We re-check published residency, subprocessor and certification pages and log every change. One email when something we track changes — nothing else.
Email only. Unsubscribe in one click from any email. We never share the list with vendors.
“| US | US | | Canada | Canada | | UK | UK | | France, Ireland, Belgium | France, EU | | Germany, Austria, Netherlands, Switzerland | Germany, EU |”learn.microsoft.com
“In the US, data is replicated between two data centers to keep data current. However, data never leaves a geography.”learn.microsoft.com
“Dragon Copilot is an “EU Data Boundary Service” and stores and processes Customer Data within the EU Data Boundary”learn.microsoft.com
“Dragon Copilot's AI/ML models are trained solely on anonymized data.”learn.microsoft.com
“Microsoft uses subprocessors to process Customer Data on Microsoft's behalf in its provision of Dragon Copilot. These subprocessors are disclosed in in the Health and Life Sciences Subprocessor list.”learn.microsoft.com
“Microsoft Azure supports compliance efforts related to more than 65 national, regional, and industry-specific requirements governing the collection and use of individuals' data”learn.microsoft.com
“Dragon Copilot embedded – EHR partners can integrate Dragon Copilot capabilities to record and review an encounter, surface information and automate tasks directly in their EHR.”learn.microsoft.com
“| US | US | | Canada | Canada | | UK | UK | | France, Ireland, Belgium | France, EU | | Germany, Austria, Netherlands, Switzerland | Germany, EU |”learn.microsoft.com
Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.
“In the US, data is replicated between two data centers to keep data current. However, data never leaves a geography.”learn.microsoft.com
“Dragon Copilot is an “EU Data Boundary Service” and stores and processes Customer Data within the EU Data Boundary”learn.microsoft.com
Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.
“Dragon Copilot's AI/ML models are trained solely on anonymized data.”learn.microsoft.com
Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.
“Microsoft Azure supports compliance efforts related to more than 65 national, regional, and industry-specific requirements governing the collection and use of individuals' data”learn.microsoft.com
Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.
The public tracker stays free — it always will. For organisations that need more, we’re building a professional tier: monitoring of your vendor list, change alerts with the evidence attached, audit-ready packs formatted for privacy impact assessments and automated-decision disclosures, and a quarterly analyst briefing.
From December 2026, the Privacy Act requires organisations to disclose automated decision-making in their privacy policies (Privacy and Other Legislation Amendment Act 2024, ADM transparency provisions) — which means knowing, on an ongoing basis, exactly what your AI vendors run and where. That’s what this register is for.
Founding membership is limited to the first 20 organisations and locks founding pricing permanently. Register interest now — founding members get first access and shape what we build.
Registering interest is not a purchase or commitment. The free public tracker is unchanged.
Are we missing something, or has this changed? Vendors and their representatives can submit a correction and we will update the entry, note the change and credit the source. Corrections are typically actioned within 2 business days.
Submit a correction