ID,Supplier,Service,Category,Criticality,Data Accessed,Location,Contract Start,Contract End,DPA Signed,Certifications,Last Review,Review Result,Next Review,Status,Owner
SUP-001,Amazon Web Services,Cloud infrastructure (eu-central-1),IaaS,Critical,Customer database + backups,Frankfurt DE,2023-01-01,2026-12-31,Yes,ISO 27001 SOC 2 C5,2026-01-15,Satisfactory,2027-01-15,Active,IT Operations Lead
SUP-002,Microsoft,M365 + Azure AD,SaaS,Critical,Email + files + identity,EU cloud,2022-06-01,2026-05-31,Yes,ISO 27001 SOC 2 C5,2025-11-20,Satisfactory,2026-11-20,Active,ISO
SUP-003,Personio,HR SaaS,SaaS,High,Employee master data payroll,Munich DE,2023-03-01,2026-02-28,Yes,ISO 27001,2025-12-01,Satisfactory,2026-12-01,Active,HR Lead
SUP-004,Vendor X Logistics,Logistics portal SaaS,SaaS,Critical,Customer shipments,Amsterdam NL,2024-01-01,2027-12-31,Yes,ISO 27001,2026-02-10,Satisfactory - one minor finding,2027-02-10,Active,Head of Ops
SUP-005,SecureIT GmbH,Data destruction,Service,Low,Physical media,Hamburg DE,2022-01-01,2026-12-31,N/A,DIN 66399,2025-09-01,Satisfactory,2026-09-01,Active,IT Operations Lead
SUP-006,CleanOffice GmbH,Office cleaning,Service,Low,Physical premises,Hamburg DE,2023-06-01,2026-05-31,No (NDA only),N/A,2025-10-01,Satisfactory,2026-10-01,Active,Facilities Lead
SUP-007,Fortinet (via reseller),Firewall hardware + support,Hardware/Support,High,Network traffic metadata,Remote support,2024-01-01,2027-12-31,N/A,ISO 27001 (vendor),2025-12-10,Satisfactory,2026-12-10,Active,IT Operations Lead
SUP-008,Splunk,SIEM SaaS,SaaS,High,Log data (including PII metadata),EU cloud,2023-09-01,2026-08-31,Yes,ISO 27001 SOC 2,2026-01-25,Satisfactory,2027-01-25,Active,ISO
SUP-009,Kanzlei Weber & Partner,Legal counsel,Service,Medium,Contract data,Hamburg DE,2021-01-01,Rolling,Yes,N/A,2025-11-01,Satisfactory,2026-11-01,Active,CEO
SUP-010,KPMG,External ISMS audit,Service,Medium,ISMS documentation,Hamburg DE,2024-01-01,2026-12-31,N/A (auditor),ISO 17021,2025-06-01,Satisfactory,2026-06-01,Active,ISO
SUP-011,DHL Express,Parcel delivery,Service,Low,Shipment addresses,Global,2020-01-01,Rolling,Yes,N/A,2025-11-15,Satisfactory,2026-11-15,Active,Head of Ops
SUP-012,Let's Encrypt (ISRG),TLS certificates,Service,Medium,Public keys only,Global,2022-01-01,Rolling,N/A,Web PKI audit,2026-01-01,Satisfactory,2027-01-01,Active,IT Operations Lead