Collect the evidence, record the decision, and hand your client a clean record of why each vendor was approved.
| Vendor | Evidence | Status |
|---|---|---|
| Northwind Payroll | SOC 2 report | Approved |
| Blue Harbor CRM | Questionnaire | In review |
| Kestrel Backup | ISO 27001 certificate | Approved |
| Pinecrest Mail | Pen-test summary | Expired |
| Maple Analytics | Questionnaire | Not approved |
One link for the business owner to ask for a new vendor.
Evidence, findings and a written decision in one place.
A dated decision record you can print or export.