Bitdefender vs Bitwarden

Bitdefender is a Romanian cybersecurity company — EU member state jurisdiction, GDPR enforced by the Romanian DPA — with ISO 27001 and SOC2 Type 2 certifications, an explicit no-data-selling commitment, an anonymisation-first principle for technical data, and no advertising partner data sharing; the main caveats are that individual data processors are not named in the policy, technical security data can be retained for up to ten years, the website privacy policy explicitly provides no advance notice before changes, and marketing emails run on a legitimate interest basis for five years post-cancellation.

Bitwarden is an open source password manager that encrypts your vault on-device so it cannot read your passwords — but it uses Google Analytics on both the website and service, is a US company subject to FTC jurisdiction and government requests, collects meaningful amounts of administrative data for marketing and product improvement, and uses legitimate interest as a legal basis for several secondary data uses.