Vendor review
For your vendor review.
What we can share with your procurement team today, and what is still to come.
Available today
- Security and data
How records are isolated, encrypted, logged and deleted, set out in writing.
- A public status page
Uptime for each part of the service over 90 days, with every incident and how it ended.
- Terms in writing
Terms of Service, Privacy Policy and Acceptable Use, published with the date each took effect.
- Data stored in the United States
Records in a US database region, uploaded files in a bucket held to US storage.
- A software bill of materials
Every dependency listed in CycloneDX form, sent on request.
- Your questionnaire, answered
We fill in your security questionnaire honestly, including what is not in place yet.
Still to come
- SOC 2 Type II
An examination by an independent audit firm, once our controls have run long enough to be examined.
- Independent penetration test
Third-party testing against the production stack, with the report shared under NDA.
- Contract templates
A master services agreement and a data processing addendum. Until then, the Terms of Service apply.
Ask for any of it while you scope the work.