R01 :: For any new supplier, the supplier is obliged to complete identity verification before the supplier's first purchase order.
R02 :: Identity verification is performed by the Compliance officer, and the buyer is not permitted to perform identity verification.
R03 :: If a supplier is classified as low risk, the Compliance officer is permitted but not obliged to request a site visit for that supplier.
R04 :: If a supplier is classified as high risk, the supplier is obliged to undergo an enhanced review.
R05 :: A renewal is exempt from repeating identity verification if the renewal is for an existing supplier and no identity data for that supplier has changed.
R06 :: The renewal exemption from repeating identity verification does not apply when the supplier changes its legal name.
R07 :: The buyer is forbidden from activating a supplier that is flagged as blocked.
R08 :: A supplier with a risk score of 70 or more is classified as high risk.
R09 :: A supplier with a risk score below 70 is classified as low risk.
R10 :: An approval expires 365 calendar days after its approval date.
R11 :: If a supplier's bank account is changed, a new independent bank-account check is required before the next payment to that supplier.
R12 :: A contact email address is not unique across supplier records, and two supplier records are permitted to share the same contact email address.