Vannus

Who legally controls your AI vendors?

Hosting is where your data sits. Control is who can be compelled to hand it over — and those are different questions. We establish the contracting entity behind each AI vendor, its country, and the governing law of its terms, quoted from the vendor's own documents. Paste your stack and see who controls it — free, no signup.

Our scores aren't for sale. We prove it in code · Corrections & right of reply.

376
AI vendors on record
252
grades cite vendor docs
0
vendors can pay for a finding

What Vannus is

Vannus is the jurisdiction record for AI vendors. For 376 AI tools it establishes who legally controls the vendor — the contracting entity a customer signs with, that entity's country, and the governing law of its terms — and therefore which government can compel disclosure of the data that vendor holds. It also records whether the vendor runs its own model, and whether it trains on your data.

What makes Vannus different from a directory: every grade that turns on which model a vendor runs traces to the vendor's own documentation. 252 of the 376 tools carry a citation to the vendor's published page. A further 98 were established to run no foundation model at all, so there is nothing to cite — that is an answer, not a gap. For the remaining 26 the product uses AI and the vendor does not name the provider, and the entry says exactly that. Every tool in the catalog now sits in one of those three states. We are not aware of another directory that publishes the source behind each grade — if you find one, tell us and we will say so here. Scoring is also structurally walled off from affiliate revenue — enforced by a test in the build, not promised in marketing.

The methodology weighs nine dimensions of trust: data sovereignty, allied infrastructure, training privacy, conditional privacy, compliance, operational resilience, exit portability, real-world utility, and a caution flag for material risks. The free catalog and the "grade my stack" tool cost nothing. A self-serve AI Subprocessor Jurisdiction Report on your own stack is a one-time $299. A Stack Jurisdiction Review, which establishes which of a vendor's several agreements binds you, starts at $1,500. A founder-led Concierge audit of a full AI stack is $7,500.

Vannus records what vendors publish about the entity you contract with and the governing law of its terms, quoted to the source. These are informational findings, not legal advice, not a legal conclusion, and not a representation that any government has taken or will take any action. Vannus is not a law firm. Operated by PRAXIS AI LLC.