ProvMap – open source map of cloud provider compliance and jurisdiction risk

While building recorde.io (a GDPR/DUAA-compliant analytics tool for UK businesses) I kept having to manually audit every provider in my stack, digging through trust pages, checking if they're US-incorporated, cross-referencing compliance certs.

So I built the thing I needed: provmap.com

It's a free, open-source dataset of 55 cloud providers covering:

SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS certification status
Data residency by region
US CLOUD Act exposure
Parent company relationships
Verified sources for every data point

Stack: TanStack Start, Drizzle ORM, Postgres, Tailwind. Dataset is a git submodule so it can be contributed to independently.

Still early — would love feedback on what's missing, wrong, or useful. PRs welcome.