Skip to content

Master Supplier Register (Annex A.5.19)

Supplier Name Service Provided Criticality Data Stored / Handled Security Accreditations Review Cadence
Microsoft M365 (Email, OneDrive, Intune) Critical Corporate files, internal chat, emails ISO 27001, SOC 2, FedRAMP Annual
Amazon Web Services (AWS) Cloud Infrastructure Hosting Critical Production databases, application backend ISO 27001, SOC 1/2/3, PCI-DSS Annual
GitHub Source Code & CI/CD Pipelines High Intellectual property, configuration scripts SOC 2 Type II, ISO 27001 Annual
Cloudflare Edge DNS, CDN, WAF, Zero Trust High Network traffic, DNS routing ISO 27001, SOC 2 Type II Annual
Xero Cloud Accounting & Payroll Medium Employee payroll, invoicing, bank details ISO 27001, SOC 2 Type II Annual