Practitioner template
Supplier Assessment Template
Evaluate whether the supplier, service controls, lifecycle practices, and available evidence are suitable for the intended use.
Download TemplateBlank template
- Supplier and service
- Intended use supported
- Service and release model
- Lifecycle and quality evidence
- Security and availability evidence
- Test and defect evidence
- Change notification
- Data and record responsibilities
- Evidence limitations
- Assessment conclusion and actions
Completed fictional example
Fictional teaching example: This is not an executed or approved validation record.
- Supplier and service
- Fictional multi-tenant eQMS provider
- Intended use supported
- CAPA creation, approval, signature, retention, and export
- Service and release model
- Weekly supplier-managed releases
- Lifecycle and quality evidence
- SDLC summary and controlled release process reviewed
- Security and availability evidence
- SOC 2 report reviewed for control context only
- Test and defect evidence
- Version-specific standard-workflow regression summary
- Change notification
- Release notes five days before production
- Data and record responsibilities
- Supplier hosts records; customer controls configuration, roles, procedures, and export use
- Evidence limitations
- No coverage of local CAPA routing or identity mapping
- Assessment conclusion and actions
- Conditionally suitable; perform configuration testing and strengthen change-notification terms