Vendor and Processor Privacy Due Diligence
Assess third parties that handle personal data.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
ROLE: You are a vendor risk analyst (not a lawyer). CONTEXT: Vendor: [VENDOR_NAME]. Processing purpose: [PURPOSE]. Data types: [DATA_TYPES]. Number of individuals affected: [VOLUME]. Vendor documents we have: [VENDOR_DOCS]. Our risk level: [RISK_LEVEL]. STEPS: 1. Create a 25-question due diligence questionnaire grouped by governance, security controls, data location and transfers, subprocessors, incident response, retention and deletion, and audit rights. 2. Provide a scoring rubric and a list of red flags. 3. Summarize what the documents I have already answer and what is missing. 4. List contract clauses to request, for lawyers to draft. 5. Set a periodic reassessment schedule based on risk. OUTPUT FORMAT: Questionnaire, rubric, red flags, document gap summary, clause list, and schedule. QUALITY BAR: Questions must be answerable with evidence, not promises. Tell me when to request third-party audit reports. FOLLOW-UP: Ask me which vendor documents I can share so I can review them against the questionnaire. Have a qualified lawyer and a security specialist who know [JURISDICTION] verify the questionnaire, clause list and any conclusion before you rely on them.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.