What to request from Zanda
Ask Zanda support for the current documentation available for a cyber liability insurance or certificate of insurance request. Include the exact document name requested by the third party, any deadline, and whether they need insurance documentation, security compliance information, or contractual data-processing terms.
This helps the team confirm the right document or alternative resource for the third-party requirement.
Security and compliance resources you can share
For third-party security assurance, Zanda publishes resources that explain data protection, hosting, and contractual safeguards. These resources are often useful when an organization asks how Zanda manages cyber and data-security risk.
- The Zanda Security Overview explains hosting, data security, ISO 27001 certification, HIPAA, GDPR, encryption, and data-processing information.
- The Global Data Processing Agreement (DPA) describes data-processing terms and works with the Zanda Terms of Use.
- For U.S. healthcare providers, the Business Associate Agreement (BAA) is incorporated into the Global Data Processing Agreement.
- For EU and UK transfer safeguards, the Standard Contractual Clauses and UK Addendum are included in the Global Data Processing Agreement.
Frequently Asked Questions
❓ Can Zanda confirm whether a specific cyber liability insurance document is available?
Yes. Send the request to Zanda support with the exact wording from the third party. The team can confirm the current documentation available for that request.
❓ What should I share while I wait for a document request to be reviewed?
Share the Zanda Security Overview and the relevant agreement articles below. They explain Zanda security practices, data-processing terms, and regional safeguards.
❓ Should I tell a third party that Zanda has or does not have a standalone cyber liability insurance policy?
Use the current documentation provided by Zanda support for policy-status questions. Published security and agreement resources can support broader assurance requests, but they do not replace a current insurance confirmation.
Extracted PDF: d02adfc275d5966a.pdf
Zanda Global Data Processing Agreement (“DPA”) This Global Data Processing Agreement (“DPA”) is an agreement between you and the entity you represent (collectively referred to as “Customer,” “you,” or “your”) and Zanda Health Pty Ltd (“Zanda”, “we”, “us”, or “our”). This DPA supplements the Zanda Platform Terms of Use (“Terms of Use”) and governs the Processing of Personal Data by Zanda on behalf of the Customer in connection with the Customer’s use of the Services. The following appendices are attached and are an integral part of this DPA. Each appendix applies as required by the Customer’s local regulations: ● APPENDIX I – EU STANDARD CONTRACTUAL CLAUSES: CONTROLLER TO PROCESSOR: Governs the transfer of Personal Data from the EU to Zanda as a data processor in compliance with EU data protection laws. ● APPENDIX II – UK INTERNATIONAL DATA TRANSFER ADDENDUM TO THE EU COMMISSION STANDARD CONTRACTUAL CLAUSES: Provides additional safeguards and terms for data transfers from the UK to Zanda in compliance with UK data protection laws. ● APPENDIX III – US HIPAA BUSINESS ASSOCIATE AGREEMENT: Outlines Zanda’s obligations as a Business Associate when handling Protected Health Information (PHI) under the US Health Insurance Portability and Accountability Act (HIPAA). By accessing or using the Services you acknowledge that you have read, understood, and agree to be bound by this DPA. This DPA becomes effective upon your subscription to the Services and remains in effect for the duration of your subscription. All capitalised terms used in this DPA will have the meanings given to them in Section 14 of this DPA.
Docusign Envelope ID: C257CC82-01E9-4DA0-A39D-6D53E07FCEF2
1. Details of Data Processing 1.1. Scope and Roles This DPA applies to Processing Customer Data to provide the Services. Zanda acts as the Data Processor on behalf of the Customer, the Data Controller. 1.2. Data Processing Activities 1.2.1. Subject Matter: The…