How do I review a vendor’s due diligence information?

You can review a vendor’s due diligence details directly from their product profile.

To access due diligence information:

1. Go to the Marketplace and find the supplier you want to review.

2. Click View on the product profile.

3. Open the ERQ (Enterprise Ready Questions) tab.

This section contains the vendor’s responses to a short enterprise assessment, covering key due diligence areas such as:

• Certification

• Breach notification

• Secure Software Development Lifecycle (SSDLC)

• Application security

• Data deletion and retention

• Data privacy

• Data storage and separation

• Disaster recovery

• Encryption

At the bottom of the profile, you can see when the ERQ section was last updated.

If the information is incomplete or hasn’t been updated recently, you can request an update by clicking the three-line menu at the top of the profile (next to the X used to close the page) and submitting an update request to the vendor.