Suggested columns

  • Vendor name
  • Tool or service
  • Business owner
  • Personal data processed
  • Purpose
  • Access level
  • Data location, if known
  • Contract or terms reviewed
  • Deletion or export capability
  • Security controls enabled
  • Renewal or review date

Include obvious tools such as payment processors and CRMs, but also include less obvious processors such as analytics tools, support systems, email services, payroll vendors, cloud platforms, and outsourced service providers.