What is a sub-processor?
A third party we engage to process customer data on our behalf as part of providing the service: the cloud platform the service runs on, the provider that sends its transactional email, and so on. Each is bound by written terms that flow our obligations down.
How do we get the current list?
Ask for it under NDA at privacy@vantagepointgrc.com, or through your account contact; it comes with the data processing agreement. Changes are notified in advance so you can object before a new sub-processor touches your data.
What does this website itself use?
Microsoft Azure (hosting, and the contact and demo forms), Azure Communication Services (transactional email, including what those forms send us) and Google Analytics (only if you allow analytical cookies). Our own email and documents run on Microsoft 365.
How do we get the DPA and the questionnaires?
The standard data processing agreement, the SIG Lite and CAIQ responses and any bespoke due-diligence questionnaire are provided under NDA on request. Send the request to privacy@vantagepointgrc.com with the NDA you would like us to sign, or ask for ours.
Questions: security@vantagepointgrc.com for security,privacy@vantagepointgrc.com for data protection.