Legal
Last updated: 12 September 2026
VendorDORA is a product published by PHABDEV, the sole proprietorship of Ferrante Fabrizio, registered in Italy.
PHABDEV is the data controller for the personal data described below, within the meaning of Regulation (EU) 2016/679 (GDPR).
The only personal data this site collects is what you type into the early-access form: your email address (required) and, optionally, your company name and role, plus which plan you expressed interest in and the date of your submission.
Purpose: to tell you when the DORA Vendor Toolkit becomes available, to send occasional updates about it, and to gauge whether there is enough demand to build it. We do not use your data for any other purpose, we do not sell it, and we do not build advertising profiles from it.
Legal basis: your consent (Art. 6(1)(a) GDPR), given by submitting the form. Where you provide a business email in the course of a professional enquiry, our legitimate interest in replying also applies (Art. 6(1)(f)).
This site sets no advertising or tracking cookies and runs no third-party analytics or advertising scripts. The interactive checklist stores your ticks only in your own browser session; that data never reaches us.
Submissions are stored in a managed PostgreSQL database and served through hosting infrastructure operated by our providers, acting as processors under Art. 28 GDPR. Data is hosted within the European Union. Should a transfer outside the EU become necessary, it will rely on the European Commission's Standard Contractual Clauses.
Until the product launches and for a maximum of 24 months from your submission, or until you ask us to delete it — whichever comes first. If the project is discontinued, the list is deleted.
You may request access, rectification, erasure, restriction, portability, and you may withdraw your consent or object to processing at any time. Write to phabdev@gmail.com and we will act within 30 days. One email removes you from the list entirely. You also have the right to lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali, gpdp.it) or the authority in your own country.
The checklists, sample answers and templates published here are documentation prepared from the public texts of Regulation (EU) 2022/2554 and its delegated and implementing acts. They are not legal advice, they are not a certification of compliance, and they do not create a professional relationship. No material on this site derives from any client's confidential questionnaire or documentation. Verify the current text of the regulation and have your own counsel review any contractual commitment before you sign it.