VENDOR CERTS.

24 vendor certifications inventoried (SOC2, ISO, PCI, HIPAA BAAs). 6 vendors with expired certs still in use. 2 vendors never produced the SOC2 they claimed in proposal.

The cert your vendor sent at signing isn't the cert they renewed.

VC-013 · analytics vendor · SOC2 Type II NEVER PROVIDED

Promised in 2024 contract. 13 follow-ups. No report ever delivered.

Escalate to contract owner, threaten termination, find alt vendor.