SaaS Vendor Risk Assessment Form
Vendor Information
Vendor Name
Contact Person
Email Address
Phone Number
Vendor Website
Service Overview
SaaS Product Name
Description of Services Provided
How critical is this service to your organization?
High
Medium
Low
Data Handling
Types of Data Shared with Vendor
Personal Data
Financial Data
Customer Data
Proprietary Data
Other
Does the vendor process or store sensitive data?
Yes
No
Data Storage Location(s)
Security & Compliance
Does the vendor have information security certifications?
ISO 27001
SOC 2
GDPR
Other
None
Compliance requirements applicable to this service
Has the vendor undergone a recent security assessment?
Yes
No
Risk Assessment
Potential Risks Identified
Mitigation Measures / Controls in Place
Additional Comments