Vendor Change Evidence

If a vendor changes its privacy, terms, subprocessors, or security page, paste a dated before and after snapshot and get a portable review record — entirely in your browser.

Paste your two snapshots as JSON (url, captured_at, fetch_status, text):

Before

After

Don't have snapshots handy? — a small before/after pair with a real content change, so you can see the report shape before using your own.

What this is and isn't

Everything runs in your browser. The snapshots you paste are never uploaded — there is no server here to send them to.
This tool never contacts a vendor. You (or your own capture process) supply both dated snapshots; this only compares them.
It reports observations only — changed, unchanged, or inconclusive — and does not decide whether a contract, security posture, or compliance status changed. That judgment is yours.
Use fetch_status values other than "ok" (for example "timeout" or "blocked") when a capture failed. The report is marked inconclusive, never falsely stable.
Only anonymous, aggregate usage counts (for example "a comparison was run") may be recorded locally — never snapshot text or URLs.

Common questions

Does this fetch the vendor's page for me?

No. This tool never makes a network request to a vendor. You supply both snapshots — however you captured them — and this only compares the two. That keeps it usable for internal, access-controlled, or authenticated pages a public fetcher could never reach.

What counts as a valid snapshot?

A JSON object with four string fields: url (the page you captured), captured_at (an ISO 8601 timestamp), fetch_status ("ok" if the capture succeeded, anything else if it didn't), and text (the page content or a normalized extract of it).

Why "inconclusive" instead of "unchanged"?

If either capture failed (a non-"ok" fetch status) or the "after" timestamp is earlier than "before", the tool cannot honestly claim the page is stable — a failed fetch could be hiding a real change. It reports inconclusive rather than a false negative.

Is my snapshot text uploaded anywhere?

No. Comparison happens with JavaScript running in your own browser tab. This page makes no network request with your pasted content — there is nothing to intercept because nothing is sent. Only anonymous, aggregate usage counts like "a comparison was run" may be recorded locally, with an opt-out below.

Is there a command-line version?

Yes — the same comparison logic ships as a local Python CLI (src/vendor_change.py) in this tool's repository, for scripted or scheduled use. See the README for its usage.

How do I track when a vendor changes its subprocessors or privacy policy?

Already run a continuous vendor-risk platform? See how this tool compares to UpGuard.

Just planning to reload the page and compare it by eye? See what eyeballing two page loads actually misses.

Need to capture a vendor page now and diff it when you come back? The vendor change watch tool stores pasted captures in this browser and reports a section-by-section diff on the next paste — nothing uploaded.