Tenant separation
Customer records are scoped to the owning organisation with server-side authorisation and cross-tenant access testing.
Security
Built to protect sensitive review evidence.
VendorGuard is designed around strict tenant separation, controlled evidence access, clear accountability and secure product delivery.
Secure by design
Protection across identity, data and operations.
Security controls are implemented and verified as the product moves through pilot readiness. Current assurance material is available during customer evaluation.
Controlled evidence access
Vendor documents are intended for private storage, short-lived access links, file validation, malware scanning and access logging.
Identity and permissions
Role-based access, MFA, secure sessions and separation between reviewer and approver responsibilities.
Auditability
Security- and governance-relevant actions are recorded so customers can trace who performed each important action.
Secure development
Automated testing, dependency and secret scanning, peer review and security regression checks form part of release quality gates.
Recovery and operations
Backups, restoration testing, incident response procedures and controlled support access are part of the operating model.
Customer assurance
Get the detail your security team needs.
During an evaluation, we can provide the current security architecture, data-flow summary, subprocessor information, available control evidence and answers to your security questionnaire.
Request security informationEvaluation topics
- Data hosting and residency
- Encryption and access controls
- Tenant isolation
- Evidence storage and retention
- Backup and recovery
- Incident management
- Secure software development
Responsible claims
Clear answers, without inflated assurance language.
VendorGuard will only claim certifications or independent assurance after they have been completed and can be evidenced. Product evaluations are supported with the most current factual security information available.