Skip to content
DPAFlow
In design — exploratory module

Not yet available. We’re building this with design partners — talk to us about the partner program.

01 /External-processor & ESG — Exploratory

External-processor and ESG evidence, organized for review

An exploratory module we're designing with partners: send evidence requests, collect supplier and ESG-related disclosures, and keep them dated and linked to your vendor records. It is not yet available — this page describes what we're designing.

evidence-requestsupplier-profileesg-disclosurereview-queue

In design — exploratory module · Not yet available

Evidence packageAwaiting review
Supplier
Northwind Logistics
Request type
Subprocessor list + ESG disclosure
Requested
Apr 9, 2025 · 09:14 UTC
Package ID
PKG-7C1A-44E2
Items collected3 / 4
  • Subprocessor listcollected
  • Environmental policycollected
  • Supplier code of conductcollected
  • Data-handling statementpending
Linked vendor VR-3081Open package
02 /The problem

Why supplier evidence gets scattered

When supplier and ESG evidence is gathered by hand, it ends up everywhere except where you can review it.

Requests live in email

Evidence requests go out over email and get buried in inboxes, so no one can say what was asked of which supplier, or when.

No central profile

Supplier facts are spread across threads and folders. There is no single external-processor profile that holds what you collected.

ESG files everywhere

ESG-related disclosures arrive as one-off PDFs named differently every time, with no consistent place they belong.

No dated review trail

When a disclosure was collected, who reviewed it, and what they decided is lost — there is no dated trail to point back to.

03 /Planned workflow

From a request to dated, reviewed evidence

The workflow we're designing: every request follows one repeatable path, so a supplier's evidence is captured, dated, and reviewed — not chased over email.

Step 1

Request sent

You send an evidence request to a supplier — a subprocessor list, an ESG disclosure, or both — from one place.

Step 2

Supplier responds

The supplier returns the requested documents, which land against the request instead of in a personal inbox.

Step 3

Evidence captured & dated

Each item is captured into the supplier profile with a date and request reference, so it is organized from the start.

Step 4

Reviewed

A reviewer checks the collected items and records a decision — accepted, or needs follow-up — on the record itself.

Step 5

Follow-up or accepted

Outstanding items go to a follow-up queue; complete ones are marked accepted and ready to roll into a summary.

04 /Supplier profile — planned

One external-processor profile, with the evidence attached

In the design, each supplier gets a single profile that holds what you collect — category, region, the linked vendor record, and every dated document in one place.

  • One external-processor profile per supplier, not scattered threads
  • Category, region, and the linked vendor record on the same screen
  • Every collected document attached to the profile, with its date
  • Open evidence items surfaced so nothing sits forgotten
See how it fits the product
External-processor profileIn review

Northwind Logistics

Profile ID · SP-1144

Category
Logistics & fulfilment
Region
EU (DE) · sub-processing US
Linked vendor record
VR-3081 · Northwind
Open evidence items
2 awaiting review
Subprocessor list on fileESG disclosure pending
Last evidence May 2, 2025View linked evidence
05 /ESG disclosures — planned

ESG-related disclosures, collected and organized

The plan: request ESG-related disclosures against a consistent checklist and keep them organized for review. These would be documents you collect — DPAFlow will not score, rate, or verify ESG performance, and it will issue no compliance verdict.

  • Request and collect ESG-related disclosures from each supplier
  • Organize them against a consistent, repeatable checklist
  • See at a glance what is collected, pending, or not requested
  • Keep each disclosure dated and tied to the supplier profile
Built for vendor risk & procurement
ESG disclosure checklist2 / 5 collected
  • Environmental policyCollected
  • Supplier code of conductCollected
  • Data-handling statementPending
  • Diversity disclosureNot requested
  • Anti-bribery statementPending

Disclosures shown are collected and uploaded by you, then organized for review. DPAFlow does not score, rate, or verify ESG performance — it keeps the customer-collected documents dated and in one place.

06 /Review & follow-up — planned

A shared queue that keeps follow-ups from slipping

In the design, outstanding requests stay in one place with an honest status, so the team always knows what is waiting and who decided what.

One shared queue

Every open evidence request in one queue, so the whole team sees what is outstanding rather than each person tracking their own.

Status at a glance

Each request carries an honest status — sent, responded, under review, or follow-up — with the date it last moved.

Reviewer decisions

A reviewer accepts the collected items or routes the request to follow-up, and the decision is recorded on the request.

Follow-up handling

Outstanding items stay visible until they are resolved, so a supplier with missing disclosures does not quietly fall off the list.

07 /The queue — planned

See every open request, route the follow-ups

The planned evidence request queue shows each supplier, its current status, and the date it last moved — so review and follow-up happen on purpose, not by accident.

  • Requests grouped by status — sent, responded, under review, follow-up
  • Each row dated so the queue reflects what is actually current
  • Follow-ups stay visible until the missing items arrive
  • Reviewer decisions recorded against the request
For compliance operators
Evidence request queue1 follow-up
  • Northwind LogisticsRequested · May 2Follow-up
  • Harbor Cloud ServicesRequested · Apr 28Responded
  • Meridian PaymentsRequested · Apr 24Under review
  • Cedar AnalyticsRequested · Apr 22Sent
Queue 4 activeOpen queue
08 /Export-ready summary — planned

An organized summary you can actually share

The goal: when someone asks where supplier and ESG evidence stands, export an organized, review-ready summary — suppliers reviewed, evidence on file, open follow-ups, and when it was last updated. It would reflect your records, not a certification.

  • An organized snapshot of suppliers reviewed and evidence on file
  • Open follow-ups surfaced so the picture is honest, not flattering
  • A 'last updated' date so readers know how current it is
  • Exportable to share internally or with stakeholders
Compare plans & limits
Review-ready summaryPDF · JSON
Suppliers reviewed
18
Evidence on file
54 items
Open follow-ups
3
Last updated
May 12, 2025

An organized snapshot of the evidence you have collected and reviewed — for internal or stakeholder sharing. It reflects your records, not a certification or assurance opinion.

Generate summary
09 /FAQ

External-processor & ESG evidence FAQ

Common questions about this exploratory module and the design-partner program.

Is this module available today?

No. External-processor & ESG evidence is an exploratory module in design — it is not yet available in the product, and it cannot be purchased or trialed. We're building it with a small group of design partners; contact us if you'd like to help shape it.

What kinds of evidence would it cover?

Typically external-processor and supplier documents such as subprocessor lists, supplier codes of conduct, data-handling statements, and ESG-related disclosures. In the design, you request the items, the supplier responds, and each one is captured into the supplier profile with a date.

Will DPAFlow verify or score ESG performance?

No. The module is designed to organize ESG-related disclosures that you collect from suppliers. It will not verify, rate, or score ESG performance and it will not issue a compliance verdict — your team reviews the collected documents and decides what they mean.

How would evidence requests work?

In the design, you send a request to a supplier for specific items. Their responses land against that request, each item is dated and added to the supplier profile, and the request moves through statuses — sent, responded, under review, follow-up, or accepted — in a shared queue.

How would this link to our vendor records?

The plan is for each external-processor profile to link to the vendor record you already monitor, so collected supplier evidence and ongoing change monitoring point at the same supplier. See the product page for what monitoring and evidence do today.

Who would review the collected evidence?

Your team. Reviewers — for example privacy, legal, or vendor-risk and procurement owners — would check the collected items and record an accept or follow-up decision. DPAFlow organizes and routes; the decision stays customer-controlled.

How do I join the partner program?

Contact us. If collecting and reviewing supplier and ESG-related evidence is a real problem for your team, we'd like to design the module with you before it ships. There is no charge and no commitment — partner feedback shapes what gets built.

Help shape external-processor and ESG evidence

This module is in design, not on sale. If collecting and reviewing supplier and ESG-related evidence is a real problem for your team, we'd like to build it with you.

Exploratory module · In design with partners · Not yet available