| 6. Data Breach Notifications | Everbridge | SafeBase | documented | - | - |
| 6.1 Processes and mechanisms for developing and maintaining secure systems and software are defined and understood. | Staq.io | Vanta Trust Center | documented | - | - |
| 6.1.1 | Xactus | Vanta Trust Center | documented | - | - |
| 6.1.11 Data encryption utilized | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.1.12 Unique account authentication enforced | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.1.13 Password policy enforced | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.1.14 Production inventory maintained | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.1.15 Data transmission encrypted | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.1.2 | Xactus | Vanta Trust Center | documented | - | - |
| 6.1.3 Production deployment access restricted | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.1.4 Remote access MFA enforced | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.1.6 Encryption key access restricted | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.1.7 Data classification policy established | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.1.8 Network firewalls utilized (IDS / IPS & WAF) | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.2 Bespoke and custom software are developed securely. | Staq.io | Vanta Trust Center | documented | - | - |
| 6.2.1 | Xactus | Vanta Trust Center | documented | - | - |
| 6.2.3 | Xactus | Vanta Trust Center | documented | - | - |
| 6.2.3 Access reviews conducted | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.2.3.1 | Xactus | Vanta Trust Center | documented | - | - |
| 6.2.4 | Xactus | Vanta Trust Center | documented | - | - |
| 6.3.1 | Xactus | Vanta Trust Center | documented | - | - |
| 6.3.1 | Archon Systems | Vanta Trust Center | documented | - | - |
| 6.3.1 Access requests required | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.3.2 | Xactus | Vanta Trust Center | documented | - | - |
| 6.3.3 | Archon Systems | Vanta Trust Center | documented | - | - |
| 6.3.3 | Xactus | Vanta Trust Center | documented | - | - |
| 6.4 Public-facing web applications are protected against attacks. | Staq.io | Vanta Trust Center | documented | - | - |
| 6.4.1 | Xactus | Vanta Trust Center | documented | - | - |
| 6.4.1 Sub-service data center providers reports reviewed annually | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.4.2 | Xactus | Vanta Trust Center | documented | - | - |
| 6.4.3 | Xactus | Vanta Trust Center | documented | - | - |
| 6.4.3 | Archon Systems | Vanta Trust Center | documented | - | - |
| 6.5.1 | Xactus | Vanta Trust Center | documented | - | - |
| 6.5.1 Data retention procedures established | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.5.2 | Xactus | Vanta Trust Center | documented | - | - |
| 6.5.2 Customer data deleted upon leaving | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.5.3 | Xactus | Vanta Trust Center | documented | - | - |
| 6.5.4 | Xactus | Vanta Trust Center | documented | - | - |
| 6.5.5 | Xactus | Vanta Trust Center | documented | - | - |
| 6.5.6 | Xactus | Vanta Trust Center | documented | - | - |
| 6.6.1 Unique network system authentication via SSO enforced | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.7.1 MDM system utilized | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.7.2 Portable media security management | Broken Build | Vanta Trust Center | documented | - | - |
| 6.7.3 - EDR - Endpoint / Intrusion Detection system utilized | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6.7.5 Portable media encrypted | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 6sense AI Overview | 6sense | SafeBase | documented | - | - |
| 6sense Computer Device Lifecycle Procedure | 6sense | SafeBase | documented | - | - |
| 6sense Emissions Tracking | 6sense | SafeBase | documented | - | - |
| 6sense W-9 | 6sense | SafeBase | documented | - | - |
| 7 - Confidentiality Agreement acknowledged by employees | Snappy | Vanta Trust Center | documented | - | - |