Dependency-Track
by OWASP
On Dependency-Track's Privacy Page you can request and collect all the privacy and GDPR related information that Dependency-Track is providing.
The privacy policy by is a legal document or statement that discloses how Dependency-Track gathers, uses, discloses, and manges their customers' data.
Get the contact information for Dependency-Track privacy team or DPO.
Data transfers
The basis for OWASP sharing, adding, uploading, hosting, accessing or sending personal data out of Europe. Vendors can also add a description of their own impact assessment for data transfers.
Security information & certifications
Documentation of the security measures and practices OWASP has in place when handling personal data.
Personal data
A description of the personal data that OWASP is handling.
Data processing agreements
A DPA is a contract that defines clear roles and obligations for the sharing of personal data.
Data retention & deletion
Information about how long the data is kept for and when it's deleted.
Subprocessors
Subprocessors are companies that provide a service for OWASP and who has or potentially will get access to personal data of their customers.
Processing locations
Where personal data is processed by OWASP
Processing locations of OWASP's subprocessors
Where personal data is processed by the subprocessors of OWASP