Procurement FAQ
SecurityPassport
Last updated: June 3, 2026
Do you provide a Data Processing Agreement?
Yes. SecurityPassport maintains a Data Processing Agreement for enterprise privacy and procurement review.
Do you maintain a subprocessor list?
Yes. SecurityPassport maintains a public Subprocessor List describing provider categories that may support infrastructure, storage, communications, billing, monitoring, authentication, and platform operations.
Can SecurityPassport support procurement questionnaires?
Yes. SecurityPassport can support vendor, security, privacy, legal, and procurement review workflows with published documentation and additional context where appropriate.
Do you provide security documentation?
Yes. SecurityPassport provides security, security architecture, responsible governance, disclosure, privacy, DPA, subprocessor, and legal materials for review.
Do you support enterprise contracts?
Enterprise and Strategic customers may use commercial agreements, order forms, data processing terms, and procurement workflows depending on the engagement.
Do you support annual agreements?
Yes. Enterprise and Strategic agreements may support annual terms, procurement workflows, invoicing, and contract-based purchasing.
Do you support invoice-based purchasing?
Invoice-based purchasing may be available for Enterprise and Strategic customers depending on commercial terms.
Do you support vendor risk assessments?
Yes. SecurityPassport can support vendor risk review by providing security, privacy, legal, architecture, governance, and procurement materials.
Do you support customer security reviews?
Yes. Enterprise buyers may review SecurityPassport security materials, governance documentation, legal terms, subprocessor information, and responsible disclosure policy.
Can legal teams review terms before purchase?
Yes. Terms of Service, Privacy Policy, Cookie Policy, DPA, MSA, Acceptable Use Policy, Security Disclosure Policy, and Subprocessor List are available for review.
Who should procurement teams contact?
Procurement, legal, security, and privacy questions may be sent to: