Privacy Notice

1. Information We Collect

We collect information you provide directly to us, including:

• • Account information (name, email, organization)
• • Vendor and third-party information
• • Risk assessment data
• • Audit logs and system usage data

2. How We Use Information

We use the information we collect to:

• • Provide, maintain, and improve our services
• • Process vendor risk assessments
• • Generate compliance reports
• • Ensure security and prevent fraud
• • Comply with legal obligations

3. Data Security

We implement appropriate technical and organizational measures to protect personal data, including encryption at rest and in transit, access controls, and regular security audits.

4. Data Residency

Data is stored in the region specified during configuration (EU, UK, US, IL, or APAC). Cross-region data transfers are restricted and logged.

5. Data Retention

We retain personal data for as long as necessary to provide our services and comply with legal obligations. Audit logs are retained according to regulatory requirements.

6. Your Rights

Depending on your location, you may have the right to:

• • Access your personal data
• • Correct inaccurate data
• • Request deletion of your data
• • Object to processing
• • Data portability

7. Contact Us

For privacy-related inquiries, please contact our Data Protection Officer at:

Email: privacy@vendorrisk.example.com
Address: 123 Enterprise Way, Business District

Last updated: 10/31/2026