PrivacyBuilt / Guided task
Assess a data-handling vendor
Turn a supplier questionnaire into evidence, risk decisions and follow-up actions.
01 / Prepare
Bring the right context
- Service scope and the parties’ roles for each processing activity.
- Data categories, hosting locations and known subprocessors.
- Contracts, assurance evidence and retention or exit arrangements.
Use descriptions and evidence references; do not put personal data, credentials or confidential source material into public tools.
02 / Review
Use the tools with judgement
Vendor privacy quick check
5 minutesRun a preliminary twelve-point check and review its risk flags. The score does not certify a supplier.
Open Vendor privacy quick checkGlobal privacy law finder
4 minutesOrient the review to potentially relevant frameworks; confirm applicability and transfer requirements separately.
Open Global privacy law finder03 / Learn
Build the reasoning behind the review
04 / Act
Take a working record into your team
A supplier review record with evidence gaps, contractual actions and a reassessment date.
Download task checklist (.md)Markdown text file · No email required · Adapt to your context
Supporting templates and guidance
Before you close the task
- Request evidence for unanswered questions instead of treating missing answers as assurance.
- Agree contract changes and proportionate mitigation with accountable teams.
- Record the decision, approval authority and reassessment triggers.