Compliance
Privacy and AI governance programmes. Three tools, one login.
Know what every vendor does with your clients' data: documented evidence, review by a qualified privacy professional, and an open attestation standard.
AI Sentinel
Register, classify and govern the AI systems a company runs, mapped to the EU AI Act, NIST and ISO 42001.
DPO Central
The privacy programme in one place: records, requests, assessments, vendors, incidents. Shares the suite's single login.
Security measures without compromise
We would rather show you than ask for your trust. These are the protections on our cloud, and each one is something we run and test ourselves.
No passwords to steal.
You sign in with Google or with a single-use link sent by email, and one sign-in works across the TODO.LAW apps.
Your records stay yours.
Before anything is shown or changed, our server checks your organization and your role.
Encrypted in transit and at rest.
HTTPS on every connection, and AES-256 for stored data and its copies.
AI only when you choose.
AI features are off until an administrator turns them on; while they are off, nothing goes to an AI provider. VendorWatch sends none of your data to one.
Nothing is lost.
Seven days of continuous history, a daily copy kept for 30 days, a restore tested every quarter, and everything exportable whenever you like.
Certified providers.
Our hosting, database and email providers hold SOC 2 Type II, and the first two ISO 27001 as well. We do not hold a certification of our own, and we say so.
If your firm needs more (its own servers, data that never leaves your network, or your own certifications), the same software runs on an isolated instance we run for you or on your own servers.
Run it your way
Every product runs in our cloud or on an isolated instance we run for you, and we can also install it with you on your own servers. Our hosting choices can adapt to your security, confidentiality, availability, or data governance and legal compliance requirements, including: ISO 27001, SOC 2 Type II, NIST, DORA, NIS2, EUCC, CMMC, HIPAA, AI RMF, MCC-AI, ISO 42001, and more.