Trellix expects all of its suppliers to comply with Trellix’s Supplier Code of Conduct.
All Trellix suppliers are expected to meet Trellix’s Security Requirements and Expectations. Additionally, all Trellix suppliers who provide or develop software for Trellix are expected to use industry recognized software security best practices that exceed or are substantially similar to Trellix’s Product Security Practices, including running software security testing prior to delivering any software release to Trellix.
Software piracy is a significant problem costing the software industry billions of dollars annually. Trellix is committed to educating our authorized users and, when necessary, bringing those violating our licenses into compliance. Please review our Anti-Piracy Policy.
In the absence of any separately executed agreement between Trellix and a supplier, Trellix’s Purchase Order Terms and Conditions shall govern Trellix’s purchase of goods and services.
For purchase orders placed by Trellix with Supplier in support of a U.S. Government contract or subcontract, the terms and conditions in the Trellix “Product & Services in Support of a U.S. Government Contract” shall also apply.
Trellix’s Supplier Diversity Program encourages the use of minority, women, and disabled veteran-owned businesses (MWDVBEs) while maintaining best-in-class supply chain practices for obtaining goods and services.
Suppliers that process personal data must comply with the terms and conditions of Trellix Supplier Data Processing and Security Agreement.
Suppliers must comply with the Supplier Security Addendum, which describes minimum technical, organizational and other measures required to protect personal data and other Trellix information and materials, and is attached to the Supplier Data Processing and Security Agreement.
Suppliers that transfer personal data must comply with the relevant Transfer Mechanisms, which authorize the lawful international transfer of data, and are attached to the Supplier Data Processing and Security Agreement.