Core Listing Criteria
EU/EEA Origin
The service must be operated by an individual, team, or company based in an EU or EEA member state. For incorporated entities, we verify the legal registration and assess parent company ownership. For individual creators and early-stage projects, we verify the operator's EU/EEA residency.
GDPR Compliance
Services must demonstrate GDPR compliance through accessible Privacy Policies, Data Processing Agreements (DPA), and transparent data handling practices.
EU Data Residency
User data must be stored and processed within the EU/EEA. We verify infrastructure providers and data center locations to confirm no data leaves European jurisdiction.
US Cloud Act Assessment
We evaluate exposure to foreign jurisdiction data access laws, particularly the US Cloud Act. Services with US parent companies or infrastructure may still be listed with appropriate warnings.
Our Verification Process
What We Verify
- Legal entity registration and jurisdiction
- Parent company ownership structure
- US Cloud Act exposure assessment
- Infrastructure provider verification
- Data center locations
- Privacy Policy availability
- Data Processing Agreement (DPA)
- Terms of Service review
- Security certifications (ISO 27001, SOC 2)
Review Process
Ready to Submit?
If you know of a service that meets these criteria, we'd love to hear from you. Our team will review your submission and get back to you.
Suggest an Alternative