| 3rd party authentication | NetDocuments | TrustShare (TrustCloud / Kintent) | documented | - | - |
| 3rd party authentication | NetDocuments | TrustShare (TrustCloud / Kintent) | documented | - | - |
| 3rd party data exchange | FLOWSPARKS | SafeBase | documented | - | - |
| 3rd Party Penetration Tests | yasoon | Vanta Trust Center | documented | - | - |
| 3rd Party Security & Cyber Policy | Form3 | SafeBase | documented | - | - |
| 3rd-Nth party risk management program enforced | UpGuard Operations | UpGuard Trust Page | documented | - | - |
| 3rd-Nth party risk management program enforced | Verst Logistics | UpGuard Trust Page | documented | - | - |
| 3rd-Nth party risk management program enforced | Ideals | UpGuard Trust Page | documented | - | - |
| 3rd-Nth party risk management program enforced | Jedox | UpGuard Trust Page | documented | - | - |
| 4 - Architecture Diagram | Gong | SafeBase | documented | - | - |
| 4. Data Transfer to the US, Government Requests | Everbridge | SafeBase | documented | - | - |
| 4.1 Processes and mechanisms for protecting cardholder data with strong cryptography during transmission over open, public networks are defined and documented. | Staq.io | Vanta Trust Center | documented | - | - |
| 4.1.1 | Xactus | Vanta Trust Center | documented | - | - |
| 4.1.1 Vulnerabilities scanned and remediated | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 4.1.2 | Xactus | Vanta Trust Center | documented | - | - |
| 4.1.2 Penetration testing performed | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 4.1.4 Service infrastructure maintained (patched) | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 4.2 PAN is protected with strong cryptography during transmission. | Staq.io | Vanta Trust Center | documented | - | - |
| 4.2.1 | Xactus | Vanta Trust Center | documented | - | - |
| 4.2.1.1 | Xactus | Vanta Trust Center | documented | - | - |
| 4.2.1.2 | Xactus | Vanta Trust Center | documented | - | - |
| 4.2.2 | Xactus | Vanta Trust Center | documented | - | - |
| 41 - Visitor procedures enforced | Snappy | Vanta Trust Center | documented | - | - |
| 45 day response and extension | Community Boss | Vanta Trust Center | documented | - | - |
| 45 day response and extension | Impel | Vanta Trust Center | documented | - | - |
| 45 day response and extension | Position Imaging Inc. | Vanta Trust Center | documented | - | - |
| 45 day response and extension | RevOptimal | Vanta Trust Center | documented | - | - |
| 5 - Penetration Test Executive Summary | Gong | SafeBase | documented | - | - |
| 5. Data Protection Framework | Everbridge | SafeBase | documented | - | - |
| 5.1 Processes and mechanisms for protecting all systems and networks from malicious software are defined and understood | Staq.io | Vanta Trust Center | documented | - | - |
| 5.1.1 | Xactus | Vanta Trust Center | documented | - | - |
| 5.1.2 | PPRO | Vanta Trust Center | documented | - | - |
| 5.1.2 | Xactus | Vanta Trust Center | documented | - | - |
| 5.1.2.a | PPRO | Vanta Trust Center | documented | - | - |
| 5.2 Malware is prevented, or detected and addressed. | Staq.io | Vanta Trust Center | documented | - | - |
| 5.2.1 | Xactus | Vanta Trust Center | documented | - | - |
| 5.2.2 | Xactus | Vanta Trust Center | documented | - | - |
| 5.2.3 | Xactus | Vanta Trust Center | documented | - | - |
| 5.2.3.1 | Xactus | Vanta Trust Center | documented | - | - |
| 5.3 Anti-malware mechanisms are active, maintained, and monitored. | Staq.io | Vanta Trust Center | documented | - | - |
| 5.3.1 | Xactus | Vanta Trust Center | documented | - | - |
| 5.3.1 InfoSec Program: Security policies established and reviewed | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 5.3.2 | Xactus | Vanta Trust Center | documented | - | - |
| 5.3.2.1 | Xactus | Vanta Trust Center | documented | - | - |
| 5.3.3 | Xactus | Vanta Trust Center | documented | - | - |
| 5.3.4 | Xactus | Vanta Trust Center | documented | - | - |
| 5.3.5 | Xactus | Vanta Trust Center | documented | - | - |
| 5.4 Anti-phishing mechanisms protect users against phishing attacks. | Staq.io | Vanta Trust Center | documented | - | - |
| 5.4.1 | Xactus | Vanta Trust Center | documented | - | - |
| 6 - Engage Security Overview | Gong | SafeBase | documented | - | - |