New: Privacy Analytics — measure your site without cookies or a consent banner. Start free →

Data Privacy

Vendor data risk checklist

See how much of your vendor data governance is documented — and where the gaps are — before you sign the next contract.

Data Privacy · Free

Vendor governance checklist

Answer each question based on what you have documented today — not what you intend to do later.

Vendors or tools that handle your data

Context only — vendor count does not change your coverage score.

Signed data processing agreements (DPAs) with key vendors

Know where each vendor stores or processes data (region)

Reviewed whether vendors sub-process to fourth parties

Documented offboarding / data-deletion when dropping a vendor

Reviewed vendor security posture (encryption, access controls)

Coverage snapshot

Coverage tier: Significant gaps
Coverage index: 6 / 16

Some vendor governance is on file, but several areas still need documentation before your next contract review.

Gaps to review

DPAs missing for some key vendors
Data storage regions only partly documented
Sub-processor review incomplete
Offboarding process informal only — not written down
Security review incomplete (encryption, access controls)

Next step: walk through the vendor vetting workflow to turn these gaps into written agreements, review notes, and offboarding checklists before your next contract signature.

This checklist measures how much vendor governance you have documented — not a legal verdict on your compliance status.

Disclosure: Some links on this page are affiliate links. If you sign up through them, TechEd Analyst may earn a commission at no extra cost to you. We only list tools we consider relevant to the task above.

Related tool categories

data processing agreements
contract management
vendor management

Document this in your operation

This calculator gives you a planning number. The guided workflow turns that into a working document your team can actually use — with steps, owners, and a deliverable you can share.

Open the guided workflow →

Do Not Sell My Data