Vendor Code of Conduct

This Vendor Code of Conduct sets baseline expectations for suppliers, subprocessors, and integration partners that process data on behalf of Vatengi Systems LLC or support the Vatengi platform.

1. Integrity and lawfulness

• Comply with applicable laws, including privacy, anti-bribery, export control, and labor standards.
• Provide accurate information about services, data flows, and security controls.
• Notify us promptly of material security incidents affecting our data or customers.

2. Privacy and data protection

• Process personal data only on documented instructions and for agreed purposes.
• Maintain appropriate technical and organizational security measures.
• Support data subject rights and audit requests required under our agreements.
• Use subprocessors only with appropriate contractual safeguards and notice where required.

3. Security

• Protect credentials, API keys, and customer data from unauthorized access.
• Report confirmed breaches without undue delay and cooperate on remediation.
• Maintain vulnerability management and access controls proportionate to data handled.

4. Customer-facing services

Partners whose integrations appear in Vatengi must not encourage unlawful scraping, spam, or circumvention of credit, reveal, or export controls. Customer use of integrations remains governed by our Acceptable Use Policy.

5. Reporting concerns

Report vendor conduct concerns to compliance@vatengi.com.