revolutioniseSPORT 3rd Party Integration Vetting - revolutioniseSPORT insights

revolutioniseSPORT believes in the power of integrations and has several APIs available for various purposes.

Our Cyber Insurance requires us to vet all 3rd Parties that utilise revSPORT APIs and to have a signed agreement between the client & 3^rd Party.

We understand that some questions pertain to sensitive information, particularly regarding annual turnover and previous cyber incidents.

The nature of these questions is to ensure our insurer understands the risk associated with prospective and current integrations.

The information collected in this survey will be treated as commercial-in-confidence.

What is the full legal name of your company?*

Where is your company headquartered?*

What is your company’s registration number (ABN, ACN, or equivalent)?*

Who are the primary owners/shareholders of your company?*

Are you a subsidiary of another company?*

Have you or any of your directors ever been subject to bankruptcy, liquidation, or legal action related to fraud or misconduct?*

What is the primary purpose of your application/service that will integrate with our API?*

What specific API functionalities do you intend to use?*

E.G. "Members" read-only, "Members" read-write, Games, etc.

Who are your primary customers (e.g., clubs, associations, athletes, administrators)?*

Do you currently use or plan to use APIs from other similar providers?*

I.E. Do you integrate with any platforms similar to revSPORT

What security measures do you have in place to protect API keys and authentication credentials?*

Do you comply with relevant data protection laws (e.g., Australian Privacy Act, GDPR, CCPA)?*

If so, please elaborate

Do you store or process personally identifiable information (PII) or payment information?*

If so, please elaborate

Where will data retrieved via the API be stored (e.g., country, cloud provider)?*

Have you ever experience a cyber incident/breach?*

How would/do you handle and respond to data breaches?*

What is your estimated API call volume (requests per hour/day)?*

Please explain your rate-limiting mechanisms to prevent excessive API calls?*

What is your expected uptime and availability for your application?*

Are you able to provide a static IP to be added to our whitelist?*

This is a requirement of all integrations.

Will you be charging end users for services that rely on our API?*

What is your annual turnover?*

in AUD

How do you handle customer support for issues related to your application?*

Do you have a documented process for reporting and resolving API-related bugs or incidents?*

Will your application include user support documentation for API-based features?*

How will you handle existing customer data if you discontinue integration with our API?*

Do you have a process for notifying your users about changes or disruptions to API-driven features?*

Do you have your own cybersecurity insurance?*

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.