What larger buyers ask.
WHAT THEY TYPICALLY COVER
Where data is stored and processed Sub-processors Security measures Access control Breach notification Retention and deletion Certifications Transfer mechanisms Insurance
WHY THEY ASK
Their own obligations extend to their suppliers.
WHAT THAT MEANS
Your answers determine whether the deal proceeds.
WHAT TO PREPARE IN ADVANCE
A standard document answering the common questions.
WHY IN ADVANCE
Each questionnaire otherwise takes days.
WHAT TO ANSWER HONESTLY
Everything.
WHY
Answers become contractual, and false ones are discovered.
WHAT TO DO ABOUT SOMETHING YOU DO NOT HAVE
Say so, and describe what you do instead, or when you will have it.
WHY THAT FREQUENTLY SUFFICES
Buyers accept gaps with a plan more readily than evasion.
WHAT TO NEVER CLAIM
A certification you do not hold.
WHY
It is verifiable and it is fraud.
WHAT TO NEGOTIATE
Obligations you cannot meet Unlimited liability Audit rights you cannot support
WHAT TO ACCEPT WILLINGLY
Reasonable breach notification and security commitments.
WHAT TO KEEP CURRENT
The standard document.
WHAT TO TRACK
Which questions recur.
WHAT THAT INDICATES
What to build next.
