For the security review in front of you
The deal is waiting on who touches your data.
Publish a living vendor list, keep it current, and send one link anyone can open. Once it is public, the page records vendor additions, removals, and edits to names, purposes, or locations. You can add a short note about how you tell customers.
Anyone with the link can read it. No signup.
The page you send
Acme
Acme publishes this page so security reviewers can see who handles customer data.
- Amazon Web ServicesCloud hosting
- StripePayment processing
- PostmarkTransactional email
We update this list when a vendor changes and tell customers named in our agreements.
TodayAddedPostmark
From your list to one link
- Create the pageSign in and name the company.
- Add the vendorsPaste the list you have or upload the spreadsheet. Once the page is public, it records vendor additions, removals, and edits to names, purposes, or locations.
- Send the linkThey open a public link made from your company name, without an account. They can copy or download the spreadsheet there.
For founders before SOC 2
Use Trust Prep when a deal needs a current vendor list for the security questionnaire this week. It is not a full trust center for policies, evidence, or control status.
Why security reviewers ask for a vendor list
They need to know which companies handle customer data and whether the answer is still current.
For the question they asked
Open the page that matches this review.
Send the link while the deal is waiting
Create the page and bring the list you already have.
Anyone with the link can read it. No signup.