Examine the evidence
Assess supplier responses and documents using your own procedures.
Supplier review · For quality, environment, procurement and security
Review the evidence.
Record your decision.
Keep questionnaire responses, documents and checklists together when reviewing a supplier. Record the assessment and follow up gaps, retaining the history for the next review.
Review where needed
Use supplier classification and your own procedures to determine the review scope.
Keep your way of working
Your procedures belong in your management system. ChainSec keeps evidence, supplier status and review history together.
Build on the checklist
A template helps you start. The review log makes earlier work available when the same supplier needs reassessment.
01 · Define the scope
A clear scope for each review.
Decide which evidence you need and what to check. Use checklists to keep the supplier review organised.
- Start with classification
- Use supplier classification and your own assessment criteria as a starting point.
- Reusable checklists
- Use checklists for each supplier and reuse templates in the next review.
- Security assessment depth
- Supplier assessments for NIS2 and ISO 27001 are available at three depths for security work.
02 · Collect evidence
Evidence stays with the supplier.
Collect supplier statements and the documents supporting them. Keep earlier reviews close by when assessing new responses.
Responses and evidence
Use supplier questionnaires and file uploads to collect assessment evidence.
Certificates with validity dates
Check certificate validity as part of the evidence. Certificate types are available for ISO 9001, 14001, 45001, 27001 and SOC 2.
Earlier review history
Read earlier reviews and track how the supplier's evidence has changed.
03 · Assess and decide
From evidence to a traceable decision.
Examine responses, documents and checklists. Record the review and keep approval status with the supplier's history.
Record the review
Keep the review log and history with the supplier.
Keep status current
Show which suppliers are approved. Export the approved supplier list with the latest review and certificate validity.
04 · Follow up the review
The next review starts with the history.
Follow up the gaps you find and set each supplier's reassessment interval. Earlier evidence is retained for the next assessment.
Gaps as nonconformities
Keep the owner, root cause, supplier response and corrective action together in a case.
Reassessment per supplier
Set the interval manually according to your own procedures and needs.
Verified closure
Record who verified the resolution and when, retaining the history.
Questions about supplier review.
What does due diligence mean in ChainSec?
You collect and review supplier evidence: questionnaire responses, documents, certificates and checklists. ChainSec keeps the review log, approval status and follow-up together. You make the assessment using your own criteria.
Can we review both new and existing suppliers?
Yes. Evidence and reviews stay with each supplier, so you can record the first assessment and use the history during a later reassessment.
Are reusable checklists available?
Yes. ChainSec has supplier checklists with reusable templates. Use them to keep track of what needs review.
How is the result recorded?
Supplier reviews have a log and history. Approval status is kept in the register, and the approved supplier list can be exported with status, classification, latest review and certificate validity.
How do we follow up gaps after a review?
Record a supplier nonconformity with its source, severity and owner. Keep the root cause, supplier response and action together, and record verification before closing the case.
What should a supplier review tool keep together?
The evidence, the assessment and the decision for each supplier: questionnaire responses, documents, certificates, checklists, the review log and approval status. In ChainSec everything stays with the supplier, so the next review can start from the previous one. The assessment criteria are your own.
See how to keep supplier reviews together.
We walk through collecting evidence, recording assessments and following up suppliers over time.