Why Meridian Payroll chose TrustVendor
Meridian Payroll processes payroll data for 80,000 employees across its customers. Their CISO had been arguing for years that annual questionnaires were security theatre — a vendor could be compromised in January and pass the December review. The board agreed but the team lacked the tooling to make continuous monitoring practical.
How it deployed
TrustVendor replaced the annual questionnaire cycle for all 60 critical vendors. The existing Bitsight subscription was retained for external hygiene scoring; TrustVendor was positioned as the document and disclosure layer that Bitsight does not cover. Slack alerting was configured for the security channel.
Results
Three significant findings in the first 90 days of deployment: one vendor added a data center in a jurisdiction not covered by their DPA; one vendor’s penetration test had expired six months earlier than their trust centre indicated; one vendor’s SOC 2 had a recurring exception that the manual questionnaire process had not identified.