
Tips for more secure software and data vendor agreements
Gary Orenstein, CCO at Bitwarden, pointed to data protection policies as a bare-bones necessity for any contracted agreement between a vendor and organization. “There’s a set of information security policies that most companies maintain, and a buyer will likely want to understand and see those security policies. A buyer will want to understand the details on data protection, and depending on the application, the encryption,” Orenstein said, pointing to end-to-end encryption as a prerequisite.














