Why It Matters
Security review is often the longest step in buying legal tech. A focused questionnaire that asks for existing reports first, then fills gaps, gets answers faster than a 300-question spreadsheet.
Related Terms
- SOC 2 Type II
- An independent audit report showing that a vendor's security controls were designed well and worked over a period of months, usually six to twelve.
- DPA (data processing agreement)
- A contract that governs how a vendor processes personal data on a customer's behalf, required in many cases under the GDPR and similar laws.
- RFP (request for proposal)
- A structured document asking vendors to respond to the same requirements, questions and pricing format so they can be compared fairly.
General information, not legal advice. Part of the Legal Tech Glossary, 173 terms in plain English.