Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » GDPR » Third Party

Third Party

The GDPR defines a Third Party as any entity excluding the data controller, data subject, or processor who, under authorization of the processor or controller, is allowed to receive and process personal data. A third party is not a processor that works on behalf of the data controller. They are not restricted by the controller. Instead, they are allowed to receive and process data any way they deem fit. An example of a third-party under the GDPR is a social media plugin that is authorized by the data subject to collect data and process it appropriately.

Additional reading

PCI DSS for Startups: A Step-by-Step Guide

PCI DSS may look like an endless list of technical controls—firewalls, scans, questionnaires, but skipping it will put real risk on your shoulders. In 2023 alone, over 119 million stolen payment cards showed up on dark-web markets. For small teams juggling product launches and growth targets, it is easy to feel lost in the details. …

ISO 27001 Risk Management Policy – Steps to Get Started

TL,DR: An ISO 27001 risk management policy is a mandatory ISMS document that outlines how your organization identifies, assesses, treats, monitors, accepts, and reviews information security risks. The policy should document your risk appetite, risk assessment methodology, risk acceptance criteria, legal and regulatory requirements, treatment approach, roles and responsibilities, documentation requirements, and review cadence. ISO…

Audit Management: What, Why, and How to Do It Right

Back in the day, audits weren’t much of a headache unless you were a public company or dealing with federal contracts. Fast forward to now, mid-size SaaS companies, fintech startups, and healthcare scaleups are buried in audits. Because proving compliance has become essential to close deals, build trust, and meet growing regulatory demands.  And with…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.