Skip to main content

Vendor attestation

Security › Reports › Vendor attestation (/<org>/_admin/security/reports/vendor-attestation) generates a document for vendor due-diligence questionnaires. It lists:

  • fremforge’s sub-processors;
  • where your organisation’s data is located;
  • the certifications inherited from sub-processors;
  • the DPA, SLA and AUP versions in force for your subscription.

Generate attestation PDF makes a new one. The latest is downloadable from the same page. Generate a new one once a year, and whenever a sub-processor changes.

The same document is GET /_app/api/v1/orgs/{org}/attestation (scope audit:read), as HTML, or wrapped in JSON with ?format=json.

This is about fremforge, not about what happens in your organisation. For that, see Control evidence.

Security digestSIEM forwarding