Processing scope and purpose
Confirm the categories of data, the purposes and the duration are specific rather than open-ended.
Retention and deletion
Vague retention language is one of the most common sources of findings. Look for defined periods and a deletion commitment at termination.
Sub-processors and transfers
Record the notification mechanism, objection rights and the transfer mechanism relied upon.
ProcureCortex turns vendor documentation into structured, explainable compliance findings. Book a demo or explore the platform.