Legal

Have all relevant statutory, regulatory, contractual requirements, (including: intellectual property rights, protection of records, protection of personally identifiable information and cryptographic controls) and the organisation’s approach to meet these requirements, been explicitly identified, documented and kept up to date, for the/each client information system and the organisation as a whole?

Yes. As part of our ISO27001:2022 ISMS, Trint has documented and continously reviews implementation all legal, regulatory and contractual requirements relevant to our business operations.

Is there a contract in place with the supplier?

Yes. A GDPR compliant DPA incorporating SCCs is executed with vendors.