SaaSDossier

# SaaSDossier > The vendor's own record, made reviewable. A structured, source-linked record of what a SaaS vendor publishes about its security, privacy, and compliance. SaaSDossier compiles a vendor's own published security documentation into one PDF dossier of 55 fields across 10 domains. Every field is recorded in one of two states: "Documented" (found in the vendor's published sources, quoted and cited) or "Question surfaced" (Reviewed vendor-published sources did not establish the field for the evidence date. This does not establish absence of the control.). Documented findings are checked against the reviewed source record before release, and items not established in those sources are surfaced as buyer-ready follow-up questions. Each dossier includes a SHA-256 identifier tied to the reviewed evidence record used for that release. SaaSDossier publishes its own dated, source-linked evidence records for Stripe, HubSpot, OpenAI, and Anthropic, each built from that vendor's published sources as reviewed on the stated evidence date. It is authoritative on its own records, not on the vendors. A record can help a team prepare a vendor security questionnaire or DDQ, map reviewed vendor-published evidence to their own questionnaire or review lines, and see which questions remain for follow-up. SaaSDossier does not complete the questionnaire, make the third-party-risk decision, or approve the vendor. ## Dossiers - Stripe — Licensed Edition · Dossier No. 00 […truncated]