Vendr
Vendr is the tool to organize your tech stack and save money while speeding up your team's internal procurement processes to empower your team with the tools they need. Our integration for Slack helps to keep your teams up to date with each step of your procurement process.
Permissions
Vendr will be able to view:
Vendr will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Vendr
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Vendr has formal Data Protection and Deletion Policies, which state that we perform daily data backups for disaster recovery and business continuity purposes.Within two (2) months after the expiry or termination of the Agreement, Vendr will, upon Client’s request return all Client Personal Data to Client. Following the earlier of such request or the two (2) month period, Vendr will destroy any Client Personal Data and any copies in Vendr’s control or possession and provide written confirmation once returned or destroyed. Vendr may retain Client Personal Data after the expiry or termination of the Agreement to the extent required by applicable law, and only to the extent and for such period as required by applicable laws and always provided that Vendr will ensure the confidentiality of all such Client Personal Data and will ensure that such Client Personal Data is only Processed as necessary for the purpose(s) specified in the applicable laws requiring its storage and for no other purpose. Policy updates may be found online at https://www.vendr.com/legal/data-processing-addendum.
Data archiving and removal policy
Data is backed up daily according to our Data Protection Policy, and can be restored from backup within one week of time. Requests for data archival/removal may be submitted via our online form at https://preferences.vendr.com/privacy.
Data storage policy
Data is stored in a single AWS database cluster, with customer multi-tenancy provided logically at run-time. The principle of least privileged access is used for account provisioning. Appropriate redundancy is in place.
Data center location(s)
United States
Data hosting company
AWS
App/service has sub-processors
yes
Guidelines for sub-processors
Certifications & compliance
Data deletion request procedure
Please see https://preferences.vendr.com/privacy for more details
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2022-11-07
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
Okta, Google
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
infosec@vendr.com
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
no
Third party services used by this app
AWS
Uses token rotation
no