678-9b5cdae39f79", "quoteExcerpt": null, "note": null }, { "flagId": "44d26a25-bb4f-4070-9f4c-097ddbab62b6", "sourceId": "75955a43-2f50-4670-933f-18ac164a40f1", "quoteExcerpt": null, "note": null }, { "flagId": "788e8fe5-5a9f-4a42-b436-14b380f811ff", "sourceId": "00519db7-d6b6-436d-9c63-613da15eb45c", "quoteExcerpt": null, "note": null }, { "flagId": "ad2dffce-b7bd-453e-acf9-10643b111883", "sourceId": "2f9bca05-e8b9-4536-8e67-ef49ef1d9bf8", "quoteExcerpt": null, "note": null }, { "flagId": "ad2dffce-b7bd-453e-acf9-10643b111883", "sourceId": "ee53d673-57bc-4108-b8e8-a245d5aa798f", "quoteExcerpt": null, "note": null }, { "flagId": "bd9ed6d5-0ca4-44d6-bb92-870a9679e586", "sourceId": "2f9bca05-e8b9-4536-8e67-ef49ef1d9bf8", "quoteExcerpt": null, "note": null }, { "flagId": "57c7c25c-59a6-436b-8000-0ffafdd39432", "sourceId": "2f9bca05-e8b9-4536-8e67-ef49ef1d9bf8", "quoteExcerpt": null, "note": null }, { "flagId": "57c7c25c-59a6-436b-8000-0ffafdd39432", "sourceId": "e659ea98-4eb6-4514-918d-4a08597de970", "quoteExcerpt": null, "note": null }, { "flagId": "cf2b3f4e-86ed-47d5-8187-0695896d49ea", "sourceId": "ffb04279-489e-4165-86df-f6baa615e181", "quoteExcerpt": null, "note": null }, { "flagId": "6ed8ee08-9647-4297-b8a0-f0f3b80d58f5", "sourceId": "28ae2a9e-0367-437a-b1f1-de5a94797582", "quoteExcerpt": null, "note": null }, { "flagId": "614494cf-6a39-4135-ba46-f5f2dd183344", "sourceId": "ce2864d9-f23d-4765-8ee3-77fb2c1a9909", "quoteExcerpt": null, "note": null }, { "flagId": "3ea167dd-11ad-4b5b-91f4-7299b8c95024", "sourceId": "eeed1457-0953-47e0-a012-1ccb07c52b93", "quoteExcerpt": null, "note": null }, { "flagId": "adba4fa7-be32-430b-a390-528d284253e6", "sourceId": "e15ede03-8142-4a56-b29e-741751b4f53d", "quoteExcerpt": null, "note": null }, { "flagId": "adba4fa7-be32-430b-a390-528d284253e6", "sourceId": "26b12618-e4b2-4764-87d2-892268852df4", "quoteExcerpt": null, "note": null }, { "flagId": "627874f2-fe91-41e5-9665-3be738fc6ebf", "sourceId": "bf3a4c5c-f73f-493b-bc47-ee9739a0f65d", "quoteExcerpt": null, "note": null }, { "flagId": "97ba8548-05d4-46cf-a11d-aefcf43b1344", "sourceId": "d110fd53-2fc9-4cea-900d-6592e0627df9", "quoteExcerpt": null, "note": null }, { "flagId": "9305e27d-47d4-45fa-ab1b-70b2fea01275", "sourceId": "323617ce-9136-481f-a83c-85ce48435426", "quoteExcerpt": null, "note": null }, { "flagId": "5c7d10fc-0181-411a-9ce0-96f5161b5da7", "sourceId": "0832212a-d67d-489a-8037-63d20c9dbf0d", "quoteExcerpt": null, "note": null }, { "flagId": "1ef24c89-e2b0-4ac3-b903-da471cc8be91", "sourceId": "10ffac12-72d6-4458-b356-690f23d367fb", "quoteExcerpt": null, "note": null }, { "flagId": "8172642f-4d14-4166-82c0-81536c21b5be", "sourceId": "ce71fac1-aba4-4709-9eed-ae0d3466170a", "quoteExcerpt": null, "note": null }, { "flagId": "52c19d94-789c-4c45-af28-a6cb11f9ce65", "sourceId": "139cd08d-8ef1-4b33-994e-affebdd938f3", "quoteExcerpt": null, "note": null }, { "flagId": "52c19d94-789c-4c45-af28-a6cb11f9ce65", "sourceId": "1aebb6b0-1709-43bc-9000-6d3e1dc88a70", "quoteExcerpt": null, "note": null }, { "flagId": "f48a83a7-959d-4ac3-bf08-1a4e789c7a24", "sourceId": "e13726b0-ac5a-4319-b3d9-2c9fbfe7b3bd", "quoteExcerpt": "full support for the latest standards including TLS 1.3 and Perfect Forward Secrecy", "note": null }, { "flagId": "cc5e8bed-7675-49db-bfa2-52f8fe2f3cb9", "sourceId": "e13726b0-ac5a-4319-b3d9-2c9fbfe7b3bd", "quoteExcerpt": "We don't offer end-to-end encryption in our own apps", "note": null }, { "flagId": "b45c58cd-a777-40e1-91e8-0e83471e4799", "sourceId": "b0592cdd-6c48-4ad3-8a95-347fa32cced8", "quoteExcerpt": "we do not provide any kind of dragnet access", "note": null }, { "flagId": "44315cb3-7e63-41de-87e7-73e04cab1e51", "sourceId": "b0592cdd-6c48-4ad3-8a95-347fa32cced8", "quoteExcerpt": "requesting the images anonymously on your behalf", "note": null }, { "flagId": "f6e3f751-ec53-4846-a67b-4515f7d6ca93", "sourceId": "b0592cdd-6c48-4ad3-8a95-347fa32cced8", "quoteExcerpt": "Companies have no way of linking different Masked Email addresses together", "note": null }, { "flagId": "b6ce446e-7955-4f3d-8ecd-07c4c69a85f5", "sourceId": "b0592cdd-6c48-4ad3-8a95-347fa32cced8", "quoteExcerpt": "All such access is logged and audited", "note": null }, { "flagId": "eb1caf91-b1fe-4dca-8edf-ac818461d757", "sourceId": "ac32b8e4-4537-433f-b095-0ee8973f70ce", "quoteExcerpt": "Fastmail Pty Ltd, ACN 142 646 580, PO Box 234, Collins St West 8007, Australia", "note": null }, { "flagId": "d4ec4fc0-52d4-44b2-8347-f9185130ffb0", "sourceId": "b0592cdd-6c48-4ad3-8a95-347fa32cced8", "quoteExcerpt": "forbidden (by the Australian Privacy Principles, section 6) from disclosing information to foreign authorities", "note": null }, { "flagId": "456c5b34-71f4-4e73-9b90-82fa36bdc5d6", "sourceId": "b0592cdd-6c48-4ad3-8a95-347fa32cced8", "quoteExcerpt": "Our data transparency report shows how many requests we actioned each year.", "note": null }, { "flagId": "cc0f7ba4-f901-4daa-9b5e-ded3353ea648", "sourceId": "ac32b8e4-4537-433f-b095-0ee8973f70ce", "quoteExcerpt": null, "note": null }, { "flagId": "cc0f7ba4-f901-4daa-9b5e-ded3353ea648", "sourceId": "b0592cdd-6c48-4ad3-8a95-347fa32cced8", "quoteExcerpt": null, "note": null }, { "flagId": "fba516a9-1f64-4e58-822a-d950c7c472e8", "sourceId": "ff30d4d6-5735-4008-96cf-f8d9b43a2e49", "quoteExcerpt": "a wide range of open-source code used by organizations around the world", "note": null }, { "flagId": "22595942-517c-4d97-b299-64853147da50", "sourceId": "ff30d4d6-5735-4008-96cf-f8d9b43a2e49", "quoteExcerpt": "development of JMAP, the next-generation open sync protocol", "note": null }, { "flagId": "22595942-517c-4d97-b299-64853147da50", "sourceId": "e13726b0-ac5a-4319-b3d9-2c9fbfe7b3bd", "quoteExcerpt": "full support for the latest standards including TLS 1.3", "note": null }, { "flagId": "294c594c-c536-4802-a692-22859cd0d788", "sourceId": "ff30d4d6-5735-4008-96cf-f8d9b43a2e49", "quoteExcerpt": "not because it's too hard to get your data out", "note": null }, { "flagId": "d27d86b3-fe3c-476b-89b8-7aacd8fccd54", "sourceId": "e13726b0-ac5a-4319-b3d9-2c9fbfe7b3bd", "quoteExcerpt": "using a third party app to do end-to-end encryption, which we fully support", "note": null }, { "flagId": "d27d86b3-fe3c-476b-89b8-7aacd8fccd54", "sourceId": "ff30d4d6-5735-4008-96cf-f8d9b43a2e49", "quoteExcerpt": "development of JMAP, the next-generation open sync protocol", "note": null }, { "flagId": "3d0cc8f7-0ca6-4f9a-9452-093de41a5156", "sourceId": "ff30d4d6-5735-4008-96cf-f8d9b43a2e49", "quoteExcerpt": "It's secure, private, independent, and has a Gmail transfer tool.", "note": null }, { "flagId": "6ee736b4-088b-44ab-bb74-010c3ad06c41", "sourceId": "ac32b8e4-4537-433f-b095-0ee8973f70ce", "quoteExcerpt": "Fastmail Pty Ltd, ACN 142 646 580", "note": null }, { "flagId": "6ee736b4-088b-44ab-bb74-010c3ad06c41", "sourceId": "ff30d4d6-5735-4008-96cf-f8d9b43a2e49", "quoteExcerpt": "secure, private, independent", "note": null }, { "flagId": "5ae1612e-5962-4179-8141-5f50494e45f0", "sourceId": "ff30d4d6-5735-4008-96cf-f8d9b43a2e49", "quoteExcerpt": "no mining of your personal data, no sharing it with third parties", "note": null }, { "flagId": "db52aa4c-e35c-45bf-a437-f9ad0f024c87", "sourceId": "b0592cdd-6c48-4ad3-8a95-347fa32cced8", "quoteExcerpt": "we do not provide any kind of dragnet access", "note": null }, { "flagId": "54533397-5f26-4ee0-8d50-17235e20453b", "sourceId": "ac32b8e4-4537-433f-b095-0ee8973f70ce", "quoteExcerpt": null, "note": null }, { "flagId": "7969d870-2422-4f97-bc2d-3b9285cff05c", "sourceId": "ff30d4d6-5735-4008-96cf-f8d9b43a2e49", "quoteExcerpt": "stops email becoming just another walled garden", "note": null }, { "flagId": "0c3b4974-816a-475c-85e6-c1d34f28bf03", "sourceId": "da637529-d9aa-4e08-8d33-c7e2a0dd957e", "quoteExcerpt": null, "note": null }, { "flagId": "2dc9815f-292a-4213-9893-1a8d726c2233", "sourceId": "4ef7f1ce-11fd-4c59-9dde-ab65e56d2d62", "quoteExcerpt": null, "note": null }, { "flagId": "2dc9815f-292a-4213-9893-1a8d726c2233", "sourceId": "6e44589d-df87-46df-ba66-6139c706f31e", "quoteExcerpt": null, "note": null }, { "flagId": "c3920288-e62c-48ac-9c24-f2d3649cbb56", "sourceId": "ff30d4d6-5735-4008-96cf-f8d9b43a2e49", "quoteExcerpt": null, "note": null }, { "flagId": "c3920288-e62c-48ac-9c24-f2d3649cbb56", "sourceId": "b0592cdd-6c48-4ad3-8a95-347fa32cced8", "quoteExcerpt": null, "note": null }, { "flagId": "6e254703-a442-4c2d-b9ee-5a25a9622499", "sourceId": "858131f9-2b81-49ad-8901-afd739e80496", "quoteExcerpt": "Data protection and information security are a priority for mailbox.", "note": null }, { "flagId": "ab6f151a-3c9d-4038-934c-3ad374aa7605", "sourceId": "00d080ee-cb2c-4bb7-afd2-2c27486aefc8", "quoteExcerpt": "Your data is stored securely in certified German data centres.", "note": null }, { "flagId": "ab6f151a-3c9d-4038-934c-3ad374aa7605", "sourceId": "41e0eec0-099e-4b6a-94ff-88b9f551f1ce", "quoteExcerpt": null, "note": null }, { "flagId": "90abd5d5-94ae-4ac2-a3d2-f3d5aa537352", "sourceId": "00d080ee-cb2c-4bb7-afd2-2c27486aefc8", "quoteExcerpt": null, "note": null }, { "flagId": "ffe72797-3842-4579-b407-99fc8b8c37c1", "sourceId": "00d080ee-cb2c-4bb7-afd2-2c27486aefc8", "quoteExcerpt": "stored securely in certified German data centres", "note": null }, { "flagId": "cf373389-ed7c-479c-9c74-e8de4d18899c", "sourceId": "9832db2e-a2dc-49aa-8f3b-0ca49acb6667", "quoteExcerpt": "registered at the District Court of Berlin-Charlottenburg", "note": null }, { "flagId": "0df58674-06e6-4e57-9f0f-966125d71039", "sourceId": "9832db2e-a2dc-49aa-8f3b-0ca49acb6667", "quoteExcerpt": null, "note": null }, { "flagId": "0df58674-06e6-4e57-9f0f-966125d71039", "sourceId": "858131f9-2b81-49ad-8901-afd739e80496", "quoteExcerpt": "one request from an authority outside the EU", "note": null }, { "flagId": "5acabef3-050e-42c5-8a3a-67d8c2817594", "sourceId": "00d080ee-cb2c-4bb7-afd2-2c27486aefc8", "quoteExcerpt": "ISO 27001 certification and BSI C5 attestation", "note": null }, { "flagId": "9bbe96ca-525a-4bad-90fd-28e2436c44f5", "sourceId": "858131f9-2b81-49ad-8901-afd739e80496", "quoteExcerpt": "74 official requests for information were sent", "note": null }, { "flagId": "cfef334d-a0de-4421-8ba8-c8ef62cf9efb", "sourceId": "41e0eec0-099e-4b6a-94ff-88b9f551f1ce", "quoteExcerpt": "one of the first providers to secure our domain using DNSSEC and DANE/TLSA", "note": null }, { "flagId": "2cb5e5b3-b0d3-4862-9cad-744f26b79725", "sourceId": "41e0eec0-099e-4b6a-94ff-88b9f551f1ce", "quoteExcerpt": "consistently rely on (EC)DHE algorithms with Perfect Forward Secrecy", "note": null }, { "flagId": "069dc98e-8bfc-4dae-be27-fedfd497df27", "sourceId": "00d080ee-cb2c-4bb7-afd2-2c27486aefc8", "quoteExcerpt": "Custom domain names can be used", "note": null }, { "flagId": "7b4297a1-972a-45bc-b3ea-b5fb6a5b52e9", "sourceId": "00d080ee-cb2c-4bb7-afd2-2c27486aefc8", "quoteExcerpt": null, "note": null }, { "flagId": "e12bb6e9-1795-415e-94c1-ea88547e663e", "sourceId": "00d080ee-cb2c-4bb7-afd2-2c27486aefc8", "quoteExcerpt": null, "note": null }, { "flagId": "cab3023c-1603-4736-bbed-9519f014d607", "sourceId": "00d080ee-cb2c-4bb7-afd2-2c27486aefc8", "quoteExcerpt": null, "note": null }, { "flagId": "68f3c567-525a-4f57-b10e-c75f8ebb6e63", "sourceId": "9832db2e-a2dc-49aa-8f3b-0ca49acb6667", "quoteExcerpt": "mailbox.org is operated by: Heinlein Hosting GmbH", "note": null }, { "flagId": "99e9a718-6db7-432a-b588-516872f536ef", "sourceId": "00d080ee-cb2c-4bb7-afd2-2c27486aefc8", "quoteExcerpt": null, "note": null }, { "flagId": "801ee9ad-f2b5-45c0-9587-6d0463957883", "sourceId": "858131f9-2b81-49ad-8901-afd739e80496", "quoteExcerpt": "Unlawful requests for information are consistently rejected by mailbox.", "note": null }, { "flagId": "21e0c90c-0da6-4a96-94e7-65873129ea0a", "sourceId": "858131f9-2b81-49ad-8901-afd739e80496", "quoteExcerpt": "Data protection and information security are a priority for mailbox.", "note": null }, { "flagId": "cd02e5a3-1b04-460c-8abe-d4a9880ed5b7", "sourceId": "00d080ee-cb2c-4bb7-afd2-2c27486aefc8", "quoteExcerpt": "Powered by green electricity", "note": null }, { "flagId": "d29e578e-0bcf-4ca8-9843-cc9928f1e822", "sourceId": "b0972ef1-fe7a-48d9-871f-6a647ac6df4c", "quoteExcerpt": null, "note": null }, { "flagId": "d29e578e-0bcf-4ca8-9843-cc9928f1e822", "sourceId": "00d080ee-cb2c-4bb7-afd2-2c27486aefc8", "quoteExcerpt": "100 per cent renewable energy", "note": null }, { "flagId": "cb3d04bb-9080-4710-a599-bcff0d2ba843", "sourceId": "858131f9-2b81-49ad-8901-afd739e80496", "quoteExcerpt": null, "note": null }, { "flagId": "cb3d04bb-9080-4710-a599-bcff0d2ba843", "sourceId": "00d080ee-cb2c-4bb7-afd2-2c27486aefc8", "quoteExcerpt": null, "note": null }, { "flagId": "8d5c2c93-a516-432a-9b6d-8bfa39d2bfc2", "sourceId": "858131f9-2b81-49ad-8901-afd739e80496", "quoteExcerpt": null, "note": null }, { "flagId": "8d5c2c93-a516-432a-9b6d-8bfa39d2bfc2", "sourceId": "9832db2e-a2dc-49aa-8f3b-0ca49acb6667", "quoteExcerpt": null, "note": null }, { "flagId": "4859e137-ec55-43b9-924b-10cad00d7214", "sourceId": "00d080ee-cb2c-4bb7-afd2-2c27486aefc8", "quoteExcerpt": "stored securely in certified German data centres", "note": null }, { "flagId": "4859e137-ec55-43b9-924b-10cad00d7214", "sourceId": "41e0eec0-099e-4b6a-94ff-88b9f551f1ce", "quoteExcerpt": null, "note": null }, { "flagId": "62d7236f-39a7-42ad-b413-e6b969fce607", "sourceId": "00d080ee-cb2c-4bb7-afd2-2c27486aefc8", "quoteExcerpt": null, "note": null }, { "flagId": "62d7236f-39a7-42ad-b413-e6b969fce607", "sourceId": "9832db2e-a2dc-49aa-8f3b-0ca49acb6667", "quoteExcerpt": null, "note": null }, { "flagId": "7c5e03c0-06cc-4a66-8fa4-b02d7176c171", "sourceId": "00d080ee-cb2c-4bb7-afd2-2c27486aefc8", "quoteExcerpt": null, "note": null }, { "flagId": "be0025bb-bc71-4eed-8630-3e4c6c7cfb29", "sourceId": "00d080ee-cb2c-4bb7-afd2-2c27486aefc8", "quoteExcerpt": null, "note": null }, { "flagId": "ef1f45d3-6f3b-48a5-a78f-8018650a31c0", "sourceId": "ae5b2e83-4874-41c1-9192-268855948568", "quoteExcerpt": "Datacenter providers we utilize hold international security certifications", "note": null }, { "flagId": "9fef341e-692d-4581-b560-3d250a965482", "sourceId": "ae5b2e83-4874-41c1-9192-268855948568", "quoteExcerpt": "Datacenter providers we utilize hold international security certifications", "note": null }, { "flagId": "9fef341e-692d-4581-b560-3d250a965482", "sourceId": "e87d5515-b8d7-498a-ae86-1b3eac0edc7e", "quoteExcerpt": null, "note": null }, { "flagId": "c3533cbb-9604-4ec4-ade6-e80752dce337", "sourceId": "e87d5515-b8d7-498a-ae86-1b3eac0edc7e", "quoteExcerpt": "abuse reports, complaints or court orders", "note": null }, { "flagId": "c3533cbb-9604-4ec4-ade6-e80752dce337", "sourceId": "ae5b2e83-4874-41c1-9192-268855948568", "quoteExcerpt": null, "note": null }, { "flagId": "622e5748-70d4-4b58-9be1-a25b47be31a1", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": "No proprietary protocols or clients, ever.", "note": null }, { "flagId": "2c81d709-364d-4cc3-b039-4683523af52c", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": null, "note": null }, { "flagId": "2c81d709-364d-4cc3-b039-4683523af52c", "sourceId": "e87d5515-b8d7-498a-ae86-1b3eac0edc7e", "quoteExcerpt": null, "note": null }, { "flagId": "bb1be118-10dc-48da-b9e0-736a8f320b96", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": null, "note": null }, { "flagId": "18414c24-db3b-4810-8097-0ca6527e39e3", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": null, "note": null }, { "flagId": "ebc3c88a-c491-425a-afd7-467870747260", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": null, "note": null }, { "flagId": "3bbff3d7-87a3-444c-848e-8cc68b0d2a84", "sourceId": "ae5b2e83-4874-41c1-9192-268855948568", "quoteExcerpt": null, "note": null }, { "flagId": "3bbff3d7-87a3-444c-848e-8cc68b0d2a84", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": "independent and a profitable company registered in Switzerland", "note": null }, { "flagId": "7036a239-4570-4bf8-983a-c435ba20e6fe", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": "self-funded, independent and a profitable company", "note": null }, { "flagId": "7036a239-4570-4bf8-983a-c435ba20e6fe", "sourceId": "e87d5515-b8d7-498a-ae86-1b3eac0edc7e", "quoteExcerpt": null, "note": null }, { "flagId": "df71fea5-8a27-4927-abaf-cbb3e5ccafdd", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": "serving users worldwide since 2014", "note": null }, { "flagId": "25e56b31-1988-4ce2-8859-5fdc304aadf3", "sourceId": "e87d5515-b8d7-498a-ae86-1b3eac0edc7e", "quoteExcerpt": "terminate service without cause or notice", "note": null }, { "flagId": "b0aa83a6-01ec-45a8-9c01-c6bc14d28264", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": "Our interests align with our users", "note": null }, { "flagId": "b0aa83a6-01ec-45a8-9c01-c6bc14d28264", "sourceId": "e87d5515-b8d7-498a-ae86-1b3eac0edc7e", "quoteExcerpt": "Your complete satisfaction is our number one priority", "note": null }, { "flagId": "b4341dab-3884-4ec9-a760-5933c9019ec4", "sourceId": "9c8e5482-7f01-4fd1-89f8-127b5c795e45", "quoteExcerpt": null, "note": null }, { "flagId": "b4341dab-3884-4ec9-a760-5933c9019ec4", "sourceId": "17e3a790-bab1-473b-8820-3cedb479137d", "quoteExcerpt": null, "note": null }, { "flagId": "79af8bb1-490b-4676-803d-3e27966df8e4", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": null, "note": null }, { "flagId": "79af8bb1-490b-4676-803d-3e27966df8e4", "sourceId": "9c8e5482-7f01-4fd1-89f8-127b5c795e45", "quoteExcerpt": null, "note": null }, { "flagId": "a83a0228-c76a-4f78-989d-d3b5961943de", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": null, "note": null }, { "flagId": "a83a0228-c76a-4f78-989d-d3b5961943de", "sourceId": "ae5b2e83-4874-41c1-9192-268855948568", "quoteExcerpt": null, "note": null }, { "flagId": "a83a0228-c76a-4f78-989d-d3b5961943de", "sourceId": "e87d5515-b8d7-498a-ae86-1b3eac0edc7e", "quoteExcerpt": null, "note": null }, { "flagId": "5506713c-0959-4d7b-aa69-99cc02efa7a7", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": "We do not outsource our support.", "note": null }, { "flagId": "bccd07f3-7bb7-4168-8028-c29380383259", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": null, "note": null }, { "flagId": "bccd07f3-7bb7-4168-8028-c29380383259", "sourceId": "ae5b2e83-4874-41c1-9192-268855948568", "quoteExcerpt": null, "note": null }, { "flagId": "bccd07f3-7bb7-4168-8028-c29380383259", "sourceId": "e87d5515-b8d7-498a-ae86-1b3eac0edc7e", "quoteExcerpt": null, "note": null }, { "flagId": "4d7d8eba-622c-47d5-939b-1a9c830cfd33", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": null, "note": null }, { "flagId": "2174cd1a-c5e7-4bb9-bab8-5ab00cdd7d95", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": "any standard email client with non-obsolete secure communication protocols", "note": null }, { "flagId": "a05541de-4f90-4a38-9b9b-ac5d88e74f6c", "sourceId": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "quoteExcerpt": null, "note": null }, { "flagId": "a05541de-4f90-4a38-9b9b-ac5d88e74f6c", "sourceId": "ae5b2e83-4874-41c1-9192-268855948568", "quoteExcerpt": null, "note": null }, { "flagId": "a05541de-4f90-4a38-9b9b-ac5d88e74f6c", "sourceId": "e87d5515-b8d7-498a-ae86-1b3eac0edc7e", "quoteExcerpt": null, "note": null }, { "flagId": "7bcb2a60-583c-4d76-be66-2948cb1112a9", "sourceId": "0ff34d82-9b02-42e8-9652-bff82f947f23", "quoteExcerpt": "governed by the laws and regulations of Switzerland", "note": null }, { "flagId": "7bcb2a60-583c-4d76-be66-2948cb1112a9", "sourceId": "5df9ba90-3bbc-4027-8503-cb5765a7f1f3", "quoteExcerpt": "reject all requests from foreign authorities", "note": null }, { "flagId": "27990d8f-407c-4eef-b08c-870f5a39c75f", "sourceId": "0ff34d82-9b02-42e8-9652-bff82f947f23", "quoteExcerpt": "designated representative of the Company in the European Union", "note": null }, { "flagId": "9ea11ae0-3550-47f3-86fe-e73873a7878b", "sourceId": "5df9ba90-3bbc-4027-8503-cb5765a7f1f3", "quoteExcerpt": "Number of legal orders: 9,301", "note": null }, { "flagId": "774d0776-7b3e-4dde-912d-c55b431abd07", "sourceId": "0ff34d82-9b02-42e8-9652-bff82f947f23", "quoteExcerpt": "no technical means to access the content of your encrypted emails", "note": null }, { "flagId": "774d0776-7b3e-4dde-912d-c55b431abd07", "sourceId": "5df9ba90-3bbc-4027-8503-cb5765a7f1f3", "quoteExcerpt": "we have no means to decrypt them", "note": null }, { "flagId": "13722368-d1df-47a3-8012-ec547d63a355", "sourceId": "5df9ba90-3bbc-4027-8503-cb5765a7f1f3", "quoteExcerpt": "Contested orders: 988", "note": null }, { "flagId": "5d76b44b-f0e3-45c2-aac9-892860975b8d", "sourceId": "0ff34d82-9b02-42e8-9652-bff82f947f23", "quoteExcerpt": null, "note": null }, { "flagId": "05d023c8-2374-46a4-8a3d-9b404730d7e5", "sourceId": "e3f2db30-dd24-480a-8817-4959a743ca43", "quoteExcerpt": "All our apps are open source and independently audited by security experts", "note": null }, { "flagId": "5d6b7beb-4667-4aba-9940-5dbef5e1348c", "sourceId": "97302903-9282-41ed-bd71-6317fb72b22a", "quoteExcerpt": "Powered by open-source language models and built on Proton's zero-access encryption", "note": null }, { "flagId": "cad23627-8193-401e-afb5-b3207b4c8ea2", "sourceId": "e3f2db30-dd24-480a-8817-4959a743ca43", "quoteExcerpt": null, "note": null }, { "flagId": "3741741f-6f9a-4408-919e-b2a8409fb5a6", "sourceId": "e3f2db30-dd24-480a-8817-4959a743ca43", "quoteExcerpt": "import and encrypt your data from Google, Outlook, or other services", "note": null }, { "flagId": "6c785af1-8b78-4e93-9aec-914311f92525", "sourceId": "0ff34d82-9b02-42e8-9652-bff82f947f23", "quoteExcerpt": "We do not have the technical means to access the content of your encrypted emails", "note": null }, { "flagId": "6c785af1-8b78-4e93-9aec-914311f92525", "sourceId": "e3f2db30-dd24-480a-8817-4959a743ca43", "quoteExcerpt": null, "note": null }, { "flagId": "8fcdfec6-8c49-4a0b-aeb9-a16974f5f2ea", "sourceId": "e3f2db30-dd24-480a-8817-4959a743ca43", "quoteExcerpt": "our primary shareholder is the nonprofit Proton Foundation", "note": null }, { "flagId": "8fcdfec6-8c49-4a0b-aeb9-a16974f5f2ea", "sourceId": "0ff34d82-9b02-42e8-9652-bff82f947f23", "quoteExcerpt": null, "note": null }, { "flagId": "ecc04199-ed56-41b5-9700-a62d534ed7ed", "sourceId": "0ff34d82-9b02-42e8-9652-bff82f947f23", "quoteExcerpt": "governed by the laws and regulations of Switzerland", "note": null }, { "flagId": "93a7ccdc-7cb5-4b20-936f-64bcc0f634be", "sourceId": "e3f2db30-dd24-480a-8817-4959a743ca43", "quoteExcerpt": "Proton has no ads and does not sell your data", "note": null }, { "flagId": "196f785e-d475-417f-adec-9d38b5bb6b8d", "sourceId": "5df9ba90-3bbc-4027-8503-cb5765a7f1f3", "quoteExcerpt": "only legally binding requests are ones from the Swiss authorities", "note": null }, { "flagId": "4b148b26-0bc5-4312-a716-20a319b5fdc7", "sourceId": "e3f2db30-dd24-480a-8817-4959a743ca43", "quoteExcerpt": "All our apps are open source and independently audited", "note": null }, { "flagId": "f8a51161-4cde-4c12-a533-25b6808dade1", "sourceId": "84541acf-f4fb-4d1a-b40c-2bb0ba04e98f", "quoteExcerpt": null, "note": null }, { "flagId": "a37850b9-1ace-4503-91a3-2534aba9d60a", "sourceId": "5df9ba90-3bbc-4027-8503-cb5765a7f1f3", "quoteExcerpt": null, "note": null }, { "flagId": "a37850b9-1ace-4503-91a3-2534aba9d60a", "sourceId": "e3f2db30-dd24-480a-8817-4959a743ca43", "quoteExcerpt": null, "note": null }, { "flagId": "abc4da69-86bd-474a-b2ac-692f1e9c3969", "sourceId": "e3f2db30-dd24-480a-8817-4959a743ca43", "quoteExcerpt": null, "note": null }, { "flagId": "abc4da69-86bd-474a-b2ac-692f1e9c3969", "sourceId": "5df9ba90-3bbc-4027-8503-cb5765a7f1f3", "quoteExcerpt": null, "note": null }, { "flagId": "d3f0fd37-75dc-4c64-9055-7fabbadc49f7", "sourceId": "e3f2db30-dd24-480a-8817-4959a743ca43", "quoteExcerpt": null, "note": null }, { "flagId": "bb148fad-ce30-42e2-9e04-e9d80e68717d", "sourceId": "e3f2db30-dd24-480a-8817-4959a743ca43", "quoteExcerpt": null, "note": null }, { "flagId": "bb148fad-ce30-42e2-9e04-e9d80e68717d", "sourceId": "0ff34d82-9b02-42e8-9652-bff82f947f23", "quoteExcerpt": null, "note": null }, { "flagId": "2c1886a7-8879-469c-85c6-91b6e3e7e7b0", "sourceId": "e3f2db30-dd24-480a-8817-4959a743ca43", "quoteExcerpt": null, "note": null }, { "flagId": "93ddf00c-0195-42ac-97e6-99f1d262c352", "sourceId": "1992414a-7bd9-4bdd-9641-cdc49812fe83", "quoteExcerpt": null, "note": null }, { "flagId": "e98a7976-5bad-49b3-a141-20c04c615227", "sourceId": "1992414a-7bd9-4bdd-9641-cdc49812fe83", "quoteExcerpt": null, "note": null }, { "flagId": "54f2d202-2613-44a4-9ddf-4b22c5b20b1c", "sourceId": "a82bd54a-da00-47bf-b909-9777467cceb9", "quoteExcerpt": null, "note": null }, { "flagId": "ae8d3030-50cc-421b-8580-fab746953c13", "sourceId": "b6b9261b-e809-4b46-8118-63aa362f255d", "quoteExcerpt": null, "note": null }, { "flagId": "0e982ddb-1858-4380-b887-eb6869aa2916", "sourceId": "fcdb82d9-c1b9-48e2-b911-d41e68028772", "quoteExcerpt": null, "note": null }, { "flagId": "afdfd627-a6ff-4d73-a738-68dd0c71f5a9", "sourceId": "0ff34d82-9b02-42e8-9652-bff82f947f23", "quoteExcerpt": null, "note": null }, { "flagId": "ba7a4487-6ba8-4a4b-899d-216830b13eea", "sourceId": "ee509819-6ba9-4388-b503-16cc8fde7488", "quoteExcerpt": null, "note": null }, { "flagId": "55249092-c971-4fc4-99bf-1995b62dfb74", "sourceId": "c3854f66-3ab7-4e33-8bd5-d2d487473aa3", "quoteExcerpt": null, "note": null }, { "flagId": "68fbcf28-ee26-4138-9374-952d07f603b8", "sourceId": "72781e1b-e461-4fbe-9c89-5e520f6b8204", "quoteExcerpt": null, "note": null }, { "flagId": "2af0e517-2ca7-4458-857b-ea53fcdbc947", "sourceId": "ca3d5b2a-2aa0-415b-972a-a0029f29b3a5", "quoteExcerpt": null, "note": null }, { "flagId": "9c319e84-09f9-4a5e-a9be-1c05fcbf98ed", "sourceId": "72781e1b-e461-4fbe-9c89-5e520f6b8204", "quoteExcerpt": null, "note": null }, { "flagId": "3e6cbc36-369a-4634-be64-049966dd6583", "sourceId": "72781e1b-e461-4fbe-9c89-5e520f6b8204", "quoteExcerpt": null, "note": null }, { "flagId": "e7c281f3-887c-403d-b1c2-f59644857b7f", "sourceId": "e15ede03-8142-4a56-b29e-741751b4f53d", "quoteExcerpt": null, "note": null }, { "flagId": "cce38ac4-bee1-4c71-a475-f72c3ad7672a", "sourceId": "8e0eb2e9-cf09-4546-8549-fb5a1ae233b2", "quoteExcerpt": null, "note": null }, { "flagId": "2dc45b07-efc5-43d0-97be-d1a0368014ff", "sourceId": "2767227f-970a-41b1-bd71-ea0ffde657d0", "quoteExcerpt": null, "note": null }, { "flagId": "f3844de8-9182-4cad-966a-3f017d75ce2f", "sourceId": "0ff34d82-9b02-42e8-9652-bff82f947f23", "quoteExcerpt": null, "note": null }, { "flagId": "07ebae92-f2e3-4646-80cd-1c69a0ef785f", "sourceId": "2767227f-970a-41b1-bd71-ea0ffde657d0", "quoteExcerpt": null, "note": null }, { "flagId": "e9b18766-080c-4751-952a-3eb932685c22", "sourceId": "058f4393-64ce-4582-bb71-7b1b62c41ae7", "quoteExcerpt": null, "note": null }, { "flagId": "aa945111-2e25-4b1b-84f1-838ab8caa3fc", "sourceId": "6685ab12-c258-489f-bdb4-4f221ad89727", "quoteExcerpt": null, "note": null }, { "flagId": "4454e966-8457-42d3-9869-704d0e0f3081", "sourceId": "058f4393-64ce-4582-bb71-7b1b62c41ae7", "quoteExcerpt": null, "note": null }, { "flagId": "be798f74-3736-488a-893a-735fbdefd088", "sourceId": "8b23cf61-00e4-4fd1-81e6-b5319a13cfaa", "quoteExcerpt": null, "note": null }, { "flagId": "a0a0214f-3d1d-4030-ad31-05c9b83181a1", "sourceId": "e81f57cc-3fbc-468a-97f5-2922ec8c8af5", "quoteExcerpt": null, "note": null }, { "flagId": "1b08c420-2588-4e08-bee8-b28c7172fd88", "sourceId": "48d77edd-b7dc-4abc-b981-15aa6e2c1c0f", "quoteExcerpt": null, "note": null }, { "flagId": "f2b2c078-9557-460c-b769-15ba84762f04", "sourceId": "0676c5bd-ec95-4a58-9f09-c2413e26d74e", "quoteExcerpt": null, "note": null } ], "sources": [ { "id": "5df9ba90-3bbc-4027-8503-cb5765a7f1f3", "url": "https://proton.me/legal/transparency", "title": "Transparency report | Proton", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "97302903-9282-41ed-bd71-6317fb72b22a", "url": "https://proton.me/blog/lumo-security-model", "title": "Lumo security model: How Proton makes AI private | Proton", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "e3f2db30-dd24-480a-8817-4959a743ca43", "url": "https://proton.me", "title": "Proton: Privacy by default", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "0c557629-f851-4a06-9b79-7175c7fb9999", "url": "https://signal.org", "title": "Signal Messenger: Speak Freely", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "60fc4922-a5a5-494f-8938-b931df6c5c0e", "url": "https://api.thegreenwebfoundation.org/api/v3/greencheck/signal.org", "title": "Green Web Foundation — signal.org", "kind": "dataset-greenweb", "publisher": null, "publishedAt": null }, { "id": "6e44589d-df87-46df-ba66-6139c706f31e", "url": "https://blog.cloudflare.com/the-climate-and-cloudflare/", "title": "Blog post - The Climate and Cloudflare", "kind": "unknown", "publisher": null, "publishedAt": null }, { "id": "4ef7f1ce-11fd-4c59-9dde-ab65e56d2d62", "url": "https://media.greenweb.org/uploads/Cloudflare_2023_Emissions_Inventory.pdf", "title": "Cloudflare 2023 Emissions Inventory", "kind": "unknown", "publisher": null, "publishedAt": null }, { "id": "ff30d4d6-5735-4008-96cf-f8d9b43a2e49", "url": "https://www.fastmail.com/", "title": "Email and calendar made better", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "41e0eec0-099e-4b6a-94ff-88b9f551f1ce", "url": "https://mailbox.org/en/security/", "title": "Email encryption: Best protection for your data", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ae5b2e83-4874-41c1-9192-268855948568", "url": "https://migadu.com/privacy/", "title": "Privacy Policy, Data Processing and Protection", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "9af88c04-edb4-4565-b7d9-b4a20b318c45", "url": "https://migadu.com/", "title": "The Missing Email Service For Domains", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "4705e8f6-08df-4a09-8072-e302aa997ce8", "url": "https://posteo.de/en/site/privacy", "title": "Email green, secure, simple and ad-free - posteo.de", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "e0916afc-d166-49f6-9cba-ebaa481c30b5", "url": "https://posteo.de/en", "title": "Email green, secure, simple and ad-free", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "7ecadb60-0803-49b2-92cd-bcb1fc9d37b4", "url": "https://posteo.de/en/site/transparency_report", "title": "Email green, secure, simple and ad-free - posteo.de", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "820c88a1-c23e-4dc5-803a-bb4e044009e9", "url": "https://posteo.de/site/security_transparency", "title": "E-Mail grün, sicher, einfach und werbefrei - posteo.de", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ecbe8ce5-2478-4f0a-9568-69092dab36d5", "url": "https://api.thegreenwebfoundation.org/api/v3/greencheck/posteo.de", "title": "Green Web Foundation — posteo.de", "kind": "dataset-greenweb", "publisher": null, "publishedAt": null }, { "id": "18c2bdb0-a8b4-41cf-8a9b-bcf6fdb18965", "url": "https://www.inet.de/", "title": "Our Webpage", "kind": "unknown", "publisher": null, "publishedAt": null }, { "id": "55c57815-fc54-476b-a00d-aa50ff20b3cd", "url": "https://tuta.com/", "title": "Tuta: Turn ON privacy for free with secure emails, calendars & contacts | Tuta", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "cfd218ed-f9e0-4b3a-9fe6-6a7a3d87ff84", "url": "https://tuta.com/security", "title": "Security at Tuta | Tuta", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "6685ab12-c258-489f-bdb4-4f221ad89727", "url": "https://tuta.com/privacy", "title": "Same experience, better privacy. | Tuta", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "4f023639-efde-4a86-b8b3-d40e01b1302c", "url": "https://tuta.com/terms", "title": "Terms and Conditions | Tuta", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "628e2a8e-e5ae-419a-af05-bc56e2a7b790", "url": "https://api.thegreenwebfoundation.org/api/v3/greencheck/tuta.com", "title": "Green Web Foundation — tuta.com", "kind": "dataset-greenweb", "publisher": null, "publishedAt": null }, { "id": "d9c17eac-5776-4672-8457-091afdd31af8", "url": "https://web.archive.org/web/20231107092327/https://tuta.com/pricing", "title": "Wayback snapshot 20231107092327", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "75b678be-ccb3-462a-b65e-11edbe562480", "url": "https://web.archive.org/web/20231201130803/https://tuta.com/pricing", "title": "Wayback snapshot 20231201130803", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "9152e711-98c5-41d6-95c1-e62072e5f716", "url": "https://web.archive.org/web/20240102002731/https://tuta.com/pricing", "title": "Wayback snapshot 20240102002731", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "599f0c57-4410-49cc-9468-bde755a46e47", "url": "https://web.archive.org/web/20240202151347/https://tuta.com/pricing", "title": "Wayback snapshot 20240202151347", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "9c83e182-8037-495f-8b6d-5bab135b62f6", "url": "https://web.archive.org/web/20240301173749/https://tuta.com/pricing/", "title": "Wayback snapshot 20240301173749", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "bf20d73f-f7d4-43e3-8869-5abb6e979dda", "url": "https://web.archive.org/web/20240403200343/https://tuta.com/pricing", "title": "Wayback snapshot 20240403200343", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "95471540-2d40-4195-a026-c879b16f68fb", "url": "https://web.archive.org/web/20240521081319/https://tuta.com/pricing", "title": "Wayback snapshot 20240521081319", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "2f1d8459-c2cc-4a93-8a29-d9eb23ef73eb", "url": "https://web.archive.org/web/20240603172022/https://tuta.com/pricing", "title": "Wayback snapshot 20240603172022", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "ca700e20-f18b-416a-a771-5980362ea3e0", "url": "https://web.archive.org/web/20240713035231/https://tuta.com/pricing", "title": "Wayback snapshot 20240713035231", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "9ec40efa-746c-4218-b9dd-de2da86f6d5f", "url": "https://web.archive.org/web/20240809092118/https://tuta.com/pricing", "title": "Wayback snapshot 20240809092118", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "563cce98-c11e-40c0-a5b5-12e47811e0b9", "url": "https://web.archive.org/web/20240909211734/https://tuta.com/pricing", "title": "Wayback snapshot 20240909211734", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "9f99c187-d4df-4628-b152-3be7d4b03564", "url": "https://web.archive.org/web/20241002210300/https://tuta.com/pricing", "title": "Wayback snapshot 20241002210300", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "a0914b81-e8d2-4cd8-a5dc-8dead6343a17", "url": "https://cryptpad.org/", "title": "CryptPad.org", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "17e3a790-bab1-473b-8820-3cedb479137d", "url": "https://corporate.ovhcloud.com/sites/default/files/2024-11/ovh_urd_2024_en_mel_24_11_18.pdf", "title": "Universal Registration Document - Fiscal Year 2024", "kind": "unknown", "publisher": null, "publishedAt": null }, { "id": "a3bb55a6-fd38-45fd-80a1-e3c1076d7c7b", "url": "https://api.thegreenwebfoundation.org/api/v3/greencheck/cryptpad.org", "title": "Green Web Foundation — cryptpad.org", "kind": "dataset-greenweb", "publisher": null, "publishedAt": null }, { "id": "a9f74185-5bf8-40a5-9ffa-44d69661f560", "url": "https://www.dropbox.com/privacy", "title": "Privacy Policy - Dropbox", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "e30db3dc-93f6-44f1-99d1-189f8a5af6de", "url": "https://www.dropbox.com/transparency", "title": "Home", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "40f28a5c-17d3-4906-a065-3dd6205310c7", "url": "https://www.dropbox.com/", "title": "Dropbox.com", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "051f03e1-9a96-4f33-9249-1060bd5dbcd8", "url": "https://www.dropbox.com/features/cloud-storage/photos", "title": "Cloud Photo Storage and Secure Online Backup - Dropbox", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "27aedb50-e59b-4379-9c9e-0bed414d0f16", "url": "https://www.dropbox.com/features/security", "title": "Secure Dropbox Storage for Your Files and Data - Dropbox", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "26eff636-4190-4cf0-b971-c23a09e405f0", "url": "https://api.thegreenwebfoundation.org/api/v3/greencheck/www.dropbox.com", "title": "Green Web Foundation — www.dropbox.com", "kind": "dataset-greenweb", "publisher": null, "publishedAt": null }, { "id": "48d77edd-b7dc-4abc-b981-15aa6e2c1c0f", "url": "https://nextcloud.com/", "title": "Nextcloud - Open source content collaboration platform", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "e22a7719-ba15-4552-a228-b4aece314412", "url": "https://nextcloud.com/privacy/", "title": "Privacy - Nextcloud", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "f6aa7aca-e52e-4cae-8441-375f4201cd4d", "url": "https://nextcloud.com/security/", "title": "Security in Nextcloud", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "13d509b2-c625-4da9-b64e-7338513f3fc8", "url": "https://nextcloud.com/legal", "title": "Nextcloud - Open source content collaboration platform", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "496fe931-e9db-4f1d-95a2-93b138861480", "url": "https://api.thegreenwebfoundation.org/api/v3/greencheck/nextcloud.com", "title": "Green Web Foundation — nextcloud.com", "kind": "dataset-greenweb", "publisher": null, "publishedAt": null }, { "id": "139e44c7-5b3f-4d82-8731-0426e1530033", "url": "https://www.hetzner.com/unternehmen/nachhaltigkeit/", "title": "Sustainability page", "kind": "unknown", "publisher": null, "publishedAt": null }, { "id": "b95fa691-1579-46f4-a423-cc87ab2e2a40", "url": "https://media.greenweb.org/uploads/Hetzner-Finland-Oy-HydroGoO-Diploma-25-26_FfGBnqO.pdf", "title": "Renewable Energy Certificates - Finland", "kind": "unknown", "publisher": null, "publishedAt": null }, { "id": "a2e81598-9496-46cb-83f7-5a99b04be150", "url": "https://cdn.hetzner.com/assets/downloads/Certificate_EMAS_EN_Hetzner.jpg", "title": "EMAS Certfificate - Germany", "kind": "unknown", "publisher": null, "publishedAt": null }, { "id": "356563bc-d0c7-4019-a0da-dc5bf0d522dc", "url": "https://media.greenweb.org/uploads/Zertifikat_ISO14001_Hetzner_20250729_EN_eK.pdf", "title": "ISO14001:2015", "kind": "unknown", "publisher": null, "publishedAt": null }, { "id": "4a75e068-8255-4d04-b78f-aa5fff080c90", "url": "https://web.archive.org/web/20210516064810/https://nextcloud.com/pricing/", "title": "Wayback snapshot 20210516064810", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "a15aac5b-4463-4041-8bf5-97b9396f9dc8", "url": "https://web.archive.org/web/20210609174841/https://nextcloud.com/pricing/", "title": "Wayback snapshot 20210609174841", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "829df4d1-0ece-4409-b432-81f01a4e088d", "url": "https://web.archive.org/web/20210713095745/https://nextcloud.com/pricing/", "title": "Wayback snapshot 20210713095745", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "26496d4d-5cba-4383-b050-884b08beecaf", "url": "https://web.archive.org/web/20210815023442/https://nextcloud.com/pricing/", "title": "Wayback snapshot 20210815023442", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "96f70e54-2b45-40d2-90b7-bab9042d9e82", "url": "https://web.archive.org/web/20210913140933/https://nextcloud.com/pricing/", "title": "Wayback snapshot 20210913140933", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "8d364365-b2f0-4609-a549-8cd61cc87bce", "url": "https://web.archive.org/web/20211006082253/https://nextcloud.com/pricing/", "title": "Wayback snapshot 20211006082253", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "8275ba88-aeb8-4145-8cc5-b8b776350ec8", "url": "https://web.archive.org/web/20211109075652/https://nextcloud.com/pricing/", "title": "Wayback snapshot 20211109075652", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "3f91dc04-22f4-4142-a8af-a0a1208072f0", "url": "https://web.archive.org/web/20220118161938/https://nextcloud.com/pricing/", "title": "Wayback snapshot 20220118161938", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "15d562e7-1b4b-42d3-a619-e45c0823403a", "url": "https://web.archive.org/web/20220322002204/https://nextcloud.com/pricing/", "title": "Wayback snapshot 20220322002204", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "d8ced437-3ce8-4e70-bd19-63094cb3eb5e", "url": "https://web.archive.org/web/20220419172436/https://nextcloud.com/pricing/", "title": "Wayback snapshot 20220419172436", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "265f8a85-166d-4cb1-b11d-61fa84215142", "url": "https://web.archive.org/web/20220503124146/https://nextcloud.com/Pricing/", "title": "Wayback snapshot 20220503124146", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "f5cda6c1-a20e-4d48-be12-b3a80fea782c", "url": "https://web.archive.org/web/20220601070151/https://nextcloud.com/Pricing/", "title": "Wayback snapshot 20220601070151", "kind": "wayback", "publisher": null, "publishedAt": null }, { "id": "b393c7ed-8175-4d67-a653-b5a20a521522", "url": "https://api.thegreenwebfoundation.org/api/v3/greencheck/drive.google.com", "title": "Green Web Foundation — drive.google.com", "kind": "dataset-greenweb", "publisher": null, "publishedAt": null }, { "id": "5a92225f-b06e-4ea6-b1f1-a5ddb0a504d7", "url": "https://www.gstatic.com/gumdrop/sustainability/google-2024-environmental-report.pdf", "title": "Google 2024 Environmental Report", "kind": "unknown", "publisher": null, "publishedAt": null }, { "id": "7e44f0e6-3372-43d7-8242-e92472e6f9f4", "url": "https://services.google.com/fh/files/misc/3degrees_cloud_services_review_statement_final.pdf", "title": "3Degrees Cloud Services Review Statement", "kind": "unknown", "publisher": null, "publishedAt": null }, { "id": "57687988-594b-44a4-99bb-f1574766b205", "url": "https://www.gstatic.com/gumdrop/sustainability/alphabet-fy2023-environmental-indicators-assurance-letter.pdf", "title": "Alphabet FY2023 Environmental Indicators Assurance Letter", "kind": "unknown", "publisher": null, "publishedAt": null }, { "id": "e980bb83-e3ae-46da-ad38-b5a3d0be06eb", "url": "https://www.gstatic.com/gumdrop/sustainability/alphabet-2024-cdp-climate-change-response.pdf", "title": "Alphabet 2024 CDP Climate Change Response", "kind": "unknown", "publisher": null, "publishedAt": null }, { "id": "10ffac12-72d6-4458-b356-690f23d367fb", "url": "https://sustainability.google", "title": "Sustainability at Google", "kind": "unknown", "publisher": null, "publishedAt": null }, { "id": "8f792e02-753c-45b6-8f35-73d3dbc9738d", "url": "https://www.gstatic.com/gumdrop/sustainability/google-2024-supplier-responsibility-report.pdf", "title": "Google 2024 Supplier Responsibility Report.", "kind": "unknown", "publisher": null, "publishedAt": null }, { "id": "9d338aed-3020-4ba6-ad20-936322308692", "url": "https://mail.google.com/", "title": "Gmail", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "98f89fb8-5e5f-441e-a580-48048add7c51", "url": "https://api.thegreenwebfoundation.org/api/v3/greencheck/mail.google.com", "title": "Green Web Foundation — mail.google.com", "kind": "dataset-greenweb", "publisher": null, "publishedAt": null }, { "id": "2c810089-5dbc-4c34-9f74-596343768ae4", "url": "https://api.thegreenwebfoundation.org/api/v3/greencheck/www.microsoft.com", "title": "Green Web Foundation — www.microsoft.com", "kind": "dataset-greenweb", "publisher": null, "publishedAt": null }, { "id": "cece303a-cf3b-4f37-80f7-7132d177d1d9", "url": "https://openai.com/policies/privacy-policy", "title": "OpenAI Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "f2f9f274-66c5-4287-81bf-aacd0486dd87", "url": "https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/9870832", "title": "Garante – Provvedimento contro OpenAI (2023)", "kind": "regulator-finding", "publisher": null, "publishedAt": null }, { "id": "9374ff6e-80bb-4e07-b550-efa2ceb23419", "url": "https://openai.com/research/", "title": "OpenAI Research", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "b0a323da-698d-4513-91a1-f75c34620ba5", "url": "https://openai.com/blog/openai-announces-leadership-transition", "title": "OpenAI Announces Leadership Transition | OpenAI Blog", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ce0ff5bc-c602-44fd-a1a2-ef0d3904d819", "url": "https://openai.com/blog/", "title": "OpenAI Blog", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "a074daad-a2a9-4a44-bfc1-5cea344c648d", "url": "https://openai.com/about", "title": "About OpenAI", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "cef49fe3-d30f-4e25-808c-9d0120b425a8", "url": "https://brave.com/privacy-features/", "title": "Privacy Features | Brave Browser", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "b46b392b-a5fa-4f5a-93be-499372b8b6eb", "url": "https://brave.com/rewards-update/", "title": "Brave Rewards Update | Brave Blog", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "8ba1a343-0b81-4efc-8512-6474d3101987", "url": "https://support.brave.com/hc/en-us/articles/360021218111-How-do-I-use-Sync-", "title": "How do I use Sync? | Brave Support", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "644dbd66-e889-44ba-83e4-bc543475ce3f", "url": "https://github.com/brave/sync", "title": "Brave Sync Server | GitHub", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "82786e30-b5c0-4838-a997-ccc7ed875832", "url": "https://github.com/brave/brave-browser", "title": "Brave Browser | GitHub", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "0fe1ffbc-dbda-4c24-b819-ca51fd299c70", "url": "https://blog.mozilla.org/en/mozilla/ceo-brendan-eich-resigns/", "title": "Brendan Eich Steps Down as Mozilla CEO | Mozilla Blog", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "a6846228-3540-4607-b6a5-68b65bf477b6", "url": "https://brave.com/brave-rewards/", "title": "Brave Rewards | Brave Browser", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "6fccd2cd-6d06-470c-ab58-6f70d5f48438", "url": "https://brave.com/about/", "title": "About Brave | Brave Browser", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "6a3239c8-3198-43eb-866c-513472b51d4c", "url": "https://brave.com", "title": "Brave Browser", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "e15ede03-8142-4a56-b29e-741751b4f53d", "url": "https://policies.google.com/privacy", "title": "Google Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "46774117-9f5a-4a25-b6f5-6eeb2f25c232", "url": "https://www.justice.gov/atr/case/us-v-google-llc-1", "title": "U.S. v. Google LLC | US Department of Justice", "kind": "regulator-finding", "publisher": null, "publishedAt": null }, { "id": "d86e8cd3-e349-4f8a-9d8b-27cc4c23bf96", "url": "https://privacysandbox.com", "title": "Privacy Sandbox – Chrome Developers", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "d110fd53-2fc9-4cea-900d-6592e0627df9", "url": "https://transparencyreport.google.com/user-data/overview", "title": "Google Transparency Report – Government Requests for User Data", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "0d42e54b-6405-4e63-97f8-67f2369d17ef", "url": "https://chromium.googlesource.com/chromium/src", "title": "Chromium Source Repository", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "f8112c9a-65c7-4fbc-a2e2-14ac45e3a8bc", "url": "https://developer.chrome.com/docs/extensions/develop/migrate/what-is-mv3", "title": "What is Manifest V3? | Chrome Developers", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "9578845a-cd31-49c7-bf69-cade156963c7", "url": "https://abc.xyz/investor/", "title": "Alphabet Investor Relations", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "10222a18-9b17-4736-846f-470e6a80f53a", "url": "https://about.google", "title": "Google – About Google", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "1aebb6b0-1709-43bc-9000-6d3e1dc88a70", "url": "https://www.google.com/accessibility/", "title": "Google Accessibility", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "4232762c-fad2-4d53-a339-6e9f615466e8", "url": "https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop", "title": "Enhanced Tracking Protection in Firefox | Mozilla Support", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "d2a9e867-9fef-4839-9159-265e4c9ed40c", "url": "https://www.mozilla.org/en-US/privacy/firefox/", "title": "Firefox Privacy Notice | Mozilla", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "9784c328-96a6-4f7f-adbc-c56bc3bc3ff1", "url": "https://assets.mozilla.net/annual-report/2023/mozilla-2023-annual-report.pdf", "title": "Mozilla 2023 Annual Report", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "7f8d5c69-743f-4b5d-b99a-2d3f7fd3dc01", "url": "https://github.com/mozilla/gecko-dev", "title": "Gecko/Firefox Source Code | GitHub", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "522574c4-75f7-445a-b6df-726f65de5638", "url": "https://blog.mozilla.org/addons/2022/05/18/manifest-v3-in-firefox-faq/", "title": "Manifest V3 in Firefox – Frequently Asked Questions | Mozilla", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "f46d1576-1bb3-4117-9233-68e0c4ad9066", "url": "https://www.mozilla.org/en-US/about/governance/", "title": "Mozilla Governance | Mozilla", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "d30f7cd3-e7b3-47fe-a60d-02e10c554cfb", "url": "https://www.mozilla.org/en-US/sustainability/", "title": "Mozilla Sustainability | Mozilla", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ae37ec41-70af-4e60-bd3c-c885c8518837", "url": "https://www.mozilla.org/en-US/about/", "title": "About Mozilla | Mozilla", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "5ec14447-4def-48ee-bf8b-7b06209d9c12", "url": "https://www.mozilla.org/en-US/accessibility/", "title": "Firefox Accessibility | Mozilla", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "acaf8343-dacb-4e25-8575-1c11190afc85", "url": "https://ghost.org/pricing/", "title": "Ghost Pricing | Ghost", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ddbd5e30-8600-476a-b051-86fa40732e3e", "url": "https://ghost.org/privacy/", "title": "Ghost Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "66a752d5-2a32-45fc-8601-c120d0d0da3a", "url": "https://github.com/TryGhost/Ghost", "title": "Ghost CMS – GitHub Repository (MIT licence)", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "e7362686-53a3-4b6b-93f8-704c8a80e00d", "url": "https://ghost.org/blog/", "title": "Ghost Blog – Open Reports", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "2fa8a1dc-6760-46f3-8586-e7f6d55a36e3", "url": "https://ghost.org/about/", "title": "About Ghost | Ghost", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "bbe0a57b-7efa-472a-b108-27f664c8f687", "url": "https://ghost.org/docs/", "title": "Ghost Documentation", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "6e1f918a-5575-41b0-85e5-0e5cc2910e28", "url": "https://wordpress.com/support/getting-started-with-wordpress-com/", "title": "WordPress.com Support – Getting Started", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "725fe69e-bac7-44ff-acb4-33943795f257", "url": "https://automattic.com/privacy/", "title": "Automattic Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "50457275-286e-43f1-8cb2-2318af7ea388", "url": "https://wordpress.com/support/com-vs-org/", "title": "WordPress.com vs WordPress.org | Support", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "cf13ce86-9119-4ddd-a809-e8667462c017", "url": "https://github.com/WordPress/WordPress", "title": "WordPress – GitHub Repository (GPL 2.0)", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "918e6770-bb8d-4de2-bdc3-dec17f737a4a", "url": "https://automattic.com", "title": "Automattic – About", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "f048226a-ad79-49ac-a5f7-ca2311c4e0e2", "url": "https://automattic.com/about/", "title": "Automattic – About", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "9d992b04-869a-42b4-8543-acef3cb8942e", "url": "https://wordpress.org/about/accessibility/", "title": "WordPress Accessibility | WordPress.org", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "7005703a-985e-4503-8389-0e81b9f7f624", "url": "https://duckduckgo.com/privacy", "title": "DuckDuckGo Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "bd822159-9d37-4b66-8b9b-db8473a6bcba", "url": "https://help.duckduckgo.com/duckduckgo-help-pages/results/sources/", "title": "Sources of DuckDuckGo Search Results", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "24324270-3177-40e1-b52a-24851ab32b64", "url": "https://github.com/duckduckgo", "title": "DuckDuckGo – GitHub", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "abb8f64f-1db2-497f-86ec-0461ffc9315e", "url": "https://duckduckgo.com/about", "title": "About DuckDuckGo", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "d5012c06-4a66-4b88-98ab-0a608664f1c7", "url": "https://duckduckgo.com", "title": "DuckDuckGo", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "257c0e56-9103-4a2d-962e-4e4d595c3cc0", "url": "https://ec.europa.eu/competition-policy/antitrust/cases/google_en", "title": "Google Antitrust Cases | European Commission", "kind": "regulator-finding", "publisher": null, "publishedAt": null }, { "id": "2f37c3ed-1297-48a8-8bda-ca7bb84bd212", "url": "https://jitsi.org/meet-jit-si-privacy/", "title": "Meet.jit.si Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "39f2b2bd-03e6-47f8-986e-13a30a7598ae", "url": "https://jitsi.org/security/", "title": "Jitsi Meet Security", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "471ac829-a954-49ba-8710-afc1236e574d", "url": "https://jitsi.org/blog/e2ee/", "title": "End-to-End Encryption in Jitsi Meet", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "83263373-8b9e-4c0b-af94-348fbf6ad382", "url": "https://github.com/jitsi/jitsi-meet", "title": "Jitsi Meet – GitHub repository (Apache 2.0)", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "cb81ce04-fe44-44ea-b586-5c42d5073a77", "url": "https://jitsi.github.io/handbook/docs/devops-guide/", "title": "Jitsi Meet Handbook – Self-Hosting Guide", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "3e5d7f2c-dd8f-4c20-8956-cbda3cef43d2", "url": "https://8x8.com", "title": "8x8 – Cloud Communications", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "7b0b0c3f-29e1-42c0-a1b5-a791e30732f7", "url": "https://jitsi.org", "title": "Jitsi – Secure, Simple and Scalable Video Conferences", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "7d0afd36-0141-48b3-86ca-65c0ac9fba19", "url": "https://www.ftc.gov/legal-library/browse/cases-proceedings/192-3167-zoom-video-communications-inc-matter", "title": "Zoom Video Communications, Inc., In the Matter of | FTC", "kind": "regulator-finding", "publisher": null, "publishedAt": null }, { "id": "290d41e6-c189-49be-92b5-23ffa9aff3c2", "url": "https://www.ftc.gov/news-events/news/press-releases/2020/11/ftc-requires-zoom-enhance-its-security-practices-part-settlement", "title": "FTC Requires Zoom to Enhance its Security Practices as Part of Settlement", "kind": "regulator-finding", "publisher": null, "publishedAt": null }, { "id": "28ab8cfd-5832-4452-953b-db5dbb439010", "url": "https://iapp.org/news/b/zoom-agrees-to-pay-85m-to-settle-privacy-lawsuit", "title": "Zoom agrees to pay $85M to settle privacy lawsuit | IAPP", "kind": "investigative-journalism", "publisher": null, "publishedAt": null }, { "id": "5edd573e-dc36-4ec3-91c0-f8331433810b", "url": "https://iapp.org/news/a/federal-judge-approves-85-million-settlement-in-class-action-lawsuit-against-zoom/", "title": "Federal judge approves $85M settlement in class-action lawsuit against Zoom", "kind": "court-filing", "publisher": null, "publishedAt": null }, { "id": "b945b00d-2d8d-4146-960b-83409067a465", "url": "https://www.axios.com/2023/08/09/zooms-terms-service-changes-ai-fears", "title": "Zoom CEO admits mistake as terms-of-service changes raise AI fears", "kind": "investigative-journalism", "publisher": null, "publishedAt": null }, { "id": "88cf4f44-370d-4c36-bd1b-a1c9091bbc6c", "url": "https://variety.com/2023/digital/news/zoom-ai-training-backlash-customer-content-terms-of-service-1235694207/", "title": "After Backlash, Zoom Now Says It Won't Use Any Customer Content to Train AI Systems", "kind": "investigative-journalism", "publisher": null, "publishedAt": null }, { "id": "93a5b651-dcd4-4629-a5ab-572ae6f1993d", "url": "https://zoom.us/privacy", "title": "Zoom Privacy Statement", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ca985ea2-9f3d-4280-a758-a82db9f4bfb9", "url": "https://www.zoom.com/en/trust/transparency/", "title": "Zoom Transparency Report", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "66207585-f0d5-47e4-a6e0-4d730323d255", "url": "https://www.zoom.com/en/blog/government-requests-and-data-protection/", "title": "Government Requests and Data Protection | Zoom", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "f8385d45-9100-45fc-b658-9b0a0c67cfa7", "url": "https://zoom.us/security", "title": "Zoom Security | Zoom", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "8b406577-42fc-4863-94f1-7bb17334f076", "url": "https://www.revenuememo.com/p/who-owns-zoom", "title": "Who owns Zoom? Ownership structure explained (2026)", "kind": "investigative-journalism", "publisher": null, "publishedAt": null }, { "id": "ab8b8c36-e946-40a9-bbc5-fc32dd18a699", "url": "https://zoom.us/trust/esg", "title": "Zoom Environmental, Social, and Governance", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "755a5736-a718-4bce-86a1-4c2bba457d59", "url": "https://news.zoom.us/zoom-layoffs/", "title": "A Message from Eric Yuan, CEO of Zoom", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "8d489154-e8ce-4e2e-b93c-433d125a8a84", "url": "https://zoom.us/accessibility", "title": "Accessibility | Zoom", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "d55b202e-fbdb-4f23-a88d-c6458ea6917b", "url": "https://www.microsoft.com/en-us/corporate-responsibility/law-enforcement-requests-report", "title": "Microsoft Law Enforcement Requests Report", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "7c464e18-7937-47df-8ce4-dd39d69c36aa", "url": "https://www.microsoft.com/en-us/trust-center/privacy/gdpr-overview", "title": "Microsoft Trust Center – GDPR", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "7bf452a7-950a-483d-b41f-e7bf1e52c873", "url": "https://privacy.microsoft.com/en-us/privacystatement", "title": "Microsoft Privacy Statement", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "969c1856-7df5-41c7-a236-8365ccf33b68", "url": "https://blogs.microsoft.com/eupolicy/2023/01/09/eu-data-boundary-cloud/", "title": "Microsoft EU Data Boundary Goes Live | Microsoft EU Policy Blog", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ff21d7b9-ca69-4640-87f3-dc62d2a1df2e", "url": "https://www.microsoft.com/en-us/microsoft-teams/group-chat-software", "title": "Microsoft Teams", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "4e19142a-f8e1-457f-89b5-ef01bbd42222", "url": "https://www.microsoft.com/en-us/trust-center", "title": "Microsoft Trust Center", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "26b05aca-314a-4076-9f2b-f3fe88403a0a", "url": "https://learn.microsoft.com/en-us/microsoft-365/compliance/export-content-search-results", "title": "Export content search results | Microsoft Learn", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "897aef27-9d50-4779-8286-0460028a927a", "url": "https://www.microsoft.com/en-us/sustainability", "title": "Microsoft Sustainability Report", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "3ed13c70-803c-4cea-9ea2-2fa39f19b355", "url": "https://www.microsoft.com", "title": "Microsoft – Official Site", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "101413b1-3040-4bca-ad66-e435b96d1271", "url": "https://www.microsoft.com/en-us/accessibility/microsoft-teams", "title": "Microsoft Teams Accessibility", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "b1d57b95-9ab0-4ecf-a3b5-c868fa2c75c0", "url": "https://slack.com/trust/privacy/privacy-principles", "title": "Slack Privacy Principles", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "03f08fa3-7951-43d8-96c3-e4a7d0b58615", "url": "https://slack.com/trust/privacy/privacy-policy", "title": "Slack Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "3c91f030-b74d-4291-8f87-20539767e534", "url": "https://slack.com/blog/news/notice-of-security-incident", "title": "Notice of Security Incident | Slack Blog", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "3d831dc4-2643-4946-a193-13fa2aef23ec", "url": "https://slack.com/security", "title": "Slack Security | Slack", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "3f299c96-af5f-462e-b0dd-cca1278906fd", "url": "https://slack.com/trust/privacy", "title": "Slack Trust Center – Privacy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "87355840-a496-4c04-b979-4a2a59b3e88f", "url": "https://slack.com/help/articles/201658943-Export-your-workspace-data", "title": "Export your workspace data | Slack Help Center", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "a5d35b17-c251-4c8c-9e7e-1ea1796dc8e2", "url": "https://slack.com", "title": "Slack – Where Work Happens", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "577aaa7d-4980-4bf0-98ec-8a7ffbe0f171", "url": "https://slack.com/accessibility", "title": "Slack Accessibility", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "4b972565-3f4b-4c2a-a1bf-b6d6cdd0d417", "url": "https://www.anthropic.com/legal/privacy", "title": "Anthropic Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ca1b11c2-1624-41da-b953-361985bba240", "url": "https://www.anthropic.com/research/constitutional-ai-harmlessness-from-ai-feedback", "title": "Anthropic — Constitutional AI Research", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "04b9f3e6-5081-4ada-aac7-0b17fd4d8255", "url": "https://www.anthropic.com/company", "title": "About Anthropic", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "4df95067-afa9-4a22-b274-2bcb1e2a5526", "url": "https://www.anthropic.com/news/anthropic-amazon", "title": "Anthropic — Amazon Investment Announcement", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "8dc57ff7-1583-44c6-a031-0a53da8b3a16", "url": "https://www.anthropic.com/careers", "title": "Anthropic Careers", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "13e4fbe1-4cba-49f2-9d6e-a6a0b01faa83", "url": "https://claude.ai/", "title": "Claude by Anthropic", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ca0463d1-d92a-495a-84e9-036ee1e864e9", "url": "https://support.google.com/gemini/answer/13594961", "title": "Google Gemini Privacy Notice", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "c829c806-736d-4e0d-ad65-f02a5bf24701", "url": "https://tosdr.org/en/service/217", "title": "Google on ToS;DR", "kind": "dataset-tosdr", "publisher": null, "publishedAt": null }, { "id": "26b12618-e4b2-4764-87d2-892268852df4", "url": "https://workspace.google.com/terms/dpa_terms.html", "title": "Google Workspace Data Processing Amendment", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "b6388951-4152-4c61-9d48-0b68a4709936", "url": "https://workspace.google.com/intl/en/products/gemini/", "title": "Gemini for Google Workspace", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "0832212a-d67d-489a-8037-63d20c9dbf0d", "url": "https://digital-markets-act.ec.europa.eu/gatekeepers_en", "title": "EU DMA Gatekeepers", "kind": "regulator-finding", "publisher": null, "publishedAt": null }, { "id": "f911c800-82a0-4518-b348-2c34e19db2fd", "url": "https://sustainability.google/reports/", "title": "Google Sustainability Report", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "dd6a83d5-8aa9-4fb0-9730-80e4319a11a8", "url": "https://www.microsoft.com/en-us/diversity/inside-microsoft/default.aspx", "title": "Google Diversity Report", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "563faa8b-b9ca-4012-becb-6a0617ebef58", "url": "https://mistral.ai/terms/#privacy-policy", "title": "Mistral AI Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "eb27bafc-5299-41da-986d-5f894d414c62", "url": "https://digital-strategy.ec.europa.eu/en/news/european-tech-companies-receive-eu-strategic-investments", "title": "EU Strategic Technology Investments", "kind": "regulator-finding", "publisher": null, "publishedAt": null }, { "id": "c7f34d4e-347a-4d7a-85a4-24dcf05c3bd6", "url": "https://github.com/mistralai/mistral-src", "title": "Mistral AI on GitHub", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "13dd159a-b9e7-4b92-8699-6f5ca1a8276f", "url": "https://huggingface.co/mistralai", "title": "Mistral AI on Hugging Face", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "be2143da-bfd8-417a-9e89-64859a937d91", "url": "https://mistral.ai/company/", "title": "About Mistral AI", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "a33bcac2-e751-4c75-895e-793a8e4a1690", "url": "https://mistral.ai/", "title": "Mistral AI", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "73a3bf49-4236-4bd8-b118-a5f00253fe75", "url": "https://mistral.ai/careers/", "title": "Mistral AI Careers", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "b37410ca-7edd-4329-ab85-3c607a384f1c", "url": "https://github.com/ollama/ollama", "title": "Ollama GitHub — MIT Licence", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "4d7fab36-cee9-4104-a13a-d30dbd315014", "url": "https://ollama.com/library", "title": "Ollama Model Library", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "e9f932cc-55ac-4164-b626-7a6316ad80bd", "url": "https://ollama.com/", "title": "Ollama", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "7cd0d3e2-ac1c-4b98-8152-0a215ba04ae3", "url": "https://github.com/ollama/ollama/graphs/contributors", "title": "Ollama Contributors (GitHub)", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "c6f3ebdb-f228-4f4e-8181-a5da7a0fa0b8", "url": "https://docs.github.com/en/copilot/about-github-copilot/privacy-in-github-copilot", "title": "GitHub Copilot Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "0143ba28-e3b9-4bfb-ab03-1c38dc3b465b", "url": "https://storage.courtlistener.com/recap/gov.uscourts.cand.414175/gov.uscourts.cand.414175.1.0.pdf", "title": "Doe v. GitHub — Original Complaint", "kind": "court-filing", "publisher": null, "publishedAt": null }, { "id": "8899df8d-f1f2-411d-a52a-0656407a79d8", "url": "https://docs.github.com/en/copilot/about-github-copilot/github-copilot-trust-center", "title": "GitHub Copilot Trust Center", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "3cc27b92-97fb-44e8-8293-c2c5cf469ce5", "url": "https://github.com/features/copilot", "title": "GitHub Copilot", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "30f2260e-bbc0-4d5d-b812-1a23ba8331c9", "url": "https://docs.github.com/en/copilot/getting-started-with-github-copilot", "title": "GitHub Copilot — Getting Started", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "a82bd54a-da00-47bf-b909-9777467cceb9", "url": "https://info.ecosia.org/about", "title": "About Ecosia", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "c18b1136-95f6-4342-a498-d9fa706659f0", "url": "https://blogs.microsoft.com/blog/2018/06/04/microsoft-github-empowering-developers/", "title": "Microsoft acquires GitHub", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "39a66e85-d280-47b6-931c-a0d97bf95fb6", "url": "https://www.microsoft.com/en-us/corporate-responsibility/sustainability", "title": "Microsoft Sustainability Report", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "60ab5e9c-031e-4682-bafa-bf5647dbc2f9", "url": "https://government.github.com/accessibility", "title": "GitHub Accessibility", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "48841360-2fb9-4284-9d0a-edb25d6d58c4", "url": "https://webkit.org/blog/9521/intelligent-tracking-prevention-2-3/", "title": "WebKit — Intelligent Tracking Prevention 2.3", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "8361d726-3afb-4b20-8d4d-d502cc8a0e01", "url": "https://www.apple.com/privacy/docs/Safari_White_Paper_Nov_2019.pdf", "title": "Apple Safari Privacy White Paper", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "3bcf071e-1678-4111-a302-6974277c6736", "url": "https://support.apple.com/en-us/108756", "title": "Apple iCloud Advanced Data Protection", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "71ae9e87-e789-4d1c-91e6-307dd2f95194", "url": "https://developer.apple.com/safari/", "title": "Apple Safari for Developers", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "43069c61-1e10-4aad-9218-39d14a7bbb77", "url": "https://ec.europa.eu/commission/presscorner/detail/en/ip_24_1709", "title": "European Commission — Apple DMA Compliance", "kind": "regulator-finding", "publisher": null, "publishedAt": null }, { "id": "f015ad50-a24a-4650-97de-8ccfb79358f9", "url": "https://www.apple.com/environment/", "title": "Apple Environment", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "46b181e0-61a9-4fe3-bba0-3dd49fb76f49", "url": "https://www.apple.com/supplier-responsibility/", "title": "Apple Supplier Responsibility", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "65119f5c-23f8-42f3-918c-dc019ff41213", "url": "https://www.apple.com/accessibility/", "title": "Apple Accessibility", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "50e6d4db-6893-45a5-a2c2-63647738c128", "url": "https://librewolf.net/docs/faq/", "title": "LibreWolf FAQ", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "933da49f-8c26-47f0-820c-5cb5e3a2dceb", "url": "https://gitlab.com/librewolf-community/settings", "title": "LibreWolf Settings on GitLab", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "76a171b4-639a-427b-aa5e-91267acf2a16", "url": "https://librewolf.net/docs/settings/", "title": "LibreWolf Settings Documentation", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "69adfcb2-1b9f-4878-a4d0-2fa8c94ab502", "url": "https://gitlab.com/librewolf-community", "title": "LibreWolf on GitLab", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "d60c2c19-7289-43fa-9cf4-b2f87419634c", "url": "https://librewolf.net/installation/", "title": "LibreWolf Download Page", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "e7c2a8bf-a932-4394-a550-cba5dd5250c0", "url": "https://librewolf.net/", "title": "LibreWolf", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "4bbc1e68-1d7e-4b06-b1fb-51e052c0f648", "url": "https://www.theregister.com/2023/01/17/microsoft_edge_bing_url_leak/", "title": "The Register — Edge Sending URLs to Bing", "kind": "investigative-journalism", "publisher": null, "publishedAt": null }, { "id": "6109924d-5aa3-4069-b5a9-707aea1df423", "url": "https://www.microsoft.com/en-us/edge/privacy-whitepaper", "title": "Microsoft Edge Privacy Whitepaper", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "8b3ea33a-7610-4bc6-98b7-4d10e89b145c", "url": "https://blogs.windows.com/windowsexperience/2023/02/07/the-new-bing-preview-brings-ai-to-the-browser/", "title": "Microsoft — Copilot in Edge", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "029535fe-ace0-4dd3-94f0-ebd92ab6969c", "url": "https://www.microsoft.com/en-us/edge/business", "title": "Microsoft Edge for Business", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "8eb98b44-b228-4ea0-be68-e37fa4fd8558", "url": "https://www.microsoft.com/en-us/accessibility/microsoft-edge", "title": "Microsoft Edge Accessibility", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "b9156cce-91af-491b-b694-62489c62cf9a", "url": "https://mullvad.net/en/browser/privacy-policy", "title": "Mullvad Browser Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "9e863608-bafe-4bed-a34e-d8e41b0b0d77", "url": "https://blog.torproject.org/introducing-mullvad-browser/", "title": "Tor Project — Introducing Mullvad Browser", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "b8a6ef2a-2636-4594-a900-e1170d4ad0ca", "url": "https://mullvad.net/en/browser", "title": "Mullvad Browser", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "b54918fa-2863-4dec-bd3c-97a4c817433f", "url": "https://mullvad.net/en/about", "title": "About Mullvad", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "c08f5089-a30b-43cf-aaa7-85e24032a72b", "url": "https://gitlab.torproject.org/tpo/applications/mullvad-browser", "title": "Mullvad Browser on GitLab (Tor Project)", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ebc57c51-d374-4b72-adf5-42c1f028823b", "url": "https://mullvad.net/en/blog/2023/4/20/mullvad-vpn-was-subject-to-a-search-warrant-customer-data-not-compromised/", "title": "Mullvad — Police Raid Statement", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "e10de82f-b93c-4121-b3e7-eea2c66e0e24", "url": "https://mullvad.net/en/careers", "title": "Mullvad Careers", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "fc3285ca-f528-4866-a892-0737fdaa1d1a", "url": "https://getkirby.com/docs/reference", "title": "Kirby Documentation", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "94c094dc-4fc3-459b-8c28-b2a386455b11", "url": "https://getkirby.com/about", "title": "About Kirby", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "7e038ba4-c203-42b0-9afb-6024c1262e9b", "url": "https://github.com/getkirby/kirby", "title": "Kirby on GitHub", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "0e28517b-1ea9-4b87-b72e-82cd974563c4", "url": "https://getkirby.com/docs/guide/install", "title": "Kirby Installation Requirements", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "2ce2b129-1294-42d8-8e12-6dfa63c81b29", "url": "https://getkirby.com/docs/guide/panel", "title": "Kirby Panel Documentation", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "37021124-5f3d-4600-91da-313c14a7b337", "url": "https://www.squarespace.com/privacy", "title": "Squarespace Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "7b21618f-32a6-49a7-870e-161f256665ae", "url": "https://support.squarespace.com/hc/en-us/articles/360001137083-Adding-a-Cookie-Notice-to-your-site", "title": "Squarespace Cookie Notice", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "c96e4b7f-1881-43d2-b7a6-1af293e9663b", "url": "https://support.squarespace.com/hc/en-us/articles/206566687-Exporting-your-site", "title": "Squarespace — Exporting your site", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "a8fec1c1-3f31-487f-b5ef-64a70bd221c4", "url": "https://www.prnewswire.com/news-releases/squarespace-to-go-private-in-permira-led-transaction-valued-at-approximately-6-9-billion-302141052.html", "title": "Squarespace to Go Private — Press Release", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "cb1aa451-ca9f-4518-87b0-076344e885bd", "url": "https://www.squarespace.com/about", "title": "About Squarespace", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "6c4c3e6b-e8b6-48aa-84f8-c784e627900d", "url": "https://techcrunch.com/2023/02/09/squarespace-layoffs/", "title": "TechCrunch — Squarespace Layoffs 2023", "kind": "investigative-journalism", "publisher": null, "publishedAt": null }, { "id": "849cbaf1-a73c-406e-9f08-330bab90941b", "url": "https://www.squarespace.com/accessibility", "title": "Squarespace Accessibility", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "1c4836b3-016a-4012-b275-a3624b6bcd8f", "url": "https://support.substack.com/hc/en-us/articles/360037813271-How-do-I-export-my-subscriber-list", "title": "Substack — How to Export Subscriber List", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "15d8b9eb-cc08-4a6e-9584-b2aa0d36487d", "url": "https://substack.com/privacy", "title": "Substack Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "1992b69d-22aa-4264-87b6-c2f4780aec82", "url": "https://support.substack.com/hc/en-us/articles/360037407831-How-do-I-import-my-newsletter-to-Substack", "title": "Substack Export/Import", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "00bee3b0-deb4-42be-b938-28fcc254f9b1", "url": "https://www.theatlantic.com/ideas/archive/2023/11/substack-extremism-nazi-content/676156/", "title": "The Atlantic — Substack's Extremism Problem", "kind": "investigative-journalism", "publisher": null, "publishedAt": null }, { "id": "fb274feb-4297-4f13-81f1-b86c83823049", "url": "https://sustainability.aboutamazon.com", "title": "AWS Sustainability", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "d1eb9891-8530-4aff-b4e6-fa3794926592", "url": "https://on.substack.com/about", "title": "About Substack", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "79f18415-81b2-40d7-b109-4762a9a1f658", "url": "https://substack.com/", "title": "Substack", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "6bcb747d-aba6-49c7-b7a2-8ef4c4fcacc3", "url": "https://www.wix.com/about/privacy", "title": "Wix Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "1e87328d-ea12-4c82-bcce-e62d66d616b2", "url": "https://support.wix.com/en/article/connecting-a-domain-removing-the-wix-branding", "title": "Wix — Removing Wix Branding", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "cceebe79-e4c1-4911-b082-acf2eece2488", "url": "https://www.wix.com/about/gdpr", "title": "Wix GDPR", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "b3f2e600-e9fa-487d-b9aa-e543468ff3e2", "url": "https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en", "title": "EU Commission Adequacy Decisions", "kind": "regulator-finding", "publisher": null, "publishedAt": null }, { "id": "818c1fd2-1ce1-40a4-8a46-f99a806be28d", "url": "https://support.wix.com/en/article/exporting-your-site-s-data", "title": "Wix — Exporting Your Site's Data", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "a0f5de76-c1b3-459b-89db-3840626ddea7", "url": "https://investors.wix.com/", "title": "Wix Investor Relations", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "a92a773b-2518-4601-b032-accd336c25a0", "url": "https://www.wix.com/about", "title": "About Wix", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "e1932abe-c422-40a5-b5a5-161f840ce902", "url": "https://investors.wix.com/news-releases/news-release-details/wix-announces-workforce-reduction", "title": "Wix Workforce Reduction Announcement", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "2dcd136b-9f61-480e-88f6-6f5494ba8516", "url": "https://support.wix.com/en/article/wix-accessibility-wizard", "title": "Wix Accessibility Wizard", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "fc38fab4-a113-44bd-9411-1866f8c9c2b6", "url": "https://wordpress.org/about/privacy/", "title": "WordPress Privacy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "0782c584-3347-427f-bcbf-7d0a5b0a148b", "url": "https://wordpress.org/plugins/", "title": "WordPress Plugin Directory", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "7f02e19b-c90b-4333-b3dd-0d84efd20336", "url": "https://patchstack.com/whitepaper/the-state-of-wordpress-security/", "title": "Patchstack — State of WordPress Security", "kind": "civil-society-research", "publisher": null, "publishedAt": null }, { "id": "9d767476-a07f-4078-bae8-f0f587c4b622", "url": "https://wordpress.org/hosting/", "title": "WordPress Hosting", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "30e6b174-3d0d-4416-8aa4-126d1a20c002", "url": "https://wordpress.org/documentation/article/tools-export-screen/", "title": "WordPress Export Documentation", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "db9c8bc0-71a3-47d0-8667-41efcccd3fe1", "url": "https://wordpress.org/news/2024/09/wp-engine/", "title": "WordPress.org — WP Engine Statement", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "d8ca41b0-1f15-4a44-92a7-b3070266b5c9", "url": "https://techcrunch.com/2024/09/26/wordpress-vs-wp-engine-explained/", "title": "TechCrunch — WordPress vs WP Engine Explained", "kind": "investigative-journalism", "publisher": null, "publishedAt": null }, { "id": "b9c30cb8-e9c0-4f84-9e64-5d920d5a571b", "url": "https://make.wordpress.org/accessibility/", "title": "WordPress Accessibility Team", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "03af2905-a2df-491e-99be-6ea261502554", "url": "https://proton.me/drive/security", "title": "Proton Drive Security Model", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "0ff34d82-9b02-42e8-9652-bff82f947f23", "url": "https://proton.me/legal/privacy", "title": "Proton Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "bf32b1fb-1565-46ee-99a9-ba0ba2b82a95", "url": "https://proton.me/blog/transparency-report", "title": "Proton Transparency Report", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "49eb4b60-c3bc-41cc-8e26-0e6054cd3da6", "url": "https://github.com/ProtonMail", "title": "Proton on GitHub", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "bcc97dd8-1a05-4424-9846-ac87bb230c72", "url": "https://proton.me/about", "title": "About Proton", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "a38a8ed9-7b8d-471d-95dd-f50fbb9a40f9", "url": "https://proton.me/careers", "title": "Proton Careers", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "e9af7483-0e08-496c-bca0-3bda4dd25a96", "url": "https://proton.me/drive", "title": "Proton Drive", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "9cc3211f-58eb-42ac-92ae-ba78dd45f8d1", "url": "https://tresorit.com/security", "title": "Tresorit Security Architecture", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "2bcbd0df-8b35-4d0b-ad66-7c2d9fa1cabd", "url": "https://tresorit.com/blog/swisscom-acquires-tresorit", "title": "Tresorit joins SwissCom", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "442e14c8-f704-42b3-a388-1542ec319f53", "url": "https://tresorit.com/enterprise/compliance", "title": "Tresorit Enterprise Compliance", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "4ced219e-de40-48e4-951f-1905b5c2b237", "url": "https://www.swisscom.ch/en/about/company.html", "title": "About SwissCom", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "5b7752ea-82d9-40eb-aac6-5e2067adeb98", "url": "https://www.swisscom.ch/en/about/sustainability.html", "title": "SwissCom Sustainability", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "3f07e045-a985-4c03-b528-b8758bcf1344", "url": "https://tresorit.com/careers", "title": "Tresorit Careers", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "4cfc9ab7-798d-40c6-a687-fe21f6332752", "url": "https://tresorit.com/", "title": "Tresorit", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "6cde628a-ce03-4b18-886c-10a272f4798a", "url": "https://element.io/enterprise", "title": "Element Enterprise", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "b605d8c0-c3ad-41f7-87cc-2bd3ba9a7200", "url": "https://spec.matrix.org", "title": "Matrix Specification", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "cea6e737-e2a3-4c3f-b9f7-d133ca897648", "url": "https://matrix.org/legal/privacy-notice", "title": "Matrix.org Privacy Notice", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "cb07dfc8-dc64-4478-acde-4cdd85bf645c", "url": "https://element.io/case-studies/french-government", "title": "Element — French Government Case Study", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "2423ccbb-e766-495a-a57f-baf6a8ee8ed3", "url": "https://github.com/element-hq", "title": "Element on GitHub", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ffb04279-489e-4165-86df-f6baa615e181", "url": "https://matrix.org/foundation/", "title": "Matrix.org Foundation", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "be3f2fbc-9c5e-48b0-84f1-e83ded35795b", "url": "https://element.io/about", "title": "About Element", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ce2864d9-f23d-4765-8ee3-77fb2c1a9909", "url": "https://element.io/careers", "title": "Element Careers", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "67f5fb4d-0cbc-4a7a-906e-f0ca16ad3c9a", "url": "https://github.com/element-hq/element-web/issues?q=label%3Aaccessibility", "title": "Element Web Accessibility Issues on GitHub", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "3b903e65-9e98-46cd-aea8-230dc513bff2", "url": "https://mattermost.com/self-managed-vs-cloud/", "title": "Mattermost — Self-Managed vs Cloud", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "4e37d28f-dc55-477c-abe3-a0dd0c9bea2a", "url": "https://mattermost.com/security/", "title": "Mattermost Security Overview", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "999eb818-c634-48a7-bc7c-d27b728940e0", "url": "https://docs.mattermost.com/manage/telemetry.html", "title": "Mattermost — Telemetry Documentation", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "d6e331da-0d2f-4cd5-8a8b-03b9e53bd1f8", "url": "https://mattermost.com/government/", "title": "Mattermost for Government", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "f3c64dfe-e65e-4272-8296-bffb87f10734", "url": "https://github.com/mattermost/mattermost", "title": "Mattermost on GitHub", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "a97c629d-875c-40ed-9b40-a7d8a56fabac", "url": "https://github.com/mattermost/mattermost/blob/master/LICENSE.txt", "title": "Mattermost MIT Licence", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "e145eb5f-ccbf-43b9-8789-0740025605f6", "url": "https://mattermost.com/careers/", "title": "Mattermost Careers", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "1ff0cda2-0b53-45b3-99e5-139d45e8cb6a", "url": "https://mattermost.com/accessibility/", "title": "Mattermost Accessibility", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ccfa3af4-11fe-4eb3-91f8-934ac22932e9", "url": "https://www.whatsapp.com/legal/privacy-policy", "title": "WhatsApp Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "a71b5081-b0f2-4ee5-befe-5e63f30acd92", "url": "https://tosdr.org/en/service/198", "title": "WhatsApp on ToS;DR", "kind": "dataset-tosdr", "publisher": null, "publishedAt": null }, { "id": "9ef0d89e-ce7b-40c9-b9e2-52a727c041c8", "url": "https://faq.whatsapp.com/1055877028640818", "title": "WhatsApp — About End-to-End Encrypted Backup", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "6b1f3e00-ef48-476f-b23c-eeeed274d356", "url": "https://www.dataprotection.ie/en/news-media/press-releases/data-protection-commission-announces-decision-in-whatsapp-inquiry", "title": "Irish DPC — WhatsApp Inquiry Decision", "kind": "regulator-finding", "publisher": null, "publishedAt": null }, { "id": "ce15e5de-6092-4991-8c72-7334595264dd", "url": "https://transparency.fb.com/reports/government-requests-for-user-data/", "title": "Meta Transparency Report — Government Data Requests", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "03c14840-f4fd-4693-841e-72d4d4c6a69f", "url": "https://developers.facebook.com/docs/whatsapp/third-party-interoperability", "title": "WhatsApp Third-Party Interoperability", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "445bec1e-a714-4fc4-99fc-ce385691a196", "url": "https://investor.fb.com/home/default.aspx", "title": "Meta Investor Relations — Proxy Statement", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "2562830a-6e89-413d-8670-e5b50e0caf14", "url": "https://sustainability.fb.com", "title": "Meta Sustainability", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "fd4514b1-1d81-4acb-a7a9-c33cad2bd0cf", "url": "https://time.com/6147458/facebook-africa-content-moderation-employee-treatment/", "title": "Time — Facebook's African Content Moderator Problems", "kind": "investigative-journalism", "publisher": null, "publishedAt": null }, { "id": "9a052ca6-dca5-47d3-bd5f-482c1cf3d8b5", "url": "https://www.whatsapp.com/accessibility", "title": "WhatsApp Accessibility", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "4a9cab81-cec2-4039-8ee8-d13a6825fe78", "url": "https://tosdr.org/en/service/244", "title": "Microsoft on ToS;DR", "kind": "dataset-tosdr", "publisher": null, "publishedAt": null }, { "id": "3b5936f0-d941-4730-a27f-c89ee32a193e", "url": "https://www.bing.com/webmaster/help/help-center-idedce928", "title": "Bing Webmaster Help", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "f1056792-2691-41a3-a282-53e3ba05bc98", "url": "https://www.microsoft.com/en-us/accessibility", "title": "Microsoft Accessibility", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "41ba268d-1dbb-4a92-941d-c350a1f02cc5", "url": "https://search.brave.com/help/privacy-policy", "title": "Brave Search Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "1a59a34f-5817-4c6e-8d0a-633d7c67effa", "url": "https://brave.com/search/", "title": "Brave Search — Independent Index", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "f44dcc34-7583-40be-b23e-e35fc94deb09", "url": "https://brave.com/privacy-updates/7-web-discovery-project/", "title": "Brave — Web Discovery Project", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "5e23688e-498b-4e6e-9894-04145dcdc842", "url": "https://blog.mozilla.org/blog/2014/04/03/brendan-eich-steps-down-as-mozilla-ceo/", "title": "Mozilla Blog — Brendan Eich Steps Down", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "dca8dabb-3a69-4bf3-b127-9c0981988e96", "url": "https://brave.com/careers/", "title": "Brave Careers", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "24ff3dee-ef70-4a7e-ad63-484695f24b88", "url": "https://search.brave.com/", "title": "Brave Search", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "3512f33e-26ce-4be1-9427-1fd8d5e0d19d", "url": "https://kagi.com/privacy", "title": "Kagi Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "e17d0b88-7cbf-4659-85ca-8c44dcbab283", "url": "https://kagi.com/settings?p=user_ranked", "title": "Kagi Search Personalisation", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "62ac47a9-68eb-41db-ad14-b66998aa0dff", "url": "https://kagi.com/company", "title": "About Kagi", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "a38f16a2-18a2-4227-8f70-c49f0a52f5da", "url": "https://kagi.com/about", "title": "About Kagi", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "f9820d3d-e7f8-4281-8a8b-3ba99ebf3eb6", "url": "https://kagi.com/", "title": "Kagi Search", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "806918ea-bd67-40c9-b170-f8c339ec23bd", "url": "https://docs.searxng.org/own-instance.html", "title": "SearXNG — Why use a private instance", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "9e038e3f-3a16-447e-a358-44b6920ef790", "url": "https://searx.space", "title": "SearXNG Public Instances (searx.space)", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "24a6799c-085a-45d8-bf9b-5fd0cb1b8896", "url": "https://github.com/searxng/searxng", "title": "SearXNG on GitHub", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "4bfd9c8e-3ff6-4cad-8835-debb85b7eff7", "url": "https://docs.searxng.org/", "title": "SearXNG Documentation", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "69235eea-ae87-49bb-8014-c192ab0373e7", "url": "https://docs.bigbluebutton.org/administration/install/", "title": "BigBlueButton Installation Documentation", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "5194caba-c58e-4f5c-8f04-57dd9e478e44", "url": "https://docs.bigbluebutton.org/administration/privacy/", "title": "BigBlueButton Privacy Considerations", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "1fd5f9a7-2eff-4ada-8c50-05eb36ee0c16", "url": "https://bigbluebutton.org/schools/", "title": "BigBlueButton for Schools", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "3be84652-5978-4b0f-bd8a-8ef1dc8435c8", "url": "https://github.com/bigbluebutton/bigbluebutton", "title": "BigBlueButton on GitHub", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "4bccdb9c-c6dd-4b44-b3e6-70c43d2c4a75", "url": "https://bigbluebutton.org/about/", "title": "About BigBlueButton", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "7e173650-2d2f-49cc-a678-9b5cdae39f79", "url": "https://bigbluebutton.org/", "title": "BigBlueButton", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "75955a43-2f50-4670-933f-18ac164a40f1", "url": "https://blindsidenetworks.com/", "title": "Blindside Networks", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "00519db7-d6b6-436d-9c63-613da15eb45c", "url": "https://bigbluebutton.org/accessibility/", "title": "BigBlueButton Accessibility", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "2f9bca05-e8b9-4536-8e67-ef49ef1d9bf8", "url": "https://github.com/element-hq/element-call", "title": "Element Call on GitHub", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ee53d673-57bc-4108-b8e8-a245d5aa798f", "url": "https://spec.matrix.org/latest/", "title": "Matrix Specification", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "e659ea98-4eb6-4514-918d-4a08597de970", "url": "https://github.com/livekit/livekit", "title": "LiveKit on GitHub", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "28ae2a9e-0367-437a-b1f1-de5a94797582", "url": "https://element.io/element-call", "title": "Element Call", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "eeed1457-0953-47e0-a012-1ccb07c52b93", "url": "https://github.com/element-hq/element-call/issues?q=label%3Aaccessibility", "title": "Element Call Accessibility Issues on GitHub", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "bf3a4c5c-f73f-493b-bc47-ee9739a0f65d", "url": "https://support.google.com/meet/answer/9852160", "title": "Google Meet — Encryption in Google Meet", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "323617ce-9136-481f-a83c-85ce48435426", "url": "https://workspace.google.com/products/meet/", "title": "Google Workspace Meet", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ce71fac1-aba4-4709-9eed-ae0d3466170a", "url": "https://about.google/belonging/diversity-annual-report/", "title": "Google Diversity Annual Report", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "139cd08d-8ef1-4b33-994e-affebdd938f3", "url": "https://support.google.com/meet/answer/9602919", "title": "Google Meet — Closed Captions", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "e13726b0-ac5a-4319-b3d9-2c9fbfe7b3bd", "url": "https://www.fastmail.com/features/security/", "title": "Security with substance", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "b0592cdd-6c48-4ad3-8a95-347fa32cced8", "url": "https://www.fastmail.com/features/privacy/", "title": "Private, naturally", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ac32b8e4-4537-433f-b095-0ee8973f70ce", "url": "https://www.fastmail.com/policies/terms-of-service/", "title": "Terms of Service", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "da637529-d9aa-4e08-8d33-c7e2a0dd957e", "url": "https://api.thegreenwebfoundation.org/api/v3/greencheck/www.fastmail.com", "title": "Green Web Foundation — www.fastmail.com", "kind": "dataset-greenweb", "publisher": null, "publishedAt": null }, { "id": "858131f9-2b81-49ad-8901-afd739e80496", "url": "https://mailbox.org/en/news/transparency-report-2025/", "title": "Transparency Report 2025: A quarter of all requests from authorities rejected", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "00d080ee-cb2c-4bb7-afd2-2c27486aefc8", "url": "https://mailbox.org/en/", "title": "mailbox Suite for individuals and businesses", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "9832db2e-a2dc-49aa-8f3b-0ca49acb6667", "url": "https://mailbox.org/en/legal-information/", "title": "Legal notice", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "b0972ef1-fe7a-48d9-871f-6a647ac6df4c", "url": "https://api.thegreenwebfoundation.org/api/v3/greencheck/mailbox.org", "title": "Green Web Foundation — mailbox.org", "kind": "dataset-greenweb", "publisher": null, "publishedAt": null }, { "id": "e87d5515-b8d7-498a-ae86-1b3eac0edc7e", "url": "https://migadu.com/terms/", "title": "Migadu Email", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "9c8e5482-7f01-4fd1-89f8-127b5c795e45", "url": "https://api.thegreenwebfoundation.org/api/v3/greencheck/migadu.com", "title": "Green Web Foundation — migadu.com", "kind": "dataset-greenweb", "publisher": null, "publishedAt": null }, { "id": "84541acf-f4fb-4d1a-b40c-2bb0ba04e98f", "url": "https://api.thegreenwebfoundation.org/api/v3/greencheck/proton.me", "title": "Green Web Foundation — proton.me", "kind": "dataset-greenweb", "publisher": null, "publishedAt": null }, { "id": "1992414a-7bd9-4bdd-9641-cdc49812fe83", "url": "https://info.ecosia.org/privacy", "title": "Ecosia Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "b6b9261b-e809-4b46-8118-63aa362f255d", "url": "https://info.ecosia.org/financial-reports", "title": "Financial Reports | Ecosia", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "fcdb82d9-c1b9-48e2-b911-d41e68028772", "url": "https://proton.me/meet", "title": "Proton Meet | Proton", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ee509819-6ba9-4388-b503-16cc8fde7488", "url": "https://www.opera.com/features/free-vpn", "title": "Opera Free VPN | Opera", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "c3854f66-3ab7-4e33-8bd5-d2d487473aa3", "url": "https://www.opera.com/privacy", "title": "Opera Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "72781e1b-e461-4fbe-9c89-5e520f6b8204", "url": "https://investor.opera.com/", "title": "Opera Investor Relations", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "ca3d5b2a-2aa0-415b-972a-a0029f29b3a5", "url": "https://www.opera.com/", "title": "Opera Web Browser", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "8e0eb2e9-cf09-4546-8549-fb5a1ae233b2", "url": "https://support.google.com/calendar/answer/99358", "title": "Sync Google Calendar with other calendars | Google Support", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "2767227f-970a-41b1-bd71-ea0ffde657d0", "url": "https://proton.me/calendar", "title": "Proton Calendar | Encrypted Calendar", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "058f4393-64ce-4582-bb71-7b1b62c41ae7", "url": "https://tuta.com/calendar", "title": "Tuta Calendar | Encrypted Calendar", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "8b23cf61-00e4-4fd1-81e6-b5319a13cfaa", "url": "https://www.fastmail.com/about/privacy/", "title": "Fastmail Privacy Policy", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "e81f57cc-3fbc-468a-97f5-2922ec8c8af5", "url": "https://www.fastmail.help/hc/en-us/articles/360058752854", "title": "Fastmail CalDAV setup | Fastmail Help", "kind": "company-statement", "publisher": null, "publishedAt": null }, { "id": "0676c5bd-ec95-4a58-9f09-c2413e26d74e", "url": "https://apps.nextcloud.com/apps/calendar", "title": "Calendar — Nextcloud App Store", "kind": "company-statement", "publisher": null, "publishedAt": null } ], "alternatives": [ { "incumbentServiceId": "dee03ced-10e9-4462-b306-803943094a9f", "alternativeServiceId": "8518f97c-9014-43f3-b553-dbdf131ce864" }, { "incumbentServiceId": "7a263049-c560-4e1f-b143-e639e22c5ead", "alternativeServiceId": "f1726a97-7cfa-4e41-b529-c4762118d11a" }, { "incumbentServiceId": "800c082c-af5a-4407-af43-a8177962d4b3", "alternativeServiceId": "f1726a97-7cfa-4e41-b529-c4762118d11a" }, { "incumbentServiceId": "cab10b8f-1a87-4cb1-9eae-c78d06933b49", "alternativeServiceId": "f1726a97-7cfa-4e41-b529-c4762118d11a" }, { "incumbentServiceId": "9b45e05b-e937-44f4-9fa3-cb7da087f344", "alternativeServiceId": "d137368f-24cf-4728-828f-6d3c73dd03e7" }, { "incumbentServiceId": "2719c556-29da-469b-9f6a-c3c291bc4ec8", "alternativeServiceId": "d137368f-24cf-4728-828f-6d3c73dd03e7" }, { "incumbentServiceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "alternativeServiceId": "d137368f-24cf-4728-828f-6d3c73dd03e7" }, { "incumbentServiceId": "04a52a12-967d-4ed3-aa11-2a4d7d285cbb", "alternativeServiceId": "b311c3ac-7396-4a6d-a0e4-685b92faae5d" }, { "incumbentServiceId": "e1030af7-7ee8-4bab-8ece-bb32d9142c4e", "alternativeServiceId": "6e69cb04-3ecc-4174-b0f2-a75c438f185f" }, { "incumbentServiceId": "10cfed88-641a-4267-b566-21b74d019545", "alternativeServiceId": "6e69cb04-3ecc-4174-b0f2-a75c438f185f" }, { "incumbentServiceId": "7cdd6a9d-0a91-4c78-991b-c0d7b065dd71", "alternativeServiceId": "c4a9124a-c45e-4f15-b75a-fecd4f697f88" }, { "incumbentServiceId": "7cdd6a9d-0a91-4c78-991b-c0d7b065dd71", "alternativeServiceId": "b311c3ac-7396-4a6d-a0e4-685b92faae5d" }, { "incumbentServiceId": "d30271ea-853e-4909-87e0-94c5532df545", "alternativeServiceId": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9" }, { "incumbentServiceId": "aa6e8f30-2325-488f-a484-60ef063998d3", "alternativeServiceId": "64a9b145-e613-482e-a28b-666d4cc697a5" }, { "incumbentServiceId": "aa6e8f30-2325-488f-a484-60ef063998d3", "alternativeServiceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19" }, { "incumbentServiceId": "2bc5b466-2b01-43a1-b2bc-c3df7a1533c6", "alternativeServiceId": "64a9b145-e613-482e-a28b-666d4cc697a5" }, { "incumbentServiceId": "2bc5b466-2b01-43a1-b2bc-c3df7a1533c6", "alternativeServiceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19" }, { "incumbentServiceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "alternativeServiceId": "64a9b145-e613-482e-a28b-666d4cc697a5" }, { "incumbentServiceId": "cfcf66ff-6001-4b63-8957-995285318bc3", "alternativeServiceId": "ebc4ced2-04d9-49c6-ba0d-8eb6a8aeaa19" }, { "incumbentServiceId": "831de1b0-4b82-4854-909b-c085ab265084", "alternativeServiceId": "0565b547-574f-4c6c-aa4b-8a5f9cb5f84a" }, { "incumbentServiceId": "251d6595-d725-4ba2-a51b-42db2ec17db4", "alternativeServiceId": "8518f97c-9014-43f3-b553-dbdf131ce864" }, { "incumbentServiceId": "251d6595-d725-4ba2-a51b-42db2ec17db4", "alternativeServiceId": "742b99cf-06b3-44d3-b84d-8923703fe1ff" }, { "incumbentServiceId": "dee03ced-10e9-4462-b306-803943094a9f", "alternativeServiceId": "742b99cf-06b3-44d3-b84d-8923703fe1ff" }, { "incumbentServiceId": "1b342130-fdab-4b9b-ac97-87058d39cb1a", "alternativeServiceId": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9" }, { "incumbentServiceId": "54fecb34-a5af-481e-95ee-bfc9baf6d525", "alternativeServiceId": "8518f97c-9014-43f3-b553-dbdf131ce864" }, { "incumbentServiceId": "54fecb34-a5af-481e-95ee-bfc9baf6d525", "alternativeServiceId": "742b99cf-06b3-44d3-b84d-8923703fe1ff" }, { "incumbentServiceId": "cab10b8f-1a87-4cb1-9eae-c78d06933b49", "alternativeServiceId": "0565b547-574f-4c6c-aa4b-8a5f9cb5f84a" }, { "incumbentServiceId": "7a263049-c560-4e1f-b143-e639e22c5ead", "alternativeServiceId": "0565b547-574f-4c6c-aa4b-8a5f9cb5f84a" }, { "incumbentServiceId": "831de1b0-4b82-4854-909b-c085ab265084", "alternativeServiceId": "f1726a97-7cfa-4e41-b529-c4762118d11a" }, { "incumbentServiceId": "800c082c-af5a-4407-af43-a8177962d4b3", "alternativeServiceId": "0565b547-574f-4c6c-aa4b-8a5f9cb5f84a" }, { "incumbentServiceId": "b47af9d6-509e-4f5d-8a8e-6640db3d8670", "alternativeServiceId": "cce75b07-8f87-40c4-a373-70b981ee7430" }, { "incumbentServiceId": "9b45e05b-e937-44f4-9fa3-cb7da087f344", "alternativeServiceId": "cce75b07-8f87-40c4-a373-70b981ee7430" }, { "incumbentServiceId": "aa6e8f30-2325-488f-a484-60ef063998d3", "alternativeServiceId": "cfcf66ff-6001-4b63-8957-995285318bc3" }, { "incumbentServiceId": "04a52a12-967d-4ed3-aa11-2a4d7d285cbb", "alternativeServiceId": "c4a9124a-c45e-4f15-b75a-fecd4f697f88" }, { "incumbentServiceId": "10cfed88-641a-4267-b566-21b74d019545", "alternativeServiceId": "6073324d-6e64-4ada-85fb-aef2299521af" }, { "incumbentServiceId": "e1030af7-7ee8-4bab-8ece-bb32d9142c4e", "alternativeServiceId": "6073324d-6e64-4ada-85fb-aef2299521af" }, { "incumbentServiceId": "6e69cb04-3ecc-4174-b0f2-a75c438f185f", "alternativeServiceId": "6073324d-6e64-4ada-85fb-aef2299521af" }, { "incumbentServiceId": "d30271ea-853e-4909-87e0-94c5532df545", "alternativeServiceId": "768c092a-97cd-4e1f-9b28-51dc59f68959" }, { "incumbentServiceId": "768c092a-97cd-4e1f-9b28-51dc59f68959", "alternativeServiceId": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9" }, { "incumbentServiceId": "1b342130-fdab-4b9b-ac97-87058d39cb1a", "alternativeServiceId": "768c092a-97cd-4e1f-9b28-51dc59f68959" }, { "incumbentServiceId": "1b342130-fdab-4b9b-ac97-87058d39cb1a", "alternativeServiceId": "d30271ea-853e-4909-87e0-94c5532df545" }, { "incumbentServiceId": "e1030af7-7ee8-4bab-8ece-bb32d9142c4e", "alternativeServiceId": "96a65b88-3c28-4d93-8ac2-e99256f2bc22" }, { "incumbentServiceId": "6073324d-6e64-4ada-85fb-aef2299521af", "alternativeServiceId": "96a65b88-3c28-4d93-8ac2-e99256f2bc22" }, { "incumbentServiceId": "84211f4b-0841-4745-9726-3b1f3ac8c989", "alternativeServiceId": "0b93706d-5f36-48cb-8ffb-500bfa176cc5" }, { "incumbentServiceId": "84211f4b-0841-4745-9726-3b1f3ac8c989", "alternativeServiceId": "82b0f93c-a208-4b55-b351-8dde1ba67edd" }, { "incumbentServiceId": "84211f4b-0841-4745-9726-3b1f3ac8c989", "alternativeServiceId": "8481545c-8d43-4288-aca1-8b09b0643805" } ], "pricing": [ { "serviceId": "742b99cf-06b3-44d3-b84d-8923703fe1ff", "tierName": "Free", "priceEurMonthly": "0.00" }, { "serviceId": "dee03ced-10e9-4462-b306-803943094a9f", "tierName": "Free", "priceEurMonthly": "0.00" }, { "serviceId": "8518f97c-9014-43f3-b553-dbdf131ce864", "tierName": "Free", "priceEurMonthly": "0.00" }, { "serviceId": "0565b547-574f-4c6c-aa4b-8a5f9cb5f84a", "tierName": "Starter", "priceEurMonthly": "9.00" }, { "serviceId": "0565b547-574f-4c6c-aa4b-8a5f9cb5f84a", "tierName": "Creator", "priceEurMonthly": "25.00" }, { "serviceId": "0565b547-574f-4c6c-aa4b-8a5f9cb5f84a", "tierName": "Team", "priceEurMonthly": "50.00" }, { "serviceId": "cab10b8f-1a87-4cb1-9eae-c78d06933b49", "tierName": "Free", "priceEurMonthly": "0.00" }, { "serviceId": "cab10b8f-1a87-4cb1-9eae-c78d06933b49", "tierName": "Personal", "priceEurMonthly": "4.00" }, { "serviceId": "cab10b8f-1a87-4cb1-9eae-c78d06933b49", "tierName": "Premium", "priceEurMonthly": "8.00" }, { "serviceId": "cab10b8f-1a87-4cb1-9eae-c78d06933b49", "tierName": "Business", "priceEurMonthly": "25.00" }, { "serviceId": "6073324d-6e64-4ada-85fb-aef2299521af", "tierName": "Free", "priceEurMonthly": "0.00" }, { "serviceId": "e1030af7-7ee8-4bab-8ece-bb32d9142c4e", "tierName": "Free", "priceEurMonthly": "0.00" }, { "serviceId": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9", "tierName": "Self-hosted (open source)", "priceEurMonthly": "0.00" }, { "serviceId": "d1a971d4-66e4-4f99-b49a-5c2fbabd40c9", "tierName": "meet.jit.si (public hosted)", "priceEurMonthly": "0.00" }, { "serviceId": "768c092a-97cd-4e1f-9b28-51dc59f68959", "tierName": "Basic (Free)", "priceEurMonthly": "0.00" }, { "serviceId": "768c092a-97cd-4e1f-9b28-51dc59f68959", "tierName": "Pro", "priceEurMonthly": "13.99" }, { "serviceId": "768c092a-97cd-4e1f-9b28-51dc59f68959", "tierName": "Business", "priceEurMonthly": "18.99" }, { "serviceId": "1b342130-fdab-4b9b-ac97-87058d39cb1a", "tierName": "Microsoft Teams (free)", "priceEurMonthly": "0.00" }, { "serviceId": "1b342130-fdab-4b9b-ac97-87058d39cb1a", "tierName": "Microsoft Teams Essentials", "priceEurMonthly": "4.20" }, { "serviceId": "1b342130-fdab-4b9b-ac97-87058d39cb1a", "tierName": "Microsoft 365 Business Basic", "priceEurMonthly": "6.00" }, { "serviceId": "1b342130-fdab-4b9b-ac97-87058d39cb1a", "tierName": "Microsoft 365 Business Standard", "priceEurMonthly": "12.50" }, { "serviceId": "04a52a12-967d-4ed3-aa11-2a4d7d285cbb", "tierName": "Free", "priceEurMonthly": "0.00" }, { "serviceId": "04a52a12-967d-4ed3-aa11-2a4d7d285cbb", "tierName": "Pro", "priceEurMonthly": "8.75" }, { "serviceId": "04a52a12-967d-4ed3-aa11-2a4d7d285cbb", "tierName": "Business+", "priceEurMonthly": "15.00" }, { "serviceId": "251d6595-d725-4ba2-a51b-42db2ec17db4", "tierName": "Free (included with Apple hardware)", "priceEurMonthly": "0.00" }, { "serviceId": "54fecb34-a5af-481e-95ee-bfc9baf6d525", "tierName": "Free", "priceEurMonthly": "0.00" }, { "serviceId": "7a263049-c560-4e1f-b143-e639e22c5ead", "tierName": "Personal", "priceEurMonthly": "16.00" }, { "serviceId": "7a263049-c560-4e1f-b143-e639e22c5ead", "tierName": "Business", "priceEurMonthly": "23.00" }, { "serviceId": "831de1b0-4b82-4854-909b-c085ab265084", "tierName": "Free (for writers and free newsletters)", "priceEurMonthly": "0.00" }, { "serviceId": "831de1b0-4b82-4854-909b-c085ab265084", "tierName": "Paid (10% of subscription revenue, e.g. €5/month subscriber = €0.50 to Substack)", "priceEurMonthly": "0.00" }, { "serviceId": "800c082c-af5a-4407-af43-a8177962d4b3", "tierName": "Light", "priceEurMonthly": "17.00" }, { "serviceId": "800c082c-af5a-4407-af43-a8177962d4b3", "tierName": "Core", "priceEurMonthly": "29.00" }, { "serviceId": "f1726a97-7cfa-4e41-b529-c4762118d11a", "tierName": "Free (self-hosted software)", "priceEurMonthly": "0.00" }, { "serviceId": "f1726a97-7cfa-4e41-b529-c4762118d11a", "tierName": "Hosting cost (varies by provider)", "priceEurMonthly": "5.00" }, { "serviceId": "d137368f-24cf-4728-828f-6d3c73dd03e7", "tierName": "Proton Free", "priceEurMonthly": "0.00" }, { "serviceId": "d137368f-24cf-4728-828f-6d3c73dd03e7", "tierName": "Proton Drive Plus", "priceEurMonthly": "3.99" }, { "serviceId": "d137368f-24cf-4728-828f-6d3c73dd03e7", "tierName": "Proton Unlimited", "priceEurMonthly": "9.99" }, { "serviceId": "b311c3ac-7396-4a6d-a0e4-685b92faae5d", "tierName": "Free (self-hosted Matrix)", "priceEurMonthly": "0.00" }, { "serviceId": "b311c3ac-7396-4a6d-a0e4-685b92faae5d", "tierName": "Element One (managed hosting)", "priceEurMonthly": "5.00" }, { "serviceId": "7cdd6a9d-0a91-4c78-991b-c0d7b065dd71", "tierName": "Free", "priceEurMonthly": "0.00" }, { "serviceId": "10cfed88-641a-4267-b566-21b74d019545", "tierName": "Free", "priceEurMonthly": "0.00" }, { "serviceId": "6e69cb04-3ecc-4174-b0f2-a75c438f185f", "tierName": "Starter (100 searches/month)", "priceEurMonthly": "5.00" }, { "serviceId": "6e69cb04-3ecc-4174-b0f2-a75c438f185f", "tierName": "Professional (unlimited)", "priceEurMonthly": "10.00" }, { "serviceId": "d30271ea-853e-4909-87e0-94c5532df545", "tierName": "Free", "priceEurMonthly": "0.00" }, { "serviceId": "d30271ea-853e-4909-87e0-94c5532df545", "tierName": "Google Workspace Business Starter", "priceEurMonthly": "6.00" }, { "serviceId": "d30271ea-853e-4909-87e0-94c5532df545", "tierName": "Google Workspace Business Standard", "priceEurMonthly": "12.00" }, { "serviceId": "96a65b88-3c28-4d93-8ac2-e99256f2bc22", "tierName": "Free", "priceEurMonthly": "0.00" }, { "serviceId": "84211f4b-0841-4745-9726-3b1f3ac8c989", "tierName": "Free (consumer)", "priceEurMonthly": "0.00" }, { "serviceId": "0b93706d-5f36-48cb-8ffb-500bfa176cc5", "tierName": "Proton Free", "priceEurMonthly": "0.00" }, { "serviceId": "0b93706d-5f36-48cb-8ffb-500bfa176cc5", "tierName": "Proton Unlimited", "priceEurMonthly": "9.99" }, { "serviceId": "82b0f93c-a208-4b55-b351-8dde1ba67edd", "tierName": "Tuta Free", "priceEurMonthly": "0.00" }, { "serviceId": "82b0f93c-a208-4b55-b351-8dde1ba67edd", "tierName": "Tuta Revolutionary", "priceEurMonthly": "3.00" }, { "serviceId": "8481545c-8d43-4288-aca1-8b09b0643805", "tierName": "Individual (includes email + calendar)", "priceEurMonthly": "3.00" } ] }