Evidence in one decision pack
Certifications, privacy and data-location information, security findings, research and prior reviews are presented together.
Nexus Business Register · Supplier reviews and due diligence
Supplier due diligence and vendor risk reviews
Structured supplier reviews that gather the evidence, highlight blockers and record a clear decision, so you can show customers, auditors and insurers how suppliers were checked.
The problem it solves
Customers, insurers and standards such as ISO 27001 increasingly ask how you vet suppliers. Most small businesses have no record beyond an email saying a supplier seemed fine.
What is included
Blockers and warnings
Missing or expired evidence is highlighted before a decision is made.
Clear decisions
Approve, request changes with an owner and due date, or reject, with structured reasons and a written rationale.
Segregation of duties
The person who requested a supplier cannot approve their own review where separation is required.
Who it is for
- Businesses answering customer security questionnaires
- Organisations working toward ISO 27001 or similar standards
- Anyone sharing personal data with suppliers under GDPR
Questions about supplier reviews and due diligence
What is supplier due diligence?
Supplier due diligence is checking that a supplier is suitable before and while you rely on them, covering areas such as certifications, data protection, security, financial and operational risk.
Does this help with GDPR?
It helps you record which suppliers process personal data, where data is located and what assessment was made, which supports your accountability obligations. It does not replace legal advice.
Can a reviewer approve their own supplier request?
No, where segregation of duties applies. Nexus prevents the requester from deciding their own review and explains why the decision is unavailable.
Works with
Audit trail and compliance evidence
Build audit readiness as a side effect of normal work. Every request, decision, invoice and review is recorded, and audits, findings and corrective actions have their own register.
Learn more →Supplier register
One accurate list of who the business buys from: suppliers, categories, owners, status, evidence and spend in one place, instead of scattered across inboxes and spreadsheets.
Learn more →Purchase requests and approvals
A simple request, review and decide flow for purchases, sized to the business: owner confirmation when one person decides, role-based approval when a team needs it.
Learn more →Try Nexus Business Register free for 30 days
Supplier register, invoice upload, approvals and spend reporting for Irish SMEs.