Is the Trust Center the source of binding legal terms?

No. The Trust Center is an index of public diligence materials and buyer-facing explanations. Binding obligations live in signed customer agreements, the Privacy Policy, the Terms of Use, and any applicable order form or data processing addendum.

What diligence materials can qualified buyers request?

Depending on the feed and use case, buyers can request source-category summaries, field-level dictionaries, delivery manifests, sample checksums, refresh cadence documentation, retention and deletion terms, and security-process summaries.

Where should security researchers report vulnerabilities?

Security researchers should follow the instructions in /.well-known/security.txt and the public SECURITY.md policy. The Trust Center links to those public disclosure materials.

Does GSDSI publish subprocessors publicly?

Subprocessor and vendor details are provided where appropriate through NDA-scoped diligence or customer agreement workflows. Public pages summarize the control areas without exposing sensitive operational details.

Trust Center

Sourcing, Security and Privacy Trust

A public index of GSDSI trust surfaces for enterprise and federal buyers evaluating provenance, privacy rights, security disclosure, and delivery controls.

Sourcing and provenance

GSDSI documents source categories, permitted-use boundaries, refresh cadence, and lineage artifacts during qualified buyer diligence.

Open resource

Privacy rights and opt-outs

Consumer rights workflows are published through the Privacy Policy, Privacy Center, and Do Not Sell surfaces, including GPC handling where required.

Open resource

Data broker registrations

State registration index for California, Vermont, Texas, Oregon and Connecticut data-broker laws, updated when compliance confirms filing numbers.

Open resource

Consumer health data

Standalone Consumer Health Privacy Policy for MHMDA and related state laws. Not HIPAA PHI on the public catalog.

Open resource

Security and disclosure

Public vulnerability disclosure instructions are available through security.txt and the public SECURITY.md policy.

Open resource

Data delivery controls

Delivery can be scoped through SFTP, S3, Snowflake secure share, API, or governed pilot workflows with manifests and checksums.

Open resource

Review cadence

Public catalog claims and machine-readable discovery files (llms.txt) are reviewed on catalog changes and at least quarterly for material product-count or metric drift.

Open resource

Contract and compliance scope

Binding terms live in signed customer agreements, the Privacy Policy, and the Terms of Use; public trust content is informational.

Open resource

What buyers can request under NDA

Depending on use case and contract scope, qualified buyers can request field-level dictionaries, source-category summaries, sample manifests, delivery checksums, deletion and retention terms, and security-process summaries. Certification reports, subprocessors, and incident workflows are provided where available and appropriate for the transaction.

Request diligence materials Review sourcing methodology Data glossary Vendor comparisons

Trust Center FAQ

Practical answers about public documentation, NDA-scoped diligence, and where binding terms live.

Is the Trust Center the source of binding legal terms?: No. The Trust Center is an index of public diligence materials and buyer-facing explanations. Binding obligations live in signed customer agreements, the Privacy Policy, the Terms of Use, and any applicable order form or data processing addendum.
What diligence materials can qualified buyers request?: Depending on the feed and use case, buyers can request source-category summaries, field-level dictionaries, delivery manifests, sample checksums, refresh cadence documentation, retention and deletion terms, and security-process summaries.
Where should security researchers report vulnerabilities?: Security researchers should follow the instructions in /.well-known/security.txt and the public SECURITY.md policy. The Trust Center links to those public disclosure materials.
Does GSDSI publish subprocessors publicly?: Subprocessor and vendor details are provided where appropriate through NDA-scoped diligence or customer agreement workflows. Public pages summarize the control areas without exposing sensitive operational details.