R01 :: A new supplier is obligated to complete identity verification before its first purchase order.
R02 :: Identity verification is performed by the Compliance officer, and the buyer does not perform identity verification.
R03 :: For a low-risk supplier, Compliance is permitted, but not obligated, to request a site visit.
R04 :: A high-risk supplier is obligated to undergo an enhanced review.
R05 :: A renewal for an existing supplier whose identity data has not changed is exempt from repeating identity verification.
R06 :: The renewal exemption from repeating identity verification does not apply when the supplier changes its legal name.
R07 :: A buyer is prohibited from activating a supplier that is flagged as blocked.
R08 :: A supplier with a risk score greater than or equal to 70 is classified as high risk.
R09 :: A supplier with a risk score less than 70 is classified as low risk.
R10 :: An approval expires 365 calendar days after its approval date.
R11 :: If a supplier's bank account is changed, a new independent bank-account check is required before the next payment.
R12 :: Two supplier records are permitted to share the same contact email address, and the contact email address is not required to be unique.