For critical vendors that do not have a SOC 2 report but have access to PYRANA.ai data or affect the security of the PYRANA.ai system, PYRANA.ai performs a quarterly vendor risk assessment so that vendor risk is regularly evaluated under heightened conditions.

For critical vendors that do not have a SOC 2 report

— Pyrana Vendor Management Policy.pdf

but that have access to PYRANA.ai data or that impact the security of PYRANA.ai system

— Pyrana Vendor Management Policy.pdf

a quarterly vendor risk assessment is performed.

— Pyrana Vendor Management Policy.pdf