| 7. Additional Privacy Information | Everbridge | SafeBase | documented | - | - |
| 7.1.1 | Xactus | Vanta Trust Center | documented | - | - |
| 7.1.1. Log management utilized | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 7.1.2 | Xactus | Vanta Trust Center | documented | - | - |
| 7.1.3 Configuration management system established | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 7.1.3 Network and system hardening standards maintained | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 7.2.1 | Xactus | Vanta Trust Center | documented | - | - |
| 7.2.2 | Xactus | Vanta Trust Center | documented | - | - |
| 7.2.3 | Xactus | Vanta Trust Center | documented | - | - |
| 7.2.4 | Xactus | Vanta Trust Center | documented | - | - |
| 7.2.5 | Xactus | Vanta Trust Center | documented | - | - |
| 7.2.5.1 | Xactus | Vanta Trust Center | documented | - | - |
| 7.2.6 | Xactus | Vanta Trust Center | documented | - | - |
| 7.3.1 | Xactus | Vanta Trust Center | documented | - | - |
| 7.3.2 | Xactus | Vanta Trust Center | documented | - | - |
| 7.3.3 | Xactus | Vanta Trust Center | documented | - | - |
| 7.4.1 Incident management procedures followed | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 7.4.3 Incident response plan tested | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 7.5.1 Continuity and Disaster Recovery plans established | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 7.5.2 Continuity and disaster recovery plans tested (duplicate - don't use) | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 72-hour breach notification commitment | octonomy | Vanta Trust Center | documented | - | - |
| 8. Data Processing Agreement (DPA) | Everbridge | SafeBase | documented | - | - |
| 8.1.1 | Xactus | Vanta Trust Center | documented | - | - |
| 8.1.1 Development lifecycle established (SDLC) | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 8.1.2 | Xactus | Vanta Trust Center | documented | - | - |
| 8.2.1 | Xactus | Vanta Trust Center | documented | - | - |
| 8.2.1 | Archon Systems | Vanta Trust Center | documented | - | - |
| 8.2.2 | Archon Systems | Vanta Trust Center | documented | - | - |
| 8.2.4 | Xactus | Vanta Trust Center | documented | - | - |
| 8.2.5 | Archon Systems | Vanta Trust Center | documented | - | - |
| 8.2.5 | Xactus | Vanta Trust Center | documented | - | - |
| 8.2.6 | Xactus | Vanta Trust Center | documented | - | - |
| 8.2.7 | Xactus | Vanta Trust Center | documented | - | - |
| 8.2.8 | Xactus | Vanta Trust Center | documented | - | - |
| 8.3 Strong authentication for users and administrators is established and managed. | Staq.io | Vanta Trust Center | documented | - | - |
| 8.3.1 | Xactus | Vanta Trust Center | documented | - | - |
| 8.3.11 | Xactus | Vanta Trust Center | documented | - | - |
| 8.3.2 | Xactus | Vanta Trust Center | documented | - | - |
| 8.3.3 | Xactus | Vanta Trust Center | documented | - | - |
| 8.3.4 | Xactus | Vanta Trust Center | documented | - | - |
| 8.3.5 | Xactus | Vanta Trust Center | documented | - | - |
| 8.3.5 | Archon Systems | Vanta Trust Center | documented | - | - |
| 8.3.6 | Archon Systems | Vanta Trust Center | documented | - | - |
| 8.3.6 | Xactus | Vanta Trust Center | documented | - | - |
| 8.3.7 | Xactus | Vanta Trust Center | documented | - | - |
| 8.3.7 | Archon Systems | Vanta Trust Center | documented | - | - |
| 8.3.8 | Xactus | Vanta Trust Center | documented | - | - |
| 8.3.9 | Xactus | Vanta Trust Center | documented | - | - |
| 8.3.9 | Archon Systems | Vanta Trust Center | documented | - | - |
| 8.4 Multi-factor authentication (MFA) is implemented to secure access into the CDE. | Staq.io | Vanta Trust Center | documented | - | - |