Data Privacy

Vendor data risk checklist

See how much of your vendor data governance is documented — and where the gaps are — before you sign the next contract.

Data Privacy · Free
Vendor governance checklist

Answer each question based on what you have documented today — not what you intend to do later.

Context only — vendor count does not change your coverage score.

Coverage snapshot
Coverage tier
Significant gaps
Coverage index
6 / 16

Some vendor governance is on file, but several areas still need documentation before your next contract review.

Gaps to review

  • DPAs missing for some key vendors
  • Data storage regions only partly documented
  • Sub-processor review incomplete
  • Offboarding process informal only — not written down
  • Security review incomplete (encryption, access controls)

Next step: walk through the vendor vetting workflow to turn these gaps into written agreements, review notes, and offboarding checklists before your next contract signature.

This checklist measures how much vendor governance you have documented — not a legal verdict on your compliance status.

Disclosure: Some links on this page are affiliate links. If you sign up through them, TechEd Analyst may earn a commission at no extra cost to you. We only list tools we consider relevant to the task above.

Related tool categories

  • data processing agreements
  • contract management
  • vendor management

Turn this into a working document

This tool gives you a planning number. The AI Use Register Kit ($49, one-time) turns it into something your team can use today: list every AI tool your team uses, decide what data can go into each one, and turn those decisions into a short usage policy your staff sign.