Contract checks
Each data processing contract is checked for what it must include. Missing terms show up as gaps.
s.8(2): processing only under a valid contractGovern & prove · Vendor Risk
Your suppliers' mistakes are still yours
Every supplier that handles personal data for you: the contract terms the Act needs, how quickly they must tell you about a breach, and who they share the data with.
What it does
Vendor Risk in practice
Who they share with
Who your supplier shares data with, and who those companies share it with. You stay responsible all the way down.
Reporting times that fit
Suppliers' notice periods are compared with your own breach deadline, so you can see which contracts leave you no time to act.
Also included
The details that matter
- Deletion requests are passed on to suppliers that hold a copy.
- Linked to the data map, so you can see what each supplier receives.
Can we contract our liability away to a vendor?
No. You stay responsible for what a supplier does with the data you give them. A contract can decide what you claim back from them, not what the Board holds you to.
Works with
Better together
Every product uses the same map of your personal data, so each one makes the others more useful.
See Vendor Risk on your own systems
A 45-minute working session. Bring a notice or consent form you use today and we will check it with you.