Vendor Assessment

You've been asked to complete a Dentsply Sirona vendor security assessment.

Someone at Dentsply Sirona has proposed working with your company. Before we can proceed, our security and compliance teams review every new vendor solution. This page explains how to confirm the request is genuine and what we need from you.

What the assessment involves

Two things: a short questionnaire about how your solution handles data, access and security, and copies of any independent evidence you already hold. Most vendors complete both in under an hour. The questionnaire does not accept file uploads, so evidence is sent separately by email (step 3). The two can be done in either order; the review starts once both are in.

  1. Confirm the request

    Use the checklist above. If anything doesn't match, stop and contact us before continuing.

  2. Complete the questionnaire

    Use the link in the email you received: it opens the questionnaire with your reference code already filled in, so please leave that field as it is. Answer for the specific product or service being proposed, not your company in general. If you arrived here without an email, reply to the Dentsply Sirona contact who approached you and ask for your reference code before starting.

    Open the vendor questionnaire (opens Microsoft Forms)

  3. Send your evidence by email

    Email the documents below to the vendor assessment mailbox. Send what you have; missing items don't stop the review, they just prompt follow-up questions.

    To
    VendorAssessment@dentsplysirona.com
    Subject line
    [ARBA-123] Vendor assessment evidence: [your company]
    Use the reference code from the email you received (format ARBA-123). The simplest way is to reply to that email with the files attached; the reference is already in its subject line.
    Attach, if you hold them
    • SOC 2 Type II report (most recent period) or ISO/IEC 27001 certificate with Statement of Applicability
    • Most recent penetration test summary or attestation letter
    • Data processing agreement or privacy documentation, if personal data is involved
    • Business continuity and incident response summaries
    • Any completed standard questionnaire you already maintain (SIG, CAIQ or similar)
    Large or restricted files
    If a file exceeds 25 MB, or your policy requires an NDA before releasing a report, email us first and we will arrange a secure transfer or the paperwork.
    File types
    Attach files directly to the email as PDF, Office, image or plain-text documents. Compressed archives, macro-enabled documents, executables, HTML files and images pasted into the message body are not accepted and will be returned.

  4. What happens next

    On receipt
    We acknowledge your submission from the same mailbox.
    Review
    Security and compliance review your answers and evidence alongside the internal request. We may come back with specific follow-up questions.
    Outcome
    Findings go to the Dentsply Sirona employee sponsoring the request, who will continue the conversation with you. We don't share the full assessment externally.

Questions

For anything about the questionnaire, the evidence we're asking for, or the process: VendorAssessment@dentsplysirona.com.

For questions about the commercial engagement itself, please go to the Dentsply Sirona employee named in the email you received.