Current self-assessment score
0/100
Early-stage controls
0 of 10 questions answered. This is a self-assessment, not certification or independent assurance.
Corporate Legal entity, ownership, contact and contracting details are documented and current.
Yes / evidenced No / unclear
Insurance Required insurance types/limits are known and evidence can be supplied where applicable.
Yes / evidenced No / unclear
Security Security controls are evidenced rather than answered from policy alone.
Yes / evidenced No / unclear
Privacy Controller/processor roles, DPA terms and subprocessors can be identified for the actual service.
Yes / evidenced No / unclear
Resilience Critical service dependencies and recovery arrangements are documented and tested proportionately.
Yes / evidenced No / unclear
AI Material AI use, human accountability and data boundaries can be explained to a buyer.
Yes / evidenced No / unclear
Subcontractors Third-party specialists and subprocessors are subject to proportionate diligence and contractual controls.
Yes / evidenced No / unclear
Commercial Scope, acceptance, change control, IP, data exit and termination arrangements are clear.
Yes / evidenced No / unclear
Conflicts Material vendor incentives, referral arrangements and conflicts can be disclosed.
Yes / evidenced No / unclear
Evidence Material claims, credentials and outcomes have current evidence and named owners.
Yes / evidenced No / unclear