Placeholder legal copy — replace before launch. VendorFlag is a record-keeping tool for a customer’s own vendor list; it does not independently verify a vendor’s security practices and is not a SOC 2 or compliance certification service.