What clients ask you for
Insurance, DPA, ISO 27001 or Cyber Essentials, sub-processor list, business continuity summary. Keep these live in Credbase and every RFP response takes minutes.
What you should ask your own vendors for
The mirror image. Freelancers: PI insurance and DPA. SaaS: SOC 2 or ISO 27001 and sub-processor list. Cloud infrastructure: security whitepaper and DPA.
A right-sized programme
- Register your top 20 vendors.
- Tier them by data sensitivity.
- Request core evidence via upload link.
- Set expiry reminders.
- Review annually, 30 minutes per tier 1.
Frequently asked questions
Put this into practice today.
Start a free Credbase workspace, add your first supplier and share a live evidence pack in ten minutes.