Monitor PostHog compliance pages

Open-source product analytics platform — events, session replay, feature flags, A/B testing, surveys, and LLM observability. Self-hostable or cloud.

PostHog publishes several compliance and legal pages that change over time. Under GDPR Article 28, data controllers using PostHog as a processor must continuously verify that "sufficient guarantees" remain in place — which means tracking changes to these pages as they happen. Below are the 4 most relevant pages, what typically changes on each, and ready-to-paste monitoring prompts.

Monitor all 4 pages automatically

Choose the pages that matter most and get an alert when something meaningful changes. The free plan covers 3 monitors.

Start with 3 free monitors →

Pages to monitor

Sub-processor list

https://posthog.com/subprocessors ↗

Typical change frequency: quarterly

What to monitor

  • AWS regional changes (US vs EU Cloud)
  • Session replay storage sub-processors
  • Feature flag delivery CDN sub-processors
  • LLM observability partners

Suggested monitoring prompt

Alert me when PostHog updates sub-processors, especially regional infrastructure and session replay additions. Report name and purpose.

Data Processing Agreement

https://posthog.com/dpa ↗

Typical change frequency: yearly

What to monitor

  • Changes distinguishing EU Cloud vs US Cloud vs self-hosted
  • Updates to retention defaults and configuration
  • Modifications to session replay data provisions
  • Transfer mechanism changes

Suggested monitoring prompt

Monitor the PostHog DPA for changes to EU/US Cloud distinctions, retention, session replay, or transfer mechanisms.

Privacy policy

https://posthog.com/privacy ↗

Typical change frequency: yearly

What to monitor

  • Changes to session replay data processing
  • Updates to AI/LLM observability data handling
  • New data sharing for product improvement
  • Changes to telemetry from self-hosted instances

Suggested monitoring prompt

Alert me when PostHog changes session replay, LLM observability, or telemetry data practices. Ignore minor editorial changes.

Status page

https://www.posthogstatus.com/ ↗

Typical change frequency: weekly

What to monitor

  • Event ingestion delays (EU and US Cloud separately)
  • Session replay availability
  • Feature flag decision endpoint latency
  • Dashboard and insight query issues

Suggested monitoring prompt

Alert me on PostHog incidents affecting ingestion, replay, feature flags, or queries — distinguish EU Cloud from US Cloud in the report. Ignore minor issues.

Compliance certifications

SOC 2 Type IIISO 27001HIPAA (eligible)GDPR

Data location

Hosting locations: United States, European Union, Self-hostable anywhere

EU-US Data Privacy Framework: Certified

Related

Ready to start monitoring PostHog?

Set up monitoring free →