Glossary of Compliance
Compliance Glossary
Our list of curated compliance glossary offers everything you to know about compliance in one place.
Restriction on Processing
Restriction on Processing is a right given by GDPR which allows individuals to restrict the processing of their data in certain circumstances. This acts as an alternate option to requesting complete removal/erasure of data. It is applicable when the data is inaccurate, lawfully processed, no longer needed by the controller but needed by the individual, and the individual has made an objection and the controller is considering if their legal grounds overrides that of the individuals.
Additional reading
What is Vendor Review – Document Review & Examples
TL,DR: A vendor review evaluates risks associated with a vendor’s product or service, covering data handling, physical security, and compliance with HIPAA, GDPR, ISO 27001, and SOC 2 Reviews occur at 3 stages: onboarding (during RFP process), ongoing (periodic assessments based on risk level), and triggered (when incidents or warning signs appear). High-risk vendors require…
Guide to ISO 27001 for Small Businesses
TL;DR ISO 27001 for small business means building an ISMS to identify, manage, and reduce security risks, with the framework scaling so you implement only the controls relevant to your operational risks, not every standard control. Implementation follows six core steps: a comprehensive gap analysis, an end-to-end plan and roadmap, risk management and analysis (including…
Your Guide to ISO 42001 Controls for AI Governance
TL;DR ISO/IEC 42001 is the first global standard focused solely on AI governance, not just AI deployment. It addresses ethical, safe, and transparent AI system management through 38 structured controls ISO 42001 Implementation requires cross-functional accountability, continuous monitoring, and alignment with organizational objectives Key challenges include identifying hidden AI systems, unclear ownership, and adapting to…

Sprinto: Your growth superpower
Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.






