Third-Party Vendor Campaign Request Form

General Campaign Questions

Vendor information

Please follow-up directly with the vendor to get or confirm this information as needed.

IT review

For the needed IT review, the vendor should supply Cybersecurity Policy Documentation. This can be done two ways:

Option 1: Submitting the following separate documents -- an Incident Response Policy, Access Control Policy, Disaster Recovery/Business Continuity Plan and a Data Retention, Handling and Disposal Policy.

Option 2: Submitting either the SSAE-18 SOC-2 type 2 or SOC-2 report.

In the following question, please indicate which of these methods you will be able to get from the vendor.

Additional information

Please use the space below to provide details regarding the platforms, services and resources that will be used for this campaign:

If you use Facebook, your vendor will be required to provide admin access to the Facebook ad account so the ads can be archived. Content/ads will still need to be compliance-approved beforehand.