Vendor compliance
On behalf of institutions, we perform privacy and security risk analyses on vendors. In this way, we jointly fulfil statutory obligations. By combining expertise, we achieve cost savings, knowledge sharing and, on behalf of the education and research sector, we have a stronger negotiating position towards vendors.
SURF has identified 14 high risks and one low risk in its Data Protection Impact Assessment (DPIA) on Qualtrics DesignXM, a market research and experience design platform.
News
SURF continues to advise educational and research institutions to exercise caution when deploying Microsoft 365 Copilot. Although Microsoft has made improvements to the AI assistant since SURF first…
News
''We'd love to hear which compliance pathways you think are important''.