Third-Party Node Properties

Source model: ThirdPartyContextProperties in code.

Third-Party Property Catalog

Engineering

vendorJurisdiction

• Type: string | null
• Description: Legal jurisdiction governing the vendor entity and contracts.
• Example: "Delaware, United States"

legalName

• Type: string | null
• Description: Registered legal name of the vendor organization.
• Example: "Stripe, Inc."

country

• Type: string | null
• Description: Primary country of operation or legal incorporation.
• Example: "United States"

industry

• Type: string | null
• Description: Industry sector in which the vendor operates.
• Example: "Financial Technology"

website

• Type: string | null
• Description: Public website URL for the vendor.
• Example: "https://stripe.com"

primaryContactEmail

• Type: string | null
• Description: Email address for the primary vendor contact.
• Example: "jane.mitchell@vendor.com"

dpoContact

• Type: string | null
• Description: Contact point for the vendor’s Data Protection Officer or privacy team.
• Example: "privacy@vendor.com"

connectionType

• Type: string | null
• Description: Integration connectivity pattern used between your systems and the vendor.
• Example: "Outbound REST API over HTTPS"

Security

encryptAtRest

• Type: string
• Description: Declared controls for encryption of stored data at the vendor.
• Example: "AES-256 for all customer data stores"

authenticationMethod

• Type: string | null
• Description: Authentication method used for the technical integration.
• Example: "OAuth 2.0 client credentials"

serviceUrl

• Type: string | null
• Description: Base service endpoint used for the integration.
• Example: "https://api.vendor.com/v1"

apiVersion

• Type: string | null
• Description: Version of the third-party API currently integrated.
• Example: "2025-10-01"

integrationStatus

• Type: string | null
• Description: Operational status of the integration in your environment.
• Example: "Production"

codeReference

• Type: string | null
• Description: Internal code location where this integration is implemented.
• Example: "backend/src/integrations/stripe/stripe.service.ts"

repositoryPackageName

• Type: string | null
• Description: Package or module name tied to this vendor integration.
• Example: "@dataparade/integration-stripe"

documentationUrl

• Type: string | null
• Description: Internal or external documentation link for maintenance and onboarding.
• Example: "https://docs.vendor.com/api"

rateLimits

• Type: string | null
• Description: Vendor-imposed API limits relevant to reliability and throttling strategy.
• Example: "100 requests/second with burst to 200"

technicalOwnerTeam

• Type: string | null
• Description: Internal team accountable for technical operation of this integration.
• Example: "Payments Platform Team"

slaUptimeGuarantee

• Type: string | null
• Description: Contracted uptime commitment provided by the vendor.
• Example: "99.9% monthly uptime SLA"

thirdPartyTypeProperties

• Type: Record<string, unknown>
• Description: Type-specific metadata relevant to the selected thirdPartyType.
• Example: {"pciScope":"in-scope","settlementWindow":"T+2","chargebackSupport":true}

Privacy

dpaStatus

• Type: string | null
• Description: Current lifecycle status of the DPA document.
• Example: "Executed"

dpaExpiryDate

• Type: string | null
• Description: Date when the current DPA expires and renewal is required.
• Example: "2027-03-31"

dataTransferMechanism

• Type: string | null
• Description: Legal mechanism used for international personal data transfers.
• Example: "EU SCCs (2021) + UK IDTA addendum"

complianceCertifications

• Type: string[]
• Description: Security or privacy certifications held by the third party.
• Example: ["SOC 2 Type II", "ISO 27001", "CSA STAR"]

adequacyDecisionCountry

• Type: boolean
• Description: Whether vendor processing occurs in a country with an adequacy decision.
• Example: false

processingPurpose

• Type: string[]
• Description: Approved purposes for which the third party processes the data.
• Example: ["Payment processing", "Fraud detection", "Service delivery"]

dataRetentionPeriodDays

• Type: number | null
• Description: Number of days the vendor retains data before deletion.
• Example: 180

legalBasis

• Type: string | null
• Description: Legal basis relied on for sharing personal data with this vendor.
• Example: "Contract performance"

lastAssessmentDate

• Type: string | null
• Description: Date the vendor was last assessed for security and privacy risk.
• Example: "2026-04-15"

securityQuestionnaireCompleted

• Type: boolean
• Description: Indicates whether vendor security due diligence questionnaire is completed.
• Example: true

auditLoggingEnabled

• Type: boolean
• Description: Whether the vendor provides audit logging for relevant access and actions.
• Example: true

thirdPartyType

• Type: string | null
• Description: Canonical category used to classify this third party in the model.
• Example: "payment_processor"

primaryContactName

• Type: string | null
• Description: Primary business or operational contact for this vendor relationship.
• Example: "Jane Mitchell"

Legal/Compliance

dataProcessingAgreementInPlace

• Type: boolean
• Description: Indicates whether a signed Data Processing Agreement (DPA) exists with this vendor.
• Example: true

Data Processing

dataCategories

• Type: string[]
• Description: Categories of data shared with or processed by this third party.
• Example: ["Customer identifiers", "Billing metadata", "Support logs"]

Risk Assessment

riskRating

• Type: string | null
• Description: Assessed risk level of this third-party relationship.
• Example: "high"

Extensibility

customAttributes

• Type: Record<string, unknown>
• Description: Additional organization-specific metadata not covered by standard fields.
• Example: {"vendorId":"VEN-042","renewalQuarter":"Q1","criticality":"tier-1"}