Duvaxa

Security & Compliance · Vendor security profile

VendorPassport

One link instead of forty questionnaires.

Give every customer one verified security and compliance profile, kept current, instead of filling the same questionnaire again and again.

SMB suppliersBanks and NBFCs with many vendorsIT services firms
passport
$ passport --help
→ Shareable passport page
→ Weekly re-checks
→ Buyer dashboard
What the product produces.
ReplacesRepeat questionnaires
KeptCurrent and verified
Shared asOne link
ForSuppliers and buyers

The problem

Suppliers fill the same security questionnaire again and again, and buyers can't tell when a supplier's security slips.

What it does

01

Externally verified checks: DMARC, SPF, TLS, security headers

02

DPDP and CERT-In declarations, plus GDPR DPA, data locations, sub-processors, SCCs/IDTA, CCPA and APP 8 for buyers abroad

03

Domain ownership proof through DNS

04

Weekly re-verification with history

05

Buyer dashboard with alerts

How it works

  1. Supplier adds its domain and proves ownership
  2. Checks run and the passport is published
  3. Buyers follow suppliers and get alerts

Works with

ISO 27001SOC 2CERT-InDPDPGDPR

Your data

  • You decide what goes into the profile.
  • Customers get one current link instead of a spreadsheet.
  • Evidence is dated, so buyers can see it is current.

Who it's for

SMB suppliersBanks and NBFCs with many vendorsIT services firms

Questions

Why would buyers accept it?

Because it's verified and current, which a questionnaire answered once a year is not.

Who sees the profile?

Whoever you send the link to; you decide what it contains.

Related

Often used with VendorPassport

See VendorPassport on your own data

A 30-minute call. We run the product on your export, repository or document and walk you through the results.

Book a demo