Tejo Fresh (prospect): security questionnaire, 52 questions
Description
Tejo Fresh sent their security questionnaire: 52 questions, due Friday 30 October. 41 overlap with Halden's (ACM-268); 11 are new, mostly Portuguese data protection, text messages to Portuguese numbers, and their own retention rules. Raising it here so support and security can take their parts.
Tom
Comments (5)
18 and 19 drafted from SUP-1123: Textbridge delivers to all three Portuguese networks; six-digit code, valid ten minutes, five tries. Elif to confirm where Textbridge processes numbers.
Confirmed with Textbridge's account manager this morning; the wording is in Tom's draft.
Retention answers drafted: sign-in log 90 days, approvals audit log 400 days; retention settings per customer are being shaped, not promised. The penetration test report came in today: no critical or high findings, three medium, each with an owner and a date. Summary for question 22 is in the draft.
48 of 52 answered. Left: Maja's two and Mira's sign-off. Sending Thursday.
Yusuf: questions 18 and 19 (phone codes in Portugal: delivery, and where numbers are processed). Mira: 31 to 36 (retention, deletion). Maja: 44 (sub-processors) and 47 (DPA).