Vendor Management Policy

1. Purpose

This policy ensures that third parties that process customer data on Seen CRM's behalf protect it to the standard Seen CRM requires.

2. Scope

This policy applies to every service provider that stores or processes customer data (sub-processors).

3. Policy

1. Selection. Providers are selected on the strength of their security, privacy and reliability.
2. Contractual protection. A provider may process customer data only under written data-processing terms.
3. Data minimisation. Each provider receives only the data it needs to deliver its service.
4. Approval. Management approves every new provider before it receives customer data.
5. Review. Providers are reviewed at least once a year.
6. Transparency. The list of sub-processors is available to customers on request.

4. Responsibilities

Management approves and reviews providers.

5. Exceptions

Any exception must be approved in writing by management, with a stated reason and an end date.

6. Review

This policy is reviewed at least once a year.

7. Contact

Questions about this policy: info@seencrm.com