How this Hub is curated
The Knowledge Hub is a curated reference. Every entry is selected and ordered against published criteria — not by payment, popularity, or relationship. This page sets out how.
Our principles
- Curated, not crowd-sourced. Nothing is self-published. Anyone may propose an addition or correction through our forms; every proposal is independently reviewed before it appears.
- Ranking is never for sale. Ordering within each list is neutral — alphabetical, by region, or by domain, as stated per list. We do not accept payment to be listed, to rank higher, or to be featured. Any advertising we ever carry will be clearly labelled and kept separate from the curated lists.
- Independence. We link to primary sources and home pages, not affiliate or referral links, so no commercial incentive shapes what we include.
- Affiliation is disclosed. Where a Vula group entity (VulaPri, Just DSARS, VulaCap) appears in a list, it is shown with a clear operator-affiliation note.
- No claim of completeness. We do not claim the lists are complete or error-free. If something is wrong, outdated, or missing, please tell us via Suggest a correction — every submission is reviewed before anything changes.
- Lawful basis for listings. Organisations are listed using publicly available business information in the legitimate interest of maintaining a professional reference resource; any listed organisation may object and request removal at any time.
What qualifies for each list, and how it is ordered
Regulators & Authorities
Official data protection and privacy supervisory authorities with a national or sub-national mandate, cross-referenced against recognised reference sources. Curated only. Cyber and AI bodies that are not data-protection authorities are listed separately as related bodies. Order: alphabetical by country (regions grouped); neutral.
Privacy Vendors & Tools
Organisations offering privacy, data-protection or AI-governance products, tooling or managed services, grounded in recognised privacy-tech and AI-governance taxonomies. Order: grouped by functional category and offering type, then alphabetical. No pay-to-list, no pay-to-rank. Just DSARS appears with an operator-affiliation disclosure.
Standards & Frameworks
Recognised standards and frameworks issued by standards bodies and authorities (for example ISO/IEC and NIST). Curated only; legislation is not included here. Order: by issuer, then reference; neutral.
Organisations & Guidance
Non-regulator organisations producing authoritative privacy and AI-governance guidance, research or convening — professional bodies, think tanks and standards-adjacent groups. Proposals reviewed before listing. Order: alphabetical; neutral.
Law, Consultancy & Training providers
Law firms, consultancies and training providers active in data protection, privacy and AI governance. An open list — proposals welcome and reviewed before listing. Order: grouped by type, then alphabetical. No paid placement. VulaPri and VulaCap appear with an operator-affiliation disclosure.
University Courses
Universities offering postgraduate degrees, certificates or executive programmes in privacy, data protection or AI governance, referenced to the official programme page. Order: grouped by region, then alphabetical; neutral.
Books
Published books of standing relevance to privacy, data protection and AI governance. We carry no purchase or affiliate links — by design, to protect independence and keep the page free of third-party tracking. Order: grouped by theme, then alphabetical; neutral.
Publications
Authoritative reports, opinions, guidance and research from regulators, expert bodies, academia and recognised professional institutes. We do not include legislation, frameworks/standards, or vendor marketing. Order: grouped by domain, then issuer/date. Recency: time-sensitive material (annual benchmarks, "state of" and survey reports) is kept to roughly the latest two years; regulator and expert-body guidance and opinions are retained regardless of age.