A Vendor (or Processor) is defined as a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller. The type of Vendors you would enter into Vendor Management would be any Vendor you share personal information with on customers, employees, or any other individual. The companies described as Vendors can include marketing firms, outsourced IT companies, law firms, financial advisers, etc. Ultimately, the goal of Vendor Management is to verify and validate your contracted agreement with these Vendors on how they store and manage personal information.