Do your vendors have control over security systems and protocols to protect your data? An ISAE 3000 GDPR report is an independent auditor's statement that your supplier's data protection is under control.
TimeLog has just obtained the two independent auditor statements ISAE 3000 and ISAE 3402