Vendor risk management compliant with LFPDPPP
Aranis maps privacy controls required by Mexico's Federal Law on Protection of Personal Data Held by Private Parties for every vendor that processes data of Mexican data subjects.
Get startedAutomated LFPDPPP compliance
Aranis controls cover the law's principles: lawfulness, consent, quality, information, proportionality, accountability.
Evidence for INAI
Structured reports documenting third-party data processing — ready for Instituto Nacional de Transparencia requirements.
Portal in Spanish
Your vendors respond in Spanish, no account required. Simple interface, tracked responses.
LFPDPPP principles covered
Each questionnaire control is aligned with a specific legal principle or right.
Privacy clauses for contracts
The report includes approved control language, ready to insert into vendor contracts.
Privacy maturity score
Specific data protection scoring, separate from the overall security score.
Vendor privacy notice check
The platform verifies whether the vendor has a published and accessible privacy notice.