Compliance
Do you use subprocessors, and how are customers notified of changes?
How to answer this security questionnaire question, with an expert response your security or GRC team can adapt.Expert answer
Maintain a public, current subprocessor list identifying each vendor, its function, and its processing location, and commit to advance notice — typically 30 days — before adding or replacing a subprocessor, with a customer right to object. Confirm that every subprocessor is bound by data-protection terms at least as protective as your own DPA and passes your vendor-risk assessment before onboarding.Answer every security questionnaire in minutes
Wolfia drafts accurate, cited answers to security questionnaires and RFPs from your existing documentation. See it work on your own questions.Book a demoRelated compliance questions
Do you have a formal Information Security Policy?Do you have a documented incident response plan?What security awareness training do employees receive?Do you have a business continuity plan?Do you have cyber insurance coverage?How do you manage third-party vendor risk?
Browse the full security questionnaire question library