# SaaS Vendor Data Processing Inventory

## Inventory Summary

| Metric | Value |
|--------|-------|
| **Organization** | Summit Cloud Partners |
| **Inventory Date** | [YYYY-MM-DD] |
| **Total Sanctioned Applications** | [N] |
| **DPA Coverage Rate** | [X]% |
| **Shadow IT Detections (Open)** | [N] |
| **Prepared By** | [Name, Title] |

## Sanctioned SaaS Applications (Tier 1)

| # | Vendor | Product | Category | Department | DPA Status | Risk Tier | Contract Expiry | Status |
|---|--------|---------|----------|------------|------------|-----------|----------------|--------|
| 1 | [Vendor] | [Product] | [Category] | [Dept] | [Status] | [Tier] | [Date] | [Status] |
| 2 | [Vendor] | [Product] | [Category] | [Dept] | [Status] | [Tier] | [Date] | [Status] |

## Application Detail Card

### [Application Name]

| Field | Value |
|-------|-------|
| **Vendor** | [Legal entity name] |
| **Product** | [Product name] |
| **Category** | [CRM / HR / Analytics / etc.] |
| **Business Owner** | [Name, Department] |
| **Procurement Date** | [YYYY-MM-DD] |
| **DPA Status** | [Executed / In Negotiation / Pending] |
| **DPA Reference** | [DPA-YYYY-XX-NNN] |
| **Risk Tier** | [High / Standard / Low] |
| **Integration** | [SSO / API / Manual / etc.] |
| **Contract Expiry** | [YYYY-MM-DD] |
| **Annual Cost** | [Amount] |
| **Active Users** | [Count] |

**Personal Data Processed:**

| Category | Direction | Retention |
|----------|-----------|-----------|
| [e.g., Name, email] | [Outbound] | [Per vendor policy] |
| [e.g., Usage analytics] | [Inbound] | [12 months] |

**Data Subjects:** [Employees / Customers / Prospects / etc.]
**Processing Locations:** [City, Country]
**Sub-Processors:** [Per vendor sub-processor register]

---

## Shadow IT Detection Log

| # | Application | Detection Method | Date | Users | Department | Risk | Status |
|---|------------|-----------------|------|-------|------------|------|--------|
| 1 | [App name] | [CASB/DNS/SSO/Expense] | [Date] | [N] | [Dept] | [Level] | [Status] |

## Quarterly Reconciliation Summary

**Quarter:** [Q1/Q2/Q3/Q4 YYYY]

| Metric | Count |
|--------|-------|
| Applications discovered | [N] |
| Applications in inventory | [N] |
| New (unsanctioned) detected | [N] |
| Possibly removed | [N] |
| Continuing (matched) | [N] |

**Actions Taken:**
- [Action 1]
- [Action 2]

## DPA Coverage Report

| Status | Count | Percentage |
|--------|-------|------------|
| DPA Executed | [N] | [X]% |
| DPA In Negotiation | [N] | [X]% |
| DPA Not Required | [N] | [X]% |
| DPA Pending | [N] | [X]% |
| **Total** | **[N]** | **100%** |

## Contract Renewal Calendar

| Application | Contract Expiry | Auto-Renewal | Action Required By |
|------------|----------------|--------------|-------------------|
| [App] | [Date] | [Date] | [Date — 90 days before] |

---

*This inventory is maintained per GDPR Article 30 requirements and the Summit Cloud Partners Vendor Privacy Management Policy. Quarterly reconciliation conducted by the Privacy Team.*