Compliance
by @ops .NET + Postgres: Vendor Security Questionnaire & Third-party Risk Tracking
Vendor security questionnaires, response tracking, and risk scoring for third-party vendor assessment — distinct from Compliance Certification & Audit Evidence: that tracks YOUR OWN controls, this assesses the vendors and partners you depend on.
Loads this recipe straight into the wizard — every setting stays editable before you generate anything.
The stack
Install
# pulls this exact recipe straight from the Vault $ npx stacktora install dotnet-vendor-risk-questionnaire --remote $ stacktora sync # generate the files
What you get
More from the Vault
Compliance Certification & Audit Evidence Tracker
Tracks control status and collects audit evidence for certifications like SOC 2 or ISO 27001 — distinct from GDPR/Consent/Retention: those handle user data rights, this is evidence that YOUR controls are actually being followed.
Consent Management Platform
Cookie/privacy consent capture and an auditable record of what a user agreed to and when — distinct from the GDPR Data Rights recipe: that handles export/deletion requests after the fact, this is the consent record those requests get checked against.
Data Masking & Synthetic Test Data Generator
Generates realistic-but-fake data for staging/test environments via a worker, so real customer data never has to leave production. A genuine compliance concern hiding as a DevOps convenience.
Data Retention & Archival Policy Service
Scheduled, policy-driven data lifecycle enforcement — archive after X, delete after Y, per data type — with a worker that actually executes retention policy instead of it living only in a document nobody enforces. Distinct from the GDPR recipe: that's user-initiated requests, this runs on its own schedule.