Zansa › Answers › Privacy, security and ownership
What security questions should I ask a vendor that will handle my data?
Ask how they authenticate users, whether multi-factor authentication is required, how access is limited and logged, how data is encrypted, how incidents are handled, which staff or sub-processors can see your data, and how data is returned or deleted at the end of the contract.
Also ask whether the vendor stores your data in their own environment or yours, because data held in your own account is easier to control and withdraw. Request details of any certifications they claim, and verify them rather than relying on a logo.
Where answers are unclear, ask for them in writing, and consider whether the risks are acceptable for the sensitivity of the data.
Want this applied to your business? Zansa builds dashboards and forecasts for small and mid-sized companies worldwide. Start with a free intro call.
Book a call