STAR Registry Listing for
Candex
Candex
Candex is a platform that simplifies the process of engaging, tracking, and paying for business services. The company provides its service via a streamlined, industry standard, secured integration from your procurement system. The integration allows for buyers in your organization to seamlessly submit purchase orders to different vendors via Candex as a technology-based master vendor.
Candex is committed to protecting your data privacy and securing your information. We
collect limited personal data (and no sensitive personal information), only as needed to
provide our master vendor services, and comply with all applicable data privacy laws,
including the European General Data Protection Regulation (GDPR). Our information
security program is designed to ensure the security of all data processed by the entirety
of the Candex Platform and its components, across the organization’s systems,
subcontractors, and the Candex staff. We maintain an organization-wide information
security program that consists of our ISO27001 information security policies and
procedures, as well as other industry standard security programs and methods such as
the AWS Well Architected program, CIS , and OWASP.

Listed Since: 11/28/2023
Last Updated: 11/28/2023
STAR Level 1
Self-Assessment & Partner-Provided

CAIQ Self-assessment v4.0.2
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).