The default assignment
| Document / event | Primary owner | Secondary |
|---|---|---|
| Public / employers' liability | Operations | Compliance |
| Professional indemnity | Legal / Ops | Finance |
| ISO 27001 / SOC 2 | Security / IT | Compliance |
| Filed accounts / credit | Finance | Procurement |
| DPA / sub-processor list | Legal | Security |
| Bank details change | Finance | Procurement |
| Tier reassessment | Procurement | Compliance |
Adapt to your team
In small teams, one person often wears three of these hats, that's fine. What matters is that every document has a name attached, not a team.
Frequently asked questions
Your next step
Two ways to act on this guide right now - one hands-on, one to read next.
Do it now · free tool
Supplier document checklist
A tidy starter list of the documents most teams should hold for a new supplier. Tick them off, copy or download.
Open the toolRead next · Checklist
Annual vendor review checklist
A tidy annual vendor review checklist, evidence refresh, tier reassessment, performance notes and contingency review, in under an hour per vendor.
Read the guidePut this into practice today.
Start a free Credbase workspace, add your first supplier and share a live document pack in ten minutes.