R01 :: Every new supplier must have identity verification completed before its first purchase order.
R02 :: Identity verification is performed by the Compliance officer and is not performed by the buyer.
R03 :: For a low-risk supplier, Compliance is permitted to request a site visit and is not obliged to request one.
R04 :: Every high-risk supplier must undergo an enhanced review.
R05 :: A renewal for an existing supplier with no changed identity data is exempt from repeating identity verification.
R06 :: The renewal exemption from repeating identity verification does not apply when the supplier changes its legal name.
R07 :: A buyer must not activate a supplier flagged as blocked.
R08 :: A supplier with a risk score of 70 or more is classified as high risk.
R09 :: A supplier with a risk score below 70 is classified as low risk.
R10 :: An approval expires 365 calendar days after its approval date.
R11 :: Changing a supplier bank account requires a new independent bank-account check to be completed before the next payment.
R12 :: Two supplier records may share the same contact email address; the contact email address is not unique.