Managing Vendors and Sub-Processors

Keep an inventory of the vendors that process data for you, link them to the data systems they support, and publish your sub-processor list to your Trust Center.

Overview

Your vendors are the third parties that store or process data on your behalf, and buyers increasingly ask you to name them. Concord keeps a vendor inventory in the Data Hub, alongside your Data Mapping, so the vendors you track are connected to the systems they actually support, and the sub-processor list you publish stays consistent with your data map.

Adding Vendors

Go to Data Hub → Vendors and add a vendor.
Choose Vendor: pick a vendor from Concord's catalog to fill in its details for you, or choose Custom to start from scratch.
Details: review and edit the vendor's name, categories, website, privacy policy URL, DPA URL, country, and description.
Data Systems: link the data systems this vendor provides.

Catalog details are copied into your vendor record when you add it, and you can edit them at any time.

Linking Vendors to Data Systems

Link a vendor to the data systems it supports, from either side:

From a vendor, open its Data Systems tab and choose Add Data System.
From a data system, choose Link Vendor. Concord suggests a vendor from its catalog when it recognizes the system.

This keeps your data map clear about who is involved in each system and which third parties have access to the data it holds.

Publishing Sub-Processors to Your Trust Center

You can publish your sub-processor list on your public Trust Center, so prospects and customers can see who processes their data without emailing your team.

Open your Trust Center's settings and turn on the Sub-processors section.
Choose the vendors, or data systems, to list.

Each sub-processor shows its name, description, and the countries where it processes data. Publishing from your maintained vendor list keeps the public list current instead of drifting from a separate document. A vendor's page shows which of your Trust Centers list it. See Trust Center Overview for how the public page is organized.

Who Can Manage Vendors

Owners and Admins can add and edit vendors. A Limited user can view them. See User Roles & Permissions.