Skip to content

Supplier management

Know your suppliers. What they handle, what you agreed, when to look again.

Your hosting provider, your support tool and your payroll service all touch data you are responsible for. Trustbird keeps one supplier register that shows which data each supplier processes, which agreements are in place and when the next review is due.

Become a design partner Talk to us
  • One register for every supplier
  • Contracts and processing agreements in one place
  • Review dates with reminders

A clear picture of the parties you depend on

Questions about suppliers come from several directions: ISO 27001, NEN 7510, NIS2, the GDPR and your own customers. Trustbird answers them from the same register.

Supplier register

Record every supplier with a named contact person inside your organization and a short description of what they do for you.

Which data they process

Record which kinds of data each supplier handles, such as customer data or patient data. You see at once which suppliers matter most.

Contracts and processing agreements

Keep contracts and processing agreements with the supplier they belong to, including their start date and term.

Supplier assessments

Assess suppliers with questions in plain language, such as: where is our data stored, and who can access it? Record the outcome and any follow-up.

Review dates

Set when each supplier needs another look. The contact person gets a reminder in time, and overdue reviews stand out.

Linked to risks and controls

Link suppliers to the risks they bring and the controls that manage them, so supplier issues show up in your risk register.

How it works

  1. 01

    List your suppliers

    Record the suppliers you work with and who inside your organization is their contact.

  2. 02

    Record what they handle

    Note which data each supplier processes and which agreements are in place.

  3. 03

    Assess where it matters

    Assess the suppliers that handle sensitive data and record what you concluded.

  4. 04

    Review on schedule

    Trustbird reminds contact persons when a review is due and keeps the history for the auditor.

Frequently asked questions

Does Trustbird check whether my processing agreements are legally sound?
No. Trustbird records which agreements you have and when they need to be reviewed. It does not give legal advice, so have a legal adviser review the content of your agreements.
Does the supplier register serve several standards?
Yes. One register serves ISO 27001, NEN 7510, NIS2 and the GDPR together. Where one of them asks for something extra, you add it to the same record.
Do my suppliers need access to Trustbird?
No. You record the information about your suppliers yourself. They do not need an account.

Related

See what Trustbird does for your organization

Trustbird is being built with two certified design partners, and we are looking for more companies to join them at co-founder pricing. Apply as a design partner, or mail us with a question.

Become a design partner support@trustbird.com