R01 :: Any new supplier must complete identity verification before its first purchase order.
R02 :: The Compliance officer performs identity verification, and the buyer does not perform identity verification.
R03 :: For any low-risk supplier, Compliance may request a site visit but is not obliged to request a site visit.
R04 :: Any high-risk supplier must undergo an enhanced review.
R05 :: Any renewal for an existing supplier with no changed identity data is exempt from repeating identity verification.
R06 :: The renewal exemption does not apply when the supplier changes its legal name.
R07 :: Any buyer must not activate any supplier flagged as blocked.
R08 :: Any risk score of 70 or more is classified as high risk.
R09 :: All risk scores below 70 are classified as low risk.
R10 :: Any approval expires 365 calendar days after its approval date.
R11 :: Changing a supplier bank account requires a new independent bank-account check before the next payment.
R12 :: Two supplier records may share a contact email address, and the email address is not unique among supplier records.