2024 Initial Vendor Compliance Questionnaire

Initial Vendor Security Questionnaire

All fields are required.

"(Required)" indicates required fields

Your Name(Required)

Your Name

First Last

Your Email(Required)

Your Email

Company Name(Required)

Company Name

Company Address(Required)

Company Address

Street Address Address Line 2 City State / Province / Region ZIP / Postal Code Country

Security Contact Name(Required)

Security Contact Name

First Last

Security Contact Email(Required)

Security Contact Email

SOC2 Type II Certification(Required)

Do you currently hold a SOC2 Type II Certification?

SOC 2 Type II Certification Document

Please upload a PDF file that documents the certification.

Accepted file types: pdf, Max. file size: 50 MB.

ISO 27001 Certification(Required)

Do you currently hold an ISO 27001 Certification?

ISO 27001 Certification Document

Please upload a PDF file that documents the certification.

Accepted file types: pdf, Max. file size: 50 MB.

Cybersecurity Insurance Policy(Required)

Does your company have a cybersecurity insurance policy that covers data breaches affecting data held on behalf of APR?

Fraud Investigation Policy(Required)

Do you have a clearly defined and documented fraud & investigation policy to identify, document, and address vulnerabilities

Annual Anti-Fraud Training(Required)

Do you conduct annual anti-fraud and awareness training?

Fraud Policy Effectiveness(Required)

Do you monitor and regularly review effectiveness of fraud management policies.

Prohibition of Data Transfer(Required)

Do you have procedures and contracts in place to prohibit the transfer of client data without your customer’s consent?

Certification Documents(Required)

Upon request, are you capable of providing relevant certifications for relevant 3rd parties (ISO, SSAE 16/17, PCI, etc.)?

Security Program Review(Required)

Is your information security program reviewed and/or certified by an independent third party on an annual cadence?

Data Breach Occurrence(Required)

Has your company experienced a data brach affecting confdiential or restricted data in the last 12 months?

Information Protection(Required)

Will you prohibit the storage, copying, and disclosure of APR information except as necessary for the performance of your obligations under the agreement?