Architecture and data flows
Review the connected systems, processing roles, hosting, access and proposed action scope.
SECURITY REVIEW
Review the deployment.
Not a generic checklist.
Bring the systems, data scope and actions you are considering. Connect the technical and security review to the permissions and evidence required for that deployment.
Contract and privacy materials
Request the DPA, MSA, security schedule and the current deployment-specific subprocessor and transfer schedule.
Operational controls
Review authority, independent verification, incident response and deployment-specific recovery commitments.
Review request
Email security@supraos.co with your company, role, proposed deployment, required materials, deadline and NDA status.
Architecture and data
Identify source systems, provider access, customer-specific processing, retention and the records used for verification.
Actions and authority
Review credential scope, approval requirements, changed-plan behavior and the handling of failed or mismatched actions.
Evaluation and evidence
Specify the model, baseline, testing protocol and deployment evidence your review needs. Agree what can be supplied and under which confidentiality terms.
Review the proposed boundary.
Contact the security team with your company, deployment and the materials you need.
security@supraos.co