Third-Party and Vendor Security Policy

To ensure that third-party vendors and service providers meet appropriate security standards when handling our organization's data.

This policy applies to all Inspirational Hope staff, volunteers, contractors, board members, and technologies used in our programs, services, and operations.

We commit to evaluating vendor security practices before engagement, requiring appropriate data protection agreements, and monitoring vendor compliance.

The Executive Director is responsible for overseeing implementation of this policy. The Board of Directors provides governance oversight and approval. All staff and volunteers are responsible for compliance and for raising concerns when they arise.

Concerns about this policy should be reported to the Executive Director at bethany@inspirationalhope.org or through our confidential reporting process. Retaliation against anyone reporting a concern in good faith is strictly prohibited.

This policy is reviewed at least annually and may be updated as technology, cybersecurity risks, legal requirements, and organizational practices evolve.