RCMEntry form
Purpose, data, users, hosting, access, dependencies and criticality.
SAAS · SUB-TRAITANTS · TRANSFERSEvery vendor.
Every vendor.
A documented risk decision.
Before purchase or renewal, RCM links the contract, access locations, subcontracting chain, transfer guarantees and security proofs.
Article 28DPASCC · TIACNDP
VENDOR
A workable opinion,
Not a stack of PDFs.
Each review results in a documented decision: acceptable, acceptable under conditions or to be corrected before commitment. The analysis remains proportionate to the data, actual access and the criticality of the service.
Contract review
DPA, Article 28, instructions, subprocessors, support, fate of data.
Transfers
Countries, remote access, SCC, TIA, additional measures and CNDP implications.
Notice and remediation
Level of risk, deviations, clauses or evidence to request and decision to draw.
WORKFLOWIntegrated control
Integrated control
on your purchases.
The desk can intervene before signing, upon renewal or during a review of the existing portfolio.
Intake
The business or purchasing transmits the supplier and the context of use.
Analyze
Contracts, location, processors, transfer and security questionnaire.
To classify
Risk, minimum conditions, responsible and correction deadline.
Follow
Decision, evidence, renewal and significant changes.
HYBRID MODELUnit or
Unit or
On the line.
The quote takes into account the criticality, the number of countries, the available documentation and the level of negotiation.
Screening supplier
Quick check of role, data, hosting and main risks.
Fixed price · after scopingDPA + transfer
Detailed analysis, corrective requests and documented advice for the decision.
From — on estimateMonthly desk
Supplier quota, response times and reporting defined in the contract.
Subscription · on quoteLIMITSA private magazine,
A private magazine,
with the right relays.
RCM analyzes documentary guarantees and coordinates corrections. Penetration testing, architectural auditing, forensics and heavy legal negotiations require a security specialist or a lawyer.
- No safety certification issued.
- No absolute guarantee on the supplier.
- The purchasing decision rests with the customer.
MOBILIZED EXPERTISEContract, transfer
Contract, transfer
and evidence.
A new SaaS deserves a traceable decision.
Send the planned service, its use, the data and the purchase deadline.
Start review →