For critical vendors without a SOC 2 report that have access to PYRANA.ai data or affect PYRANA.ai system security, PYRANA.ai performs a vendor risk assessment quarterly so that vendor risk, performance, service delivery, and security compliance are evaluated regularly.

For critical vendors that do not have a SOC 2 report

— Pyrana Vendor Management Policy.pdf

but that have access to PYRANA.ai data or that impact the security of PYRANA.ai system

— Pyrana Vendor Management Policy.pdf

a quarterly vendor risk assessment is performed.

— Pyrana Vendor Management Policy.pdf

During this assessment performance, service delivery and compliance with security commitments is also assessed.

— Pyrana Vendor Management Policy.pdf