Skip to main content
All CollectionsPersonal Data Inventory
How does the vendor scanner work?
How does the vendor scanner work?
Alex Franch Tapia avatar
Written by Alex Franch Tapia
Updated yesterday

This applies to customers on the following plans:

  • COMPLY Pro, COMPLY Scale and COMPLY Plus

  • GDPR Pro, GDPR Essentials, GDPR Scale, GDPR Plus (legacy)

The platform will run a vendor scan every month on the domains that you have configured in Settings > Company > General

It will compare the tools and third parties found with those already existing in your Tools and Third Parties page.

Tools not already in your inventory or archived will be added to the New Tools Found section.

You can:

  • Add to Inventory - which will load recommendations for connected processes, data types and individuals to add them to your inventory (see Google Analytics example below).

    • Adding a tool to your inventory may affect your Cookie Banner, Cookie Policy or Data Processing Agreement depending on its recommended information.

  • Dismiss them which will prevent the Scanner from asking for it again. If you want to reset your dismissal list, get in touch with support.

Vendor Scanner example for Google Analytics

See an example where the Vendor Scanner scans your website to find you now use Google Analytics.

Recommendations can augment information about your data inventory

For a Tool and Third Party, we can recommend:

  • Tool Name

  • Linked processes, individuals and data types (including sensitive ones)

  • About cookies:

    • If it places cookies

    • Cookie category (Necessary, Functional, Analytical or Targeting)

    • Cookie purpose

  • Data residency

  • Link to Tool's Privacy Policy, Security Measures page and Data Processing Agreement (and if it is by reference or if it requires a signature.

For a Process, we can recommend:

  • Process Name

  • Role (Controller, Joint Controller or Processor)

  • Legal Basis, normal (article 6) and special category (article 9)

  • Linked tools, individuals and data types (including sensitive ones)

  • Retention period

For an Individual, we can recommend:

  • The type (Customers, Staff, Prospects, Others)

  • Linked process, tools and data types (including sensitive ones)

For an element, we can recommend:

  • If it's sensitive or not

  • Examples of that category (Email Address is an example of Contact Details)

Did this answer your question?