# SOC2 P6.4

URL: /systems/trust-and-governance/criteria/soc2/p6-4 · Id: `criterion:soc2:P6.4`

> The entity obtains privacy commitments from vendors and third parties with access to personal information, and assesses their compliance.

The entity obtains privacy commitments from vendors and third parties with access to personal information, and assesses their compliance.

| Property | Value |
| --- | --- |
| Framework | SOC2 |
| Reference | `P6.4` |
| Satisfied by | [Upstream review](/systems/trust-and-governance/controls/upstream-review) |