Procurement Due Diligence Checklist
Assemble legal, security, and operations materials required for enterprise procurement review.
Overview
Assemble legal, security, and operations materials required for enterprise procurement review.
Audience
- Admin
- Compliance
Product Area
Trust
Prerequisites
- Security review package prepared
Steps
- Assemble legal artifacts
Prepare DPA, subprocessor list, retention policy, and incident process summary.
- Assemble operational evidence
Include uptime reports, incident history, and support SLA references.
Expected Result
The Trust workflow completes without unresolved validation errors, and the result is visible to the intended roles.
Security and Audit Notes
- Use the least-privileged role that can complete the task.
- Confirm the resulting change or decision appears in the workspace audit trail when the workflow changes customer data or access.
Limits and Preconditions
- Available controls depend on the tenant plan, enabled modules, jurisdiction, and administrator policy.
- If a named control is not visible, confirm entitlement and role access before treating the behavior as a product failure.
Troubleshooting
- Missing subprocessor disclosures: Pull latest subprocessor table from Trust Report source.
Related Articles
Escalation
If the documented result cannot be reached after the checks above, capture the workspace identifier, affected product area, timestamp, and a redacted error message, then use Support. Never include secrets, privileged legal content, or customer documents in the initial report.