# SaaSDossier

> Human-reviewed PDF security dossiers built from vendor-published documentation only. A structured, source-linked review of what a SaaS company has publicly published about its security, privacy, compliance, incident practice, subprocessors, and infrastructure.

SaaSDossier compiles a company's own published security and compliance documentation into a structured, source-linked PDF dossier. Each dossier reviews 43 fields. Every field is recorded as "Documented" (the vendor's own words, quoted and cited) or "Question surfaced" (not identified in the vendor-published sources reviewed — which does not establish absence of the control). Two independent extraction engines review the same documentation; findings are reconciled against the source and human-reviewed before release. Each dossier carries a SHA-256 integrity record.

A SaaSDossier is not an audit, certification, rating, or legal opinion, and it does not score the vendor.

## Products

- **Single Dossier** — $1,500. One human-reviewed PDF dossier for one company. Full 43-field ledger, gap register, source register, integrity record.
- **5-Dossier Stack Pack** — $6,500. You name your five vendors up front, from the released library or by request; each produced and human-reviewed before delivery. For teams or consultants reviewing a small SaaS stack.
- **10-Dossier Portfolio Pack** — $12,500. For a larger vendor stack. You name your ten vendors up front; each scoped, produced, and human-reviewed before delivery.

## Released dossiers

- Stripe — Dossier No. 001 · 35 / 43 fields documented · 8 questions surfaced · human-reviewed 17 Jun 2026
- HubSpot — Dossier No. 002 · 36 / 43 fields documented · 7 questions surfaced · human-reviewed 17 Jun 2026

## Available on request

Any company with a public security presence — for example Zoom, Notion, Slack. Requested dossiers are produced and human-reviewed before delivery.

## Sources

Vendor-owned and vendor-published documentation only: trust pages, security documentation, privacy and legal pages, DPAs, status pages, subprocessor lists, and published support or docs pages where relevant. No third-party reviews, news articles, or vendor opinions are used as evidence.

## Use cases

- Vendor-risk review at procurement or contract stage
- Due diligence for compliance frameworks (SOC 2, ISO 27001, GDPR)
- Source-linked third-party documentation evidence for procurement, GRC, or vCISO review

## Contact

- Email: contact@saasdossier.com
- Website: https://saasdossier.com

## Optional

- Pricing: https://saasdossier.com/pricing.json
- Sitemap: https://saasdossier.com/sitemap.xml