Current policy
Vendor and Subprocessor Due Diligence
A review record for vendors that may operate the service or handle customer information.
Evidence needed for each vendor
A complete record identifies the service, necessity, information access, hosting or processing location, security materials, contract, confidentiality, incident duties, deletion, transfer basis, sub-vendors, review owner and reassessment date.
Candidates are not approvals
Software dependencies, configured email, billing and source-provider boundaries reveal possible vendor categories. They do not prove which company is selected in production, where it processes information or whether a subprocessor agreement has been approved.
Roster awaits confirmed deployment
This section states the current operating boundary. Meridax applies only the commitments written here and does not claim an unstated certification, provider arrangement, legal outcome, or service level.
Ask an enterprise question
Use the appropriate privacy, security, support, connector or sales route so the request reaches the right review.
Ask an enterprise question