GitHub Org & Repository Access Audit
Inactive developer seats revoked; two-factor enforcement reviewed.
- Source
- manual attestation
- Recorded
- Sep 15, 2026
- Verifier
- Sample access reviewer
Third-party risk management
Vendor review, with evidence in view.
Review agreement coverage, residency, and the provenance of vendor evidence in one calm workspace. The current view is illustrative sample data, not a live vendor register.
Current workspace
Example data only
No vendor records have been added from this page. Labels describe the example source; they are not independent certifications.
4
sample vendor records
2
sample access reviews
Read-only
no live monitoring or automatic verification
Vendor ledger
Sub-processor review records
Agreement and assurance fields are displayed separately so their source and date remain legible.
| Vendor | Category | Agreements | BAA / DPA | SOC 2 report | Residency | Evidence provenance | Status |
|---|---|---|---|---|---|---|---|
| Acme Cloud Services (Sample) | Cloud Infra & KMS | HIPAA BAA + DPA | EU (Frankfurt / Dublin) |
| Sample · self-reported Example metadata; not independently certified. | ||
| FictitiousDB Platform (Sample) | Postgres RLS & Vault | HIPAA BAA + DPA | EU (Frankfurt / Dublin) |
| Sample · self-reported Example metadata; not independently certified. | ||
| PayCorp Gateway (Sample) | PCI-DSS Gateway | PCI-DSS + DPA | Global Dual-Region |
| Sample · self-reported Example metadata; not independently certified. | ||
| Sample AI Models (Sample) | AI Inference Pipeline | Zero-Data DPA | US (N. Virginia) |
| Sample · self-reported Example metadata; not independently certified. |
Access review
Quarterly access-review examples
AWS IAM & Cloud Credentials Review
IAM access keys reviewed; root credentials rotation recorded.
- Source
- manual attestation
- Recorded
- Sep 15, 2026
- Verifier
- Sample cloud security reviewer