Vendor Risk
Subservice organizations, their criticality and the assurance reports on file (CC9.2).
Vendors
5
5
Approved
3
3
Critical / high
3
3
Missing reports
2
2
All vendors
| ID | Vendor | Service | Criticality | SOC 2 report | Last review | Owner | Status | Actions |
|---|---|---|---|---|---|---|---|---|
| VND-001 | Amazon Web Services | Cloud hosting | Critical | Received | Mar 02, 2026 | Arjun Rao | Approved | |
| VND-002 | Datadog | Observability | High | Received | Apr 18, 2026 | Daniel Chen | Approved | |
| VND-003 | Segment | Customer data pipeline | High | Requested | Jan 22, 2026 | Arjun Rao | Under review | |
| VND-004 | Workday | HR system | Medium | Received | Feb 10, 2026 | Sara Iqbal | Approved | |
| VND-005 | Zendesk | Support desk | Medium | Not provided | — | Priya Menon | Escalated |