CSA STAR Registry

Candex is a platform that simplifies the process of engaging, tracking, and paying for business services. The company provides its service via a streamlined, industry standard, secured integration from your procurement system. The integration allows for buyers in your organization to seamlessly submit purchase orders to different vendors via Candex as a technology-based master vendor. Candex is committed to protecting your data privacy and securing your information. We collect limited personal data (and no sensitive personal information), only as needed to provide our master vendor services, and comply with all applicable data privacy laws, including the European General Data Protection Regulation (GDPR). Our information security program is designed to ensure the security of all data processed by the entirety of the Candex Platform and its components, across the organization’s systems, subcontractors, and the Candex staff. We maintain an organization-wide information security program that consists of our ISO27001 information security policies and procedures, as well as other industry standard security programs and methods such as the AWS Well Architected program, CIS , and OWASP.