Vannus records that this vendor routes across several model providers — not captured by one. Every finding below is quoted to the vendor’s own document, or marked not disclosed where the vendor publishes nothing.
Microsoft PII detection and anonymization — automated sensitive data identification and scrubbing for compliance with GDPR, CCPA, and HIPAA before external LLM API interaction
nlp_engine_name: spacy ... model_name: en_core_web_lg
The quote above names one provider. The multi-provider finding rests on the vendor’s full disclosure — spaCy en_core_web_lg (configurable) — not on that line alone.
Not yet assessed. We publish a sovereignty position only where the vendor documents one — we do not infer it from a domain or a company name.
Taken from the vendor’s own published material. Vannus does not hold these reports and has not reviewed their scope or dates — ask the vendor for the current report before relying on any of them.
Vannus publishes a nine-dimension trust framework — data sovereignty, training privacy, compliance posture, operational resilience, exit portability, and more. The heaviest criterion asks whether the tool builds its own AI or resells someone else's model; where the vendor discloses it, the grade cites the vendor's own documentation. No paid placements — scoring is walled off from affiliate revenue. See the methodology →