| 8.5 Multi-factor authentication (MFA) systems are configured to prevent misuse. | Staq.io | Vanta Trust Center | documented | - | - |
| 8.5.1 | Xactus | Vanta Trust Center | documented | - | - |
| 8.6.1 | Xactus | Vanta Trust Center | documented | - | - |
| 8.6.2 | Xactus | Vanta Trust Center | documented | - | - |
| 8.6.3 | Xactus | Vanta Trust Center | documented | - | - |
| 9.1 Processes and mechanisms for restricting physical access to cardholder data are defined and understood. | Staq.io | Vanta Trust Center | documented | - | - |
| 9.1.1 | Xactus | Vanta Trust Center | documented | - | - |
| 9.1.1 Cybersecurity insurance maintained | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 9.1.2 | Xactus | Vanta Trust Center | documented | - | - |
| 9.1.2 Backups conducted daily | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 9.2 Physical access controls manage entry into facilities and systems containing cardholder data. | Staq.io | Vanta Trust Center | documented | - | - |
| 9.2.1 | Xactus | Vanta Trust Center | documented | - | - |
| 9.2.2 | Xactus | Vanta Trust Center | documented | - | - |
| 9.2.3 | Xactus | Vanta Trust Center | documented | - | - |
| 9.2.4 | Xactus | Vanta Trust Center | documented | - | - |
| 9.3 Physical access for personnel and visitors is authorized and managed. | Staq.io | Vanta Trust Center | documented | - | - |
| 9.4.1 | Xactus | Vanta Trust Center | documented | - | - |
| 9.4.1 | Archon Systems | Vanta Trust Center | documented | - | - |
| 9.4.1.1 | Archon Systems | Vanta Trust Center | documented | - | - |
| 9.4.1.1 | Xactus | Vanta Trust Center | documented | - | - |
| 9.4.1.2 | Xactus | Vanta Trust Center | documented | - | - |
| 9.4.2 | Archon Systems | Vanta Trust Center | documented | - | - |
| 9.4.2 | Xactus | Vanta Trust Center | documented | - | - |
| 9.4.3 | Xactus | Vanta Trust Center | documented | - | - |
| 9.4.3 | Archon Systems | Vanta Trust Center | documented | - | - |
| 9.4.4 | Archon Systems | Vanta Trust Center | documented | - | - |
| 9.4.4 | Xactus | Vanta Trust Center | documented | - | - |
| 9.4.5 | Xactus | Vanta Trust Center | documented | - | - |
| 9.4.5.1 | Xactus | Vanta Trust Center | documented | - | - |
| 9.4.6 | Xactus | Vanta Trust Center | documented | - | - |
| 9.4.6 | Archon Systems | Vanta Trust Center | documented | - | - |
| 9.4.7 | Xactus | Vanta Trust Center | documented | - | - |
| 9.5 Point-of-interaction (POI) devices are protected from tampering and unauthorized substitution. | Staq.io | Vanta Trust Center | documented | - | - |
| 9.5.1 | Xactus | Vanta Trust Center | documented | - | - |
| 9.5.1.1 | Xactus | Vanta Trust Center | documented | - | - |
| 9.5.1.2 | Xactus | Vanta Trust Center | documented | - | - |
| 9.5.1.2.1 | Xactus | Vanta Trust Center | documented | - | - |
| 9.5.1.3 | Xactus | Vanta Trust Center | documented | - | - |
| 99.5% Availability | CoStar Group | SafeBase | documented | - | - |
| 99.9% Availability | Aptean | Vanta Trust Center | documented | - | - |
| 99.9% Availability | CoStar Group | SafeBase | documented | - | - |
| A COPPA-specific Privacy Policy and supporting documentation is maintained | ePraise | Vanta Trust Center | documented | - | - |
| A COPPA-specific Privacy Policy and supporting documentation is maintained | Veracross | Vanta Trust Center | documented | - | - |
| A COPPA-specific Privacy Policy and supporting documentation is maintained | Digistorm | Vanta Trust Center | documented | - | - |
| A data protection policy is documented | TrackVia | Vanta Trust Center | documented | - | - |
| A Mobile Device Management (MDM) system is implemented | krisp.ai | Vanta Trust Center | documented | - | - |
| A point of contact | EarnTrust | TrustShare (TrustCloud / Kintent) | documented | - | - |
| A Policy Management system is in place | Magnus Health | Vanta Trust Center | documented | - | - |
| A Policy Management system is in place | Firefly | Vanta Trust Center | documented | - | - |
| A Policy Management system is in place | Digistorm | Vanta Trust Center | documented | - | - |