Kevin Yun

Segment's DPA is in the terms and its EU region is real. The compliance work sits in the destinations your data fans out to, and each one is yours.

Posted by Kevin Yun | 2026-08-22T06:05:43.358Z

Vercel's DPA applies to Enterprise and Pro plans only, and the objection window is five days. Your deployment processes whatever your app processes.

Posted by Kevin Yun | 2026-08-21T09:55:34.973Z

Airtable offers European data residency, but it covers base content and not everything else. Airtable names the excluded categories, and they matter.

Posted by Kevin Yun | 2026-08-21T09:49:12.329Z

Calendly's DPA is inside its Terms of Use with nothing to sign. The harder questions are your booking form and your connected calendar.

Posted by Kevin Yun | 2026-08-20T08:18:34.654Z

Cloudflare's DPA is public and versioned, and its localization controls are unusually granular. Both are more configurable than most vendors offer.

Posted by Kevin Yun | 2026-08-20T08:15:42.492Z

PostHog lets you host in Frankfurt, in Virginia, or on your own infrastructure. That choice changes the transfer question more than any clause does.

Posted by Kevin Yun | 2026-08-19T05:53:25.854Z

Zapier's DPA is automatic, and you can generate a signed copy. The harder question is what your zaps move, and where they move it to.

Posted by Kevin Yun | 2026-08-19T05:51:29.592Z

Hotjar's DPA sits inside its terms and cannot be signed. It suppresses keystrokes by default, and it is now part of Contentsquare.

Posted by Kevin Yun | 2026-08-18T17:42:52.134Z

Notion's DPA is incorporated by reference, so there is nothing to sign. The harder questions are subprocessors, AI, and what your workspace holds.

Posted by Kevin Yun | 2026-08-18T17:40:58.681Z