Vendor and third party risk policy

How we assess and monitor the services we depend on, from hosting to WhatsApp.

Why we need it

Most breaches arrive through a supplier. Knowing who has our data and what they promised is the control.

What it must cover

01Vendor register
02Assessment before onboarding
03Data processing terms
04Annual review
05Exit plan for critical vendors

Rules it answers to

Personal Data Protection Law, Law No. 30 of 2018

Placeholder

This page holds the brief, not the document. When the document is written it replaces this page and the row in the directory turns green. Questions go to partners@machinaplus.com.