Loading…
Vendor inventory, governance status, and public-surface assessment.
Third-party vendor risk across your supply chain.
17 vendors · 13 active · 4 under review · 11 handling personal data · 1 high risk · 3 medium risk · 13 low risk
| Vendor | Category | Risk | Privacy | Security | DPA | Personal Data | Public Surface |
|---|---|---|---|---|---|---|---|
AWS Primary cloud — PPV streaming, script vault, talent DB | Platforms / Applications | 22 | Approved | Approved | Signed | Yes | aws.amazon.com 3 IPs · 5 platforms |
Microsoft Azure Secondary cloud — Office 365 backend, AD integration | Platforms / Applications | 26 | Approved | Approved | Signed | Yes | azure.microsoft.com 3 IPs · 4 platforms |
Google Workspace Productivity — Gmail, Drive, Calendar for staff and talent | Platforms / Applications | 24 | Approved | Approved | Signed | Yes | workspace.google.com 2 IPs · 4 platforms |
Monday.com Project tracking for security & compliance initiatives | Platforms / Applications | 25 | Approved | Pending | Signed | No | monday.com 2 IPs · 3 platforms |
Supabase Auth + Postgres for fan engagement portal | Platforms / Applications | 30 | Approved | Approved | Signed | Yes | supabase.com 2 IPs · 4 platforms |
Vercel Frontend hosting for wwe.com and fan portal | Platforms / Applications | 28 | Approved | Approved | Signed | Yes | vercel.com 2 IPs · 3 platforms |
SendGrid Transactional + marketing email for fan newsletters | Platforms / Applications | 52 | Pending | Approved | Pending | Yes | sendgrid.com 2 IPs · 3 platforms |
Zoom Video conferencing — staff, talent calls, board meetings | Platforms / Applications | 31 | Approved | Approved | Signed | Yes | zoom.us 2 IPs · 4 platforms |
Anthropic Claude API — drives CYBEREYE consolidation engine and Q&A | AI Tools | 34 | Approved | Approved | Signed | No | anthropic.com 1 IPs · 3 platforms |
OpenAI Backup LLM — content generation for marketing | AI Tools | 58 | Pending | Pending | Pending | No | openai.com 1 IPs · 3 platforms |
Cursor AI-assisted IDE used by internal dev team | AI Tools | 72 | Pending | Failed | Not Required | No | cursor.com 1 IPs · 2 platforms |
Stripe Payment processing — PPV subscriptions, merchandise, live-event ticketing | DPA — Processors / Sub-Processors | 24 | Approved | Approved | Signed | Yes | stripe.com 3 IPs · 4 platforms |
Twilio SMS + WhatsApp notifications — MFA codes, match alerts, fan engagement | DPA — Processors / Sub-Processors | 35 | Approved | Pending | Signed | Yes | twilio.com 2 IPs · 3 platforms |
HubSpot Fan CRM — subscriber profiles, email campaigns, PPV purchase history | DPA — Processors / Sub-Processors | 48 | Pending | Approved | Pending | Yes | hubspot.com 2 IPs · 4 platforms |
KPMG WWE Practice External auditor — SOC 2 and ISO 27001 audits | Consultants | 18 | Approved | Approved | Signed | Yes | kpmg.com 1 IPs · 1 platforms |
Coalfire Sports PCI DSS assessor + pentesting for PPV payment flows | Consultants | 22 | Approved | Approved | Signed | No | coalfire.com 1 IPs · 1 platforms |
Jonathan & Cyber vCISO advisory — strategy, board reporting, IR retainer | Consultants | 20 | Approved | Approved | Signed | No | vciso.co.il 1 IPs · 1 platforms |