ComplyDog Blog

PostHog lets you host in Frankfurt, in Virginia, or on your own infrastructure. That choice changes the transfer question more than any clause does.

Posted by Kevin Yun | 2026-08-19T05:53:25.854Z

Zapier's DPA is automatic, and you can generate a signed copy. The harder question is what your zaps move, and where they move it to.

Posted by Kevin Yun | 2026-08-19T05:51:29.592Z

Hotjar's DPA sits inside its terms and cannot be signed. It suppresses keystrokes by default, and it is now part of Contentsquare.

Posted by Kevin Yun | 2026-08-18T17:42:52.134Z

Notion's DPA is incorporated by reference, so there is nothing to sign. The harder questions are subprocessors, AI, and what your workspace holds.

Posted by Kevin Yun | 2026-08-18T17:40:58.681Z

Typeform's DPA sits inside its privacy policy and binds without a signature. The harder GDPR questions are about your form, your embed and your retention.

Posted by Kevin Yun | 2026-08-17T08:09:09.676Z

Supabase provides an Article 28 addendum that takes effect when you accept its terms, plus a dated subprocessor list. Your build is a separate question.

Posted by Kevin Yun | 2026-08-17T08:04:20.956Z

Build the library from questionnaires you've already completed, not from scratch. Here's the extraction, the governance, and how to stop it going stale.

Posted by Kevin Yun | 2026-08-16T07:34:47.254Z

An answer is a claim; evidence is what makes it checkable. Here are the six kinds of proof reviewers request, and what you should never send.

Posted by Kevin Yun | 2026-08-16T07:32:20.966Z

A first questionnaire usually takes two to three weeks of part-time work. The second takes a fraction. Here's where the time actually goes, and why.

Posted by Kevin Yun | 2026-08-15T06:06:23.230Z