Skip to content
StartupBuilderby Startups.Studio
Workflows
Changelog
All Processes

Review an upstream

Review an upstream checks a new provider’s security, privacy terms and continuity before first use, and sets the date it is reviewed again.

Trigger

Runs on Integration.created. Part of Upstream review, run by the Operations Team.

Steps

  1. Score the provider’s security from its reports and certifications.
  2. Record whether it processes personal data, and sign its data processing terms when it does.
  3. Name the fallback provider the Startup fails over to.
  4. Approve or refuse the provider and set its review a year out.

Outputs

Example

A Startup adds a transcription provider. The Risk Analyst scores its security from its audit report. The Privacy Officer signs its data processing terms, and the next review is a year out.