Risma data export

Snapshot of the Risma GRC database, exported for migration into Vanta. Vendors live in dataprocessor_processor (the companies / contracts tables are unused in this dataset).

Where to start

• Vendors — every data processor with contacts, linked systems, questionnaire answers and risks. Primary Vanta import target.
• Systems — all dataprocessor_system records (services/products consumed).
• Risks — full risk register with assessments, threats, and any link to a vendor or system.
• Questionnaires — the question templates (GDPR DPA, DORA, ROPA, etc.).
• DPM requests — external assessments sent out (very few in this dataset, mostly test).