For critical vendors that lack a SOC 2 report but have access to PYRANA.ai data or affect the security of the PYRANA.ai system, PYRANA.ai performs a vendor risk assessment every quarter so that vendor risk is regularly evaluated.

For critical vendors that do not have a SOC 2 report

— Pyrana Vendor Management Policy.pdf

but that have access to PYRANA.ai data or that impact the security of PYRANA.ai system

— Pyrana Vendor Management Policy.pdf

a quarterly vendor risk assessment is performed.

— Pyrana Vendor Management Policy.pdf