# Vendor Compliance Evidence Finder (`orbiscribe/vendor-compliance-evidence-finder`) Actor Find public vendor trust, security, privacy, terms, DPA, subprocessor, status, cookie, and accessibility evidence pages from company domains. - **URL**: https://apify.com/orbiscribe/vendor-compliance-evidence-finder.md - **Developed by:** [Orbiscribe Labs](https://apify.com/orbiscribe) (community) - **Categories:** Business, Automation, Developer tools - **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, NaN bookmarks - **User rating**: No ratings yet ## Pricing $10.00 / 1,000 vendor evidence pages This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events. Learn more: https://docs.apify.com/platform/actors/running/actors-in-store#pay-per-event ## What's an Apify Actor? Actors are a software tools running on the Apify platform, for all kinds of web data extraction and automation use cases. In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours, and optionally produces a well-defined JSON output, datasets with results, or files in key-value store. In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server. Actors are written with capital "A". ## How to integrate an Actor? If asked about integration, you help developers integrate Actors into their projects. You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready. The best way to integrate Actors is as follows. In JavaScript/TypeScript projects, use official [JavaScript/TypeScript client](https://docs.apify.com/api/client/js.md): ```bash npm install apify-client ``` In Python projects, use official [Python client library](https://docs.apify.com/api/client/python.md): ```bash pip install apify-client ``` In shell scripts, use [Apify CLI](https://docs.apify.com/cli/docs.md): ````bash # MacOS / Linux curl -fsSL https://apify.com/install-cli.sh | bash # Windows irm https://apify.com/install-cli.ps1 | iex ```bash In AI frameworks, you might use the [Apify MCP server](https://docs.apify.com/platform/integrations/mcp.md). If your project is in a different language, use the [REST API](https://docs.apify.com/api/v2.md). For usage examples, see the [API](#api) section below. For more details, see Apify documentation as [Markdown index](https://docs.apify.com/llms.txt) and [Markdown full-text](https://docs.apify.com/llms-full.txt). # README ## Vendor Compliance Evidence Finder Find public vendor trust, security, privacy, terms, DPA, subprocessor, status, cookie, and accessibility evidence pages from company domains. This Actor is for procurement, security, vendor-risk, legal-ops, compliance, and RevOps teams that need a quick public evidence pack before onboarding, renewing, reviewing, or monitoring vendors. It does not log in, bypass trust-center gates, or make legal decisions. It finds public pages, classifies them, extracts evidence snippets, and stores content hashes so scheduled runs can flag changed pages. ### What You Get Each result is one public evidence page: - vendor and domain - page type such as `security`, `privacy_policy`, `terms`, `dpa`, `subprocessors`, `status`, or `trust_center` - evidence URL and page title - confidence score - matched compliance/security terms - evidence snippets - public emails visible on the page - content hash and `changedSinceLastRun` - source and compliance notes ### Input Run with defaults for a demo. For live results, set `dryRun` to `false`. ```json { "vendorDomains": ["apify.com", "openai.com"], "vendorUrls": [], "maxPagesPerVendor": 12, "includeCommonPaths": true, "includeHomepageLinks": true, "compareToPreviousRun": true, "dryRun": false } ```` Use `vendorUrls` when you already know the vendor's trust center, subprocessor, DPA, security, or privacy URL. ### Output ```json { "vendor": "example-saas.com", "pageType": "subprocessors", "url": "https://example-saas.com/subprocessors", "confidence": 88, "evidenceTerms": ["subprocessor", "personal data", "gdpr"], "changedSinceLastRun": true } ``` ### Why This Is Not A Generic Page Monitor Generic page monitors tell you that text changed. This Actor is built for a specific procurement/security workflow: - discover the relevant vendor pages from a domain - classify page type - extract evidence terms and snippets - produce a CSV/API-ready evidence matrix - keep content hashes for scheduled change checks ### Pricing Suggestion Use pay per event: - event: `vendor-evidence-page` - suggested price: `$0.01` per emitted evidence page - dry runs free - first 25 live evidence records free for free-plan users where Apify runtime billing context allows it This is priced as a vendor-risk evidence pack, not as raw crawling. ### Limits - Gated trust centers are not accessed. - Some vendors use custom legal portals or PDFs that this first version may not parse deeply. - Page classification is deterministic and evidence-based, not legal advice. - Users should verify source pages before making procurement, security, or compliance decisions. ### Good Use Cases - vendor onboarding evidence collection - subprocessor page monitoring - privacy/terms/security page discovery - procurement questionnaire prep - scheduled checks for changed public evidence pages # Actor input Schema ## `vendorDomains` (type: `array`): Company domains to scan for public compliance evidence pages. ## `vendorUrls` (type: `array`): Optional exact URLs to fetch, such as a known trust center, subprocessor page, DPA, or security page. ## `maxPagesPerVendor` (type: `integer`): Maximum candidate pages to fetch per vendor domain. ## `includeCommonPaths` (type: `boolean`): Try common URLs such as /security, /privacy, /terms, /subprocessors, and /trust. ## `includeHomepageLinks` (type: `boolean`): Fetch the homepage and add links that look like trust, security, privacy, legal, or status pages. ## `compareToPreviousRun` (type: `boolean`): Store content hashes and mark records changed when the same evidence URL changes on later runs. ## `snapshotStoreName` (type: `string`): Key-value store name used for content hashes when compareToPreviousRun is enabled. ## `requestTimeoutMs` (type: `integer`): Per-page fetch timeout in milliseconds. ## `dryRun` (type: `boolean`): Emit deterministic demo evidence without network calls or custom pay-per-event charges. ## Actor input object example ```json { "vendorDomains": [ "apify.com", "openai.com" ], "vendorUrls": [], "maxPagesPerVendor": 12, "includeCommonPaths": true, "includeHomepageLinks": true, "compareToPreviousRun": true, "snapshotStoreName": "vendor-compliance-evidence-snapshots", "requestTimeoutMs": 10000, "dryRun": true } ``` # Actor output Schema ## `results` (type: `string`): No description ## `evidenceExport` (type: `string`): No description ## `runSummary` (type: `string`): No description # API You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup. ## JavaScript example ```javascript import { ApifyClient } from 'apify-client'; // Initialize the ApifyClient with your Apify API token // Replace the '' with your token const client = new ApifyClient({ token: '', }); // Prepare Actor input const input = {}; // Run the Actor and wait for it to finish const run = await client.actor("orbiscribe/vendor-compliance-evidence-finder").call(input); // Fetch and print Actor results from the run's dataset (if any) console.log('Results from dataset'); console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`); const { items } = await client.dataset(run.defaultDatasetId).listItems(); items.forEach((item) => { console.dir(item); }); // 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs ``` ## Python example ```python from apify_client import ApifyClient # Initialize the ApifyClient with your Apify API token # Replace '' with your token. client = ApifyClient("") # Prepare the Actor input run_input = {} # Run the Actor and wait for it to finish run = client.actor("orbiscribe/vendor-compliance-evidence-finder").call(run_input=run_input) # Fetch and print Actor results from the run's dataset (if there are any) print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"]) for item in client.dataset(run["defaultDatasetId"]).iterate_items(): print(item) # 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start ``` ## CLI example ```bash echo '{}' | apify call orbiscribe/vendor-compliance-evidence-finder --silent --output-dataset ``` ## MCP server setup ```json { "mcpServers": { "apify": { "command": "npx", "args": [ "mcp-remote", "https://mcp.apify.com/?tools=orbiscribe/vendor-compliance-evidence-finder", "--header", "Authorization: Bearer " ] } } } ``` ## OpenAPI specification ```json { "openapi": "3.0.1", "info": { "title": "Vendor Compliance Evidence Finder", "description": "Find public vendor trust, security, privacy, terms, DPA, subprocessor, status, cookie, and accessibility evidence pages from company domains.", "version": "0.1", "x-build-id": "6Ebc3Scyd2mbchFVz" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/orbiscribe~vendor-compliance-evidence-finder/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-orbiscribe-vendor-compliance-evidence-finder", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/orbiscribe~vendor-compliance-evidence-finder/runs": { "post": { "operationId": "runs-sync-orbiscribe-vendor-compliance-evidence-finder", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/orbiscribe~vendor-compliance-evidence-finder/run-sync": { "post": { "operationId": "run-sync-orbiscribe-vendor-compliance-evidence-finder", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "vendorDomains": { "title": "Vendor domains", "type": "array", "description": "Company domains to scan for public compliance evidence pages.", "default": [ "apify.com", "openai.com" ] }, "vendorUrls": { "title": "Known evidence URLs", "type": "array", "description": "Optional exact URLs to fetch, such as a known trust center, subprocessor page, DPA, or security page.", "default": [] }, "maxPagesPerVendor": { "title": "Max pages per vendor", "minimum": 1, "maximum": 50, "type": "integer", "description": "Maximum candidate pages to fetch per vendor domain.", "default": 12 }, "includeCommonPaths": { "title": "Try common compliance paths", "type": "boolean", "description": "Try common URLs such as /security, /privacy, /terms, /subprocessors, and /trust.", "default": true }, "includeHomepageLinks": { "title": "Discover homepage links", "type": "boolean", "description": "Fetch the homepage and add links that look like trust, security, privacy, legal, or status pages.", "default": true }, "compareToPreviousRun": { "title": "Compare to previous run", "type": "boolean", "description": "Store content hashes and mark records changed when the same evidence URL changes on later runs.", "default": true }, "snapshotStoreName": { "title": "Snapshot store name", "type": "string", "description": "Key-value store name used for content hashes when compareToPreviousRun is enabled.", "default": "vendor-compliance-evidence-snapshots" }, "requestTimeoutMs": { "title": "Request timeout", "minimum": 1000, "maximum": 30000, "type": "integer", "description": "Per-page fetch timeout in milliseconds.", "default": 10000 }, "dryRun": { "title": "Dry run", "type": "boolean", "description": "Emit deterministic demo evidence without network calls or custom pay-per-event charges.", "default": true } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } } } ```