Use the questions that fit your assessment
This is a starting structure for collecting supplier responses and supporting evidence. It is designed for teams that already know what they need to assess, not as a universal list of compliance requirements.
Copy the questionnaire, remove questions that do not affect your decision and add the criteria that apply to the supplier’s activity. Define which answers require documents and who will review them. The Markdown download includes blank response and review fields; you can edit it in a text or Markdown editor.
No answers or supplier documents are submitted through this page. Keep completed questionnaires in your organisation’s approved workspace.
Record the scope before sending it
- Assessment reference and purpose.
- Supplier legal name and the specific sites or activities covered.
- Assessment period and intended response date.
- Respondent name, role and contact route.
- Assessment owner and review owner.
Twelve questions to adapt
Which legal entity, sites and supplied activities does this response cover?
Evidence to request: Entity and site references that let the reviewer match later documents to this scope.
Who is responsible for this response, and who can answer follow-up questions?
Evidence to request: A named role and contact route. Request personal information only where needed for the assessment.
Which assessment period do the answers and supporting records cover?
Evidence to request: Start/end dates or another explicit period for each relevant record.
Which of the requested requirements do you consider not applicable, and why?
Evidence to request: A reason tied to the supplied activity or site, rather than an unexplained blank answer.
Which policies or procedures support the requirements we have identified?
Evidence to request: Relevant sections, document owner, version and scope; avoid requesting unrelated policy libraries.
Which certificates, consents or other documents are relevant to this assessment?
Evidence to request: Only the records your team has identified as applicable, with entity, scope, issuer and dates where available.
What operating records support the statements made in this response?
Evidence to request: Period-specific records or excerpts linked to the relevant answer, with the source identified.
Have the assessed sites, processes or responsible owners changed during the stated period?
Evidence to request: What changed, when it changed and which answers or records are affected.
Are any requested documents missing, out of date or still being prepared?
Evidence to request: The gap, its owner and the expected next update. Do not substitute an unrelated document.
Are there open findings or corrective actions relevant to these requirements?
Evidence to request: The finding, responsible owner, next action and the evidence expected for closure.
What limits or qualifications should the reviewer understand before using these answers?
Evidence to request: Uncertainty, exclusions, unconfirmed information or boundaries on the supporting records.
Has an authorised respondent reviewed the submission and identified any remaining uncertainty?
Evidence to request: Respondent identity, review date and confirmation of the stated scope. This is an attestation, not independent verification.
Add a review record for each answer
The supplier’s answer and your team’s conclusion are separate records. Add an evidence reference, the reviewer, the review date, a decision and its reason. Keep missing information visible rather than converting it to a positive result.
- Answer or not-applicable explanation.
- Supporting evidence reference and version.
- Reviewer and review date.
- Decision and reason.
- Follow-up owner, requested action and date, where needed.
Make follow-up specific
Ask for the missing fact, scope or record. “Please resubmit” often produces the same uncertainty. A precise request tells the supplier what needs to change and which assessment question it relates to.