Skip to content

Get missing supplier evidence to the review owner

Duvo checks each third-party review against its evidence checklist, catches reports that are missing, expired or about the wrong service, and drafts requests to the people who hold them.

Third-party review coordination

Needs review

Review TP-801

Evidence
Assurance report absent
Service
Document hosting
Owner
Third-party oversight

The inventory lists an assurance report for the hosting service, but the repository holds only the checklist from the previous review.

Next action

Request report: the supplier relationship owner is asked for the report, tracked against the review due date.

Hand over with gap: reviewers receive the pack with the missing report listed at the top.

Oversight owner approval

The third-party oversight owner approves each evidence request and each pack handoff before it is routed.

View the wider product queue

Third-party review coordination

Supplier review with the assurance report missing.

Adds cases
Third-party register
Processes cases
Third-party review coordination
Total

24

Pending

5

Postponed

2

In progress

4

Needs input

3

Failed

0

Completed

10

Add filter
Case
Case Status
Review gap
Scope
Decision
Exceptions
Next action
Review TP-801
Needs Input
Assurance report absent
Document hosting
Request report
1
Review TP-802
In Progress
Report names another service
Contact centre
Confirm document scope
0
Review TP-803
Completed
Pack handed over
Print and mail supplier
Handoff recorded
0
Review TP-804
Pending
Continuity test out of date
Archive service
Request current version
1
Review TP-805
Postponed
Subcontractor list pending
Payment support vendor
Await evidence owner
0

Showing 5 of 24 cases

  1. 1

    Approval

    Exceptions pause for the named owner

    Each exception carries the source records, applied rule, recommended action, and the person authorised to decide.

  2. 2

    Review gap

    Review gap is visible before the action

    The inventory lists an assurance report for the hosting service that the repository does not hold, so the gap and its owner show before a request is drafted.

From supplier document gaps to the oversight review

The annual review of a document-hosting supplier is due at month end. The questionnaire has come back, but the assurance report on file covers the previous period, the continuity test results relate to a different service and nobody is sure whether the relationship owner or the supplier should send the subcontractor list.

  1. 0101

    Build the evidence inventory

    Duvo links the third-party register entry, the services under review, the checklist and every submitted document to the review reference and due date.

  2. 0202

    Check scope and dates

    Duvo flags missing items, documents that name a different service and reports whose covered period falls outside the checklist’s validity rule, then drafts a request to each evidence owner.

  3. 0303

    Your team decides

    Approve requests and handoff

    The third-party oversight owner approves the requests, or passes the pack to reviewers with the gaps listed.

  4. 0404

    Track what comes back

    Approved requests go to the supplier contacts. Each returned document is recorded against the review checklist by version, and overdue items stay in front of the review owner.

Tie supplier documents to the service under review

Systems and control details

Each review is checked against its evidence list and your validity rule for each document type, such as the period an assurance report must cover. Supplier contact and access to the document repository are agreed before Duvo sends any request.

Third-party register, Service inventory, Review checklist, Supplier document repository

  • Oversight owner approval

    The third-party oversight owner approves each evidence request and each pack handoff before it is routed.

  • No risk conclusions

    Duvo does not rate supplier risk, classify how critical a service is, accept findings, approve outsourcing or change contracts.

  • Keep version and scope

    Each document keeps its source, version, covered period and the service it applies to.

What teams ask about Third-party review coordination

  • How does Duvo know whether an assurance report is still valid?

    It applies the validity rules in your checklist, such as the period a report must cover and the service it must name. Where no rule is written down, the item goes to the review owner instead of being guessed.

  • Can Duvo contact our suppliers directly?

    Only if you agree it in scope. Many teams start by routing requests through the internal relationship owner, and the oversight owner approves every request first.

  • Does Duvo assess the supplier’s risk or the findings in their reports?

    No. It checks that the right documents are present, current and about the right service. Risk assessment and acceptance stay with your oversight team.