Assessment · Runs entirely in your browser

Vendor Privacy Risk Intake

Capture the facts of a third-party engagement and get a scored risk tier plus a recommended review track — fast-track, standard, or enhanced due diligence.

Nothing leaves this page. All data stays in your browser session. Use Save/Export to keep records; closing the tab clears everything. This tool is informational and not legal advice.

Engagement details

Vendor name

Service description

Primary hosting / processing location

01Personal data categories the vendor will access

Contact / business HR / employee Financial Health Biometric Children's

02Volume of data subjects

Under 1,000 1,000–50,000 Over 50,000

03Cross-border transfers outside the data's origin region?

NoYesUnknown

04Subprocessors involved?

NoYes, disclosed listYes, undisclosed / unknown

05AI / machine learning features processing personal data?

NoYesYes, trains on customer data

06Security certifications

SOC 2 / ISO 27001Other / self-attestedNone provided

07DPA / data protection terms status

Signed, currentIn negotiationNone

08Known breach history (past 3 years)?

NoYesUnknown

Enter a vendor name and answer questions 02–08.

Risk drivers

Copy-ready record

Copied ✓

Part of the PrivOptic app suite — AI-built privacy tools for solo practitioners and lean teams. privoptic.com