Guided demonstration
SYNTHETIC DEMONSTRATION — the vendor, documents, and change below are fixtures created for this demo. They are not a real vendor incident.
1. A monitored vendor
“Acme Hosting (synthetic)” — subprocessor page monitored daily.
2. The document before
Sub-processors Acme Hosting is a sub-processor. Data processed in the EU. We retain data for 30 days.
3. The document after — a verified change
Sub-processors Acme Hosting is a sub-processor. Data processed in the EU. NewCorp Analytics is a sub-processor. Data processed in the US. We retain data for 30 days.
4. Classification
VendorDelta classifies this as MATERIAL_CHANGE
(signal: subprocessor_change) — a new sub-processor with a new
processing location. Cosmetic edits are classified separately and never alert.
5. The customer notification
Subject: [VendorDelta] Material change — Acme Hosting (synthetic) A new sub-processor was added. Source: the vendor's official subprocessor page. Evidence: SHA-256 hashes of both versions and a snapshot reference are in your change history and monthly evidence package.
6. The evidence record
Every detection stores the source URL, retrieval timestamp, previous and current SHA-256 hashes, the classification, and a tamper-evident Git snapshot reference. Monthly packages export in JSON, CSV, HTML, and PDF.