Evidence refresh
- Insurance certificates current for the next 12 months.
- Accreditations still valid.
- DPA / sub-processor list unchanged (or diff reviewed).
- Financials filed within the last 18 months.
Relationship
- Named contacts confirmed.
- Spend and scope reviewed for tier changes.
- Any incidents in the last 12 months documented.
Forward-looking
- Contingency: what would we do if this vendor disappeared next week?
- Renewal terms considered ahead of contract auto-renewal.
- Notes for next year's review.
Frequently asked questions
Your next step
Two ways to act on this guide right now - one hands-on, one to read next.
Do it now · free tool
Supplier document checklist
A tidy starter list of the documents most teams should hold for a new supplier. Tick them off, copy or download.
Open the toolRead next · Featured guide
Third-party risk management for growing teams: the complete guide
A pragmatic, right-sized guide to third-party risk management (TPRM) for teams that don't have a full risk function, with tiering, evidence packs and continuous monitoring.
Read the guidePut this into practice today.
Start a free Credbase workspace, add your first supplier and share a live document pack in ten minutes.