Evidence · SOC2-REQ-039

Salesforce: Contract clause checklist per vendor

Under reviewAutomated test resultCollected 6 Oct 2026

Requirement to validation

Requirement
ISO-A.5.20 · RBI-OITS-2023-6 · SOC2-CC9.2
mapped
Policy
Vendor & IT Outsourcing Risk Policy
pol-vendor
Control
VEN-02
Provider contracts include data protection and RBI audit clauses
Application
Salesforce (Sales + Financial Services Cloud)
mapped
Evidence · Q3
1 items
0 approved · 1 pending · 0 rejected
Test · Q3
Not tested
Finding
F-ISO-02 · Medium
Open
Action
Sanjay Kulkarni
REM-F-ISO-02 · In Progress
Validation
Pending
as recorded

Record

Control
VEN-02 · Provider contracts include data protection and RBI audit clauses
Source system
Cycle
Q3 2026 Unified Program Review
Review note
Submitted by the control owner; awaiting auditor review.
Provenance
PBC request REQ-039 · 2026 SOC 2 Type II Audit