Zansa › Answers › Privacy, security and ownership
How do I keep a record of which vendors process my personal data?
Keep a simple register listing each vendor, what personal data they process, why, where it is stored, what agreement covers them, and who in your business owns the relationship. A spreadsheet is enough for a small business, provided it is kept up to date.
GDPR expects controllers and processors to keep records of processing in many cases, and POPIA expects you to know what you hold and why. A vendor register supports both, and makes breach response and access requests faster.
Review it at least annually and whenever you add or remove a tool. Include analytics, email, accounting, payment and AI tools. This is general information, not legal advice.
Want this applied to your business? Zansa builds dashboards and forecasts for small and mid-sized companies worldwide. Start with a free intro call.
Book a call