Procurement pack

Security and data-protection documents for your review, sent to your inbox. We reply within one business day.

sent by email, not downloaded, so there is a record of what was shared, with whom, and when

Choose the documents

GDPR Data Processing AgreementController-processor agreement under GDPR Art. 28. You supply the legal entity, registered address and signatory before execution.Ready to sendSub-processor listFull roles, entities, regions and DPAs; vendor names are on /trust. 30 days’ notice before changes.Ready to sendData Protection Impact AssessmentArticle 35 framework, scoped to your stated processing before sending.Ready to sendBCM and DR policyBusiness continuity and disaster recovery, scoped to your deployment region and tier.Tailored to your deploymentInfoSec policy summaryInformation security controls; mirrors the security sections of /trust.Tailored to your deploymentSIG or CAIQ-lite questionnaireScoped to your cloud, regions and framework: CSA STAR, SIG Core, SIG Lite or CAIQ v4.Tailored to your deployment

Your name

Work email

Organisation optional

Deployment scope optional, helps with tailored documents

We reply within one business day.