R01 :: A new supplier is obligated to complete identity verification before its first purchase order.
R02 :: The Compliance officer performs identity verification, and the buyer does not perform it.
R03 :: For a low-risk supplier, Compliance is permitted but not obligated to request a site visit.
R04 :: A high-risk supplier is obligated to undergo an enhanced review.
R05 :: A renewal for an existing supplier with no changed identity data is exempt from repeating identity verification.
R06 :: The renewal exemption does not apply when the supplier changes its legal name.
R07 :: A buyer is prohibited from activating a supplier flagged as blocked.
R08 :: A risk score of 70 or more is classified as high risk.
R09 :: A risk score below 70 is classified as low risk.
R10 :: An approval expires 365 calendar days after its approval date.
R11 :: Changing a supplier bank account requires a new independent bank-account check before the next payment.
R12 :: Two supplier records may share a contact email address, so the email address is not unique.