External-processor and ESG evidence, organized for review
Send evidence requests, collect supplier and ESG-related disclosures, and keep them dated and linked to your vendor records — so external-processor evidence is reviewable instead of scattered across inboxes.
7-day trial · DPA available before purchase
- Subprocessor listcollected
- Environmental policycollected
- Supplier code of conductcollected
- Data-handling statementpending
Why supplier evidence gets scattered
When supplier and ESG evidence is gathered by hand, it ends up everywhere except where you can review it.
Requests live in email
Evidence requests go out over email and get buried in inboxes, so no one can say what was asked of which supplier, or when.
No central profile
Supplier facts are spread across threads and folders. There is no single external-processor profile that holds what you collected.
ESG files everywhere
ESG-related disclosures arrive as one-off PDFs named differently every time, with no consistent place they belong.
No dated review trail
When a disclosure was collected, who reviewed it, and what they decided is lost — there is no dated trail to point back to.
From a request to dated, reviewed evidence
Every request follows one repeatable path, so a supplier's evidence is captured, dated, and reviewed — not chased over email.
Request sent
You send an evidence request to a supplier — a subprocessor list, an ESG disclosure, or both — from one place.
Supplier responds
The supplier returns the requested documents, which land against the request instead of in a personal inbox.
Evidence captured & dated
Each item is captured into the supplier profile with a date and request reference, so it is organized from the start.
Reviewed
A reviewer checks the collected items and records a decision — accepted, or needs follow-up — on the record itself.
Follow-up or accepted
Outstanding items go to a follow-up queue; complete ones are marked accepted and ready to roll into a summary.
One external-processor profile, with the evidence attached
Each supplier gets a single profile that holds what you collected — category, region, the linked vendor record, and every dated document in one place.
- One external-processor profile per supplier, not scattered threads
- Category, region, and the linked vendor record on the same screen
- Every collected document attached to the profile, with its date
- Open evidence items surfaced so nothing sits forgotten
Northwind Logistics
Profile ID · SP-1144
ESG-related disclosures, collected and organized
Request ESG-related disclosures against a consistent checklist and keep them organized for review. These are documents you collect — DPAFlow does not score, rate, or verify ESG performance, and it issues no compliance verdict.
- Request and collect ESG-related disclosures from each supplier
- Organize them against a consistent, repeatable checklist
- See at a glance what is collected, pending, or not requested
- Keep each disclosure dated and tied to the supplier profile
- Environmental policyCollected
- Supplier code of conductCollected
- Data-handling statementPending
- Diversity disclosureNot requested
- Anti-bribery statementPending
Disclosures shown are collected and uploaded by you, then organized for review. DPAFlow does not score, rate, or verify ESG performance — it keeps the customer-collected documents dated and in one place.
A shared queue that keeps follow-ups from slipping
Outstanding requests stay in one place with an honest status, so the team always knows what is waiting and who decided what.
One shared queue
Every open evidence request in one queue, so the whole team sees what is outstanding rather than each person tracking their own.
Status at a glance
Each request carries an honest status — sent, responded, under review, or follow-up — with the date it last moved.
Reviewer decisions
A reviewer accepts the collected items or routes the request to follow-up, and the decision is recorded on the request.
Follow-up handling
Outstanding items stay visible until they are resolved, so a supplier with missing disclosures does not quietly fall off the list.
See every open request, route the follow-ups
The evidence request queue shows each supplier, its current status, and the date it last moved — so review and follow-up happen on purpose, not by accident.
- Requests grouped by status — sent, responded, under review, follow-up
- Each row dated so the queue reflects what is actually current
- Follow-ups stay visible until the missing items arrive
- Reviewer decisions recorded against the request
- Northwind LogisticsRequested · May 2Follow-up
- Harbor Cloud ServicesRequested · Apr 28Responded
- Meridian PaymentsRequested · Apr 24Under review
- Cedar AnalyticsRequested · Apr 22Sent
An organized summary you can actually share
When someone asks where supplier and ESG evidence stands, export an organized, review-ready summary — suppliers reviewed, evidence on file, open follow-ups, and when it was last updated. It reflects your records, not a certification.
- An organized snapshot of suppliers reviewed and evidence on file
- Open follow-ups surfaced so the picture is honest, not flattering
- A 'last updated' date so readers know how current it is
- Exportable to share internally or with stakeholders
An organized snapshot of the evidence you have collected and reviewed — for internal or stakeholder sharing. It reflects your records, not a certification or assurance opinion.
Generate summaryExternal-processor & ESG evidence FAQ
Common questions about collecting, reviewing, and organizing supplier and ESG-related evidence.
What kinds of evidence can I collect?
Typically external-processor and supplier documents such as subprocessor lists, supplier codes of conduct, data-handling statements, and ESG-related disclosures. You request the items, the supplier responds, and each one is captured into the supplier profile with a date.
Does DPAFlow verify or score ESG performance?
No. DPAFlow organizes ESG-related disclosures that you collect from suppliers. It does not verify, rate, or score ESG performance and it does not issue a compliance verdict — your team reviews the collected documents and decides what they mean.
How do evidence requests work?
You send a request to a supplier for specific items. Their responses land against that request, each item is dated and added to the supplier profile, and the request moves through statuses — sent, responded, under review, follow-up, or accepted — in a shared queue.
How does this link to our vendor records?
Each external-processor profile can be linked to the vendor record you already monitor, so collected supplier evidence and ongoing change monitoring point at the same supplier. See the product page for how monitoring and evidence fit together.
Who reviews the collected evidence?
Your team. Reviewers — for example privacy, legal, or vendor-risk and procurement owners — check the collected items and record an accept or follow-up decision. DPAFlow organizes and routes; the decision stays customer-controlled.
What are the export options?
Collected and reviewed evidence rolls up into an organized, review-ready summary you can export to share internally or with stakeholders. It reflects your own records — it is not a certification or an assurance opinion.
Bring external-processor and ESG evidence into one place
Request it, collect it, review it, and keep it dated and linked to your vendor records — instead of chasing PDFs across inboxes.
7-day trial · DPA available before purchase