Critical vendors without a SOC 2 report that access PYRANA.ai data or affect PYRANA.ai system security must undergo a quarterly vendor risk assessment so that high-risk vendors receive compensating oversight.

For critical vendors that do not have a SOC 2 report

— Pyrana Vendor Management Policy.pdf

but that have access to PYRANA.ai data

— Pyrana Vendor Management Policy.pdf

or that impact the security of PYRANA.ai system

— Pyrana Vendor Management Policy.pdf

a quarterly vendor risk assessment is performed

— Pyrana Vendor Management Policy.pdf