Zansa › Answers › Privacy, security and ownership
What should I check before choosing a data or analytics vendor?
Check where they store data, who can access it, whether they will sign a processing or operator agreement, how they secure and log access, who owns the outputs, and what happens when you leave. Also ask which sub-processors and AI tools they use. This is general information, not legal advice.
A quick due diligence list:
- Written data processing or operator agreement
- Data location and your control over it
- Access controls, logging and encryption
- Breach notification commitments
- Use of AI tools and sub-processors
- Ownership of code, models and dashboards
- Exit and data return terms
Ask for answers in writing, and be cautious of vague responses. Rules differ by country and sector, so check how this applies to you with a qualified adviser.
Want this applied to your business? Zansa builds dashboards and forecasts for small and mid-sized companies worldwide. Start with a free intro call.
Book a call