Data Protection & GDPR

Contract Management

Manage contractual commitments as control points, not as prose

Security requirements are negotiated carefully and then never touched again. Contract management instead maintains them as individual control points: each requirement with a direction (owed to us or to the supplier), criticality, form of evidence, evidence status and a reference to the contract clause. Alongside sit obligations with deadlines, SLA definitions with service hours and escalation rules, and deadlines with advance warning. Three daily check runs flag what is overdue, warn ahead of upcoming dates and automatically move recurring evidence from provided to expired once it lapses.

DSGVONIS2ISO 27001
Features

Your benefits

1

Requirements in both directions

Not only what the supplier owes, but your own duties to cooperate as well. Every requirement with criticality, category, owner and clause reference.

2

Evidence that can expire

Form of evidence and an evidence status of missing, provided or expired. Recurring evidence lapses automatically once due and notifies the owner.

3

SLAs with consequence

Response time, resolution time, availability and incident notification deadlines as targets with service hours and defined escalation rules.

4

The contract knows its objects

Linked to IT systems, software, licences, processes, rooms, networks, service providers and records of processing. When a contract expires, what hangs off it is visible.

Capabilities

Everything this module can do

  • Contract requirements directed to us or to the supplier
  • Form of evidence and status (missing, provided, expired)
  • Categories: security, privacy, SLA, legal, compliance, incident
  • Evidence types: certificate, audit report, pentest report, declaration
  • Contract obligations with deadline, priority and owner
  • SLA definitions: response/resolution time, availability, notification deadline
  • Service hours and escalation rules per SLA
  • Deadlines with advance warning, recurrence and notification address
  • Daily check runs for requirements, obligations and deadlines
  • Automatic lapse of recurring evidence
  • DPA contracts create processors automatically
  • Standard catalog of contract types incl. DPA and NDA
  • Automatic contract number and contract versioning
  • Linking to IT systems, software, licences and processes
  • Linking to rooms, networks and information domains
  • Linking to the record of processing activities
  • Supplier assessment, risk profile and treatment plan
  • Special agreements per contract

Experience Contract Management live

Schedule a no-obligation demo – we will show you the module with your own use cases.