Third-Party Node Properties

Source model: ThirdPartyContextProperties in code.

Third-Party Property Catalog

Engineering

vendorJurisdiction

• Type: string | null
• Description: Legal jurisdiction governing the vendor entity and contracts.
• Example: "Delaware, United States"

legalName

• Type: string | null
• Description: Registered legal name of the vendor organization.
• Example: "Stripe, Inc."

country

• Type: string | null
• Description: Primary country of operation or legal incorporation.
• Example: "United States"

industry

• Type: string | null
• Description: Industry sector in which the vendor operates.
• Example: "Financial Technology"

website

• Type: string | null
• Description: Public website URL for the vendor.
• Example: "https://stripe.com"

primaryContactEmail

• Type: string | null
• Description: Email address for the primary vendor contact.
• Example: "jane.mitchell@vendor.com"

dpoContact

• Type: string | null
• Description: Contact point for the vendor’s Data Protection Officer or privacy team.
• Example: "privacy@vendor.com"

connectionType

• Type: string | null
• Description: Integration connectivity pattern used between your systems and the vendor.
• Example: "Outbound REST API over HTTPS"

Security

encryptAtRest

• Type: string
• Description: Declared controls for encryption of stored data at the vendor.
• Example: "AES-256 for all customer data stores"

authenticationMethod

• Type: string | null
• Description: Authentication method used for the technical integration.
• Example: "OAuth 2.0 client credentials"

serviceUrl

• Type: string | null
• Description: Base service endpoint used for the integration.
• Example: "https://api.vendor.com/v1"

apiVersion

• Type: string | null
• Description: Version of the third-party API currently integrated.
• Example: "2025-10-01"

integrationStatus

• Type: string | null
• Description: Operational status of the integration in your environment.
• Example: "Production"

codeReference

• Type: string | null
• Description: Internal code location where this integration is implemented.
• Example: "backend/src/integrations/stripe/stripe.service.ts"

repositoryPackageName

• Type: string | null
• Description: Package or module name tied to this vendor integration.
• Example: "@dataparade/integration-stripe"

documentationUrl

• Type: string | null
• Description: Internal or external documentation link for maintenance and onboarding.
• Example: "https://docs.vendor.com/api"

rateLimits

• Type: string | null
• Description: Vendor-imposed API limits relevant to reliability and throttling strategy.
• Example: "100 requests/second with burst to 200"

technicalOwnerTeam

• Type: string | null
• Description: Internal team accountable for technical operation of this integration.
• Example: "Payments Platform Team"

slaUptimeGuarantee

• Type: string | null
• Description: Contracted uptime commitment provided by the vendor.
• Example: "99.9% monthly uptime SLA"

thirdPartyTypeProperties

• Type: Record<string, unknown>
• Description: Type-specific metadata relevant to the selected thirdPartyType.
• Example: {"pciScope":"in-scope","settlementWindow":"T+2","chargebackSupport":true}

Privacy

dpaStatus

• Type: string | null
• Description: Current lifecycle status of the DPA document.
• Example: "Executed"

dpaExpiryDate

• Type: string | null
• Description: Date when the current DPA expires and renewal is required.
• Example: "2027-03-31"

dataTransferMechanism

• Type: string | null
• Description: Legal mechanism used for international personal data transfers.
• Example: "EU SCCs (2021) + UK IDTA addendum"

complianceCertifications

• Type: string[]
• Description: Security or privacy certifications held by the third party.
• Example: ["SOC 2 Type II", "ISO 27001", "CSA STAR"]

adequacyDecisionCountry

• Type: boolean
• Description: Whether vendor processing occurs in a country with an adequacy decision.
• Example: false

processingPurpose

• Type: string[]
• Description: Approved purposes for which the third party processes the data.
• Example: ["Payment processing", "Fraud detection", "Service delivery"]

dataActions

• Type: Array<{ action: string; source: "deterministic" | "ai" | "user"; confidence: number; evidence: unknown; qualifier?: string; status?: "asserted" | "candidate" }>
• Description: Set-valued privacy verbs for what happens to data at this vendor node (same taxonomy as asset dataActions). Typical scan results include disclose, store, or candidate relay. Populated by the structural scan; optional AI may add or promote verbs; user edits keep precedence on re-import. Actors never receive this field.
• Example: [{ "action": "disclose", "source": "deterministic", "confidence": 1, "evidence": [...], "status": "asserted" }]

primaryDataAction

• Type: string | null
• Description: Display-only single verb (canvas badge / default chip). Does not replace the full dataActions set.
• Example: "disclose"

dataRetentionPeriodDays

• Type: number | null
• Description: Number of days the vendor retains data before deletion.
• Example: 180

legalBasis

• Type: string | null
• Description: Legal basis relied on for sharing personal data with this vendor.
• Example: "Contract performance"

lastAssessmentDate

• Type: string | null
• Description: Date the vendor was last assessed for security and privacy risk.
• Example: "2026-04-15"

securityQuestionnaireCompleted

• Type: boolean
• Description: Indicates whether vendor security due diligence questionnaire is completed.
• Example: true

auditLoggingEnabled

• Type: boolean
• Description: Whether the vendor provides audit logging for relevant access and actions.
• Example: true

thirdPartyType

• Type: string | null
• Description: Canonical category used to classify this third party in the model.
• Example: "payment_processor"

primaryContactName

• Type: string | null
• Description: Primary business or operational contact for this vendor relationship.
• Example: "Jane Mitchell"

Legal/Compliance

dataProcessingAgreementInPlace

• Type: boolean
• Description: Indicates whether a signed Data Processing Agreement (DPA) exists with this vendor.
• Example: true

Data Processing

dataCategories

• Type: string[]
• Description: Categories of data shared with or processed by this third party.
• Example: ["Customer identifiers", "Billing metadata", "Support logs"]

Risk Assessment

riskRating

• Type: string | null
• Description: Assessed risk level of this third-party relationship.
• Example: "high"

Extensibility

customAttributes

• Type: Record<string, unknown>
• Description: Additional organization-specific metadata not covered by standard fields.
• Example: {"vendorId":"VEN-042","renewalQuarter":"Q1","criticality":"tier-1"}