Vendor register
Manage and document providers and subprocessors for AI systems.
The vendor register captures all external providers and subprocessors involved in your AI systems. It provides the foundation for the subprocessor list in the Trust & Security Pack and for procurement audits.
Information
The vendor register is available from the Professional plan.
What is captured?
Provider name and type
Provider name and whether they are a processor, sub-processor, or platform provider.
Data protection basis
Contractual basis (e.g. DPA, SCCs) and legal basis for data transfer.
Data storage location
Where data is processed and stored – relevant for GDPR and EU AI Act.
Contact & contract details
Responsible contact person and contract duration.
Linked AI system
Which inventory system this vendor is assigned to.
Creating an entry – step by step
- 1Open Vendor Register in the left navigation
- 2Click "Create new entry"
- 3Enter provider name and select type
- 4Enter data protection basis and storage location
- 5Add contact person and contract duration
- 6Link to an AI system from the inventory
- 7Save
Connection to the Trust & Security Pack
The subprocessor list in the Go-Live Gate (Trust & Security Pack) and the vendor register are separate. The vendor register serves as the complete internal documentation; the Trust Pack subprocessors are the publicly communicated list. Both should be kept consistent.
