# Vendor Certification Acceptance — Evaluation Report

## Vendor Information

| Field | Value |
|-------|-------|
| **Vendor Name** | [Vendor Legal Name] |
| **Vendor ID** | [Internal ID] |
| **Evaluation Date** | [YYYY-MM-DD] |
| **Evaluator** | [Name, Title] |

## Certifications Presented

| # | Certification | Body | Certificate # | Scope | Valid From | Valid Until | Tier |
|---|--------------|------|---------------|-------|-----------|------------|------|
| 1 | [Name] | [Body] | [Number] | [Scope] | [Date] | [Date] | [A/B/C/D] |
| 2 | [Name] | [Body] | [Number] | [Scope] | [Date] | [Date] | [A/B/C/D] |

## Verification Results

| # | Certification | Accreditation Verified | Certificate Valid | Scope Covers Services | Status |
|---|--------------|:---------------------:|:-----------------:|:--------------------:|--------|
| 1 | [Name] | [Yes/No] | [Yes/No] | [Yes/No] | [Verified/Expired/Mismatch/Invalid] |

## GDPR Gap Analysis

| GDPR Requirement | Article | Combined Coverage | Gap? |
|------------------|---------|:-----------------:|:----:|
| Documented instructions | 28(3)(a) | [Full/Partial/None] | [Yes/No] |
| Confidentiality | 28(3)(b) | [Full/Partial/None] | [Yes/No] |
| Security measures | 28(3)(c) | [Full/Partial/None] | [Yes/No] |
| Sub-processor management | 28(3)(d) | [Full/Partial/None] | [Yes/No] |
| DSR assistance | 28(3)(e) | [Full/Partial/None] | [Yes/No] |
| Compliance assistance | 28(3)(f) | [Full/Partial/None] | [Yes/No] |
| Deletion/return | 28(3)(g) | [Full/Partial/None] | [Yes/No] |
| Audit rights | 28(3)(h) | [Full/Partial/None] | [Yes/No] |
| Breach notification | 33(2) | [Full/Partial/None] | [Yes/No] |
| International transfers | Ch. V | [Full/Partial/None] | [Yes/No] |

**Coverage Score:** [X]%

## Supplementation Requirements

| # | Gap | Article | Supplementary Evidence Required | Received? |
|---|-----|---------|-------------------------------|:---------:|
| 1 | [Requirement] | [Article] | [Evidence needed] | [Yes/No] |

## Acceptance Decision

| Field | Value |
|-------|-------|
| **Decision** | [Full Coverage / With Supplementation / Insufficient] |
| **Rationale** | [Explanation] |

## Certification Monitoring Schedule

| Certification | Expiry Date | Renewal Alert Date | Surveillance Due |
|--------------|-------------|-------------------|-----------------|
| [Name] | [Date] | [Date — 90 days before] | [Date] |

## Approvals

| Role | Name | Date |
|------|------|------|
| Evaluator | [Name] | [Date] |
| Privacy Team Lead | [Name] | [Date] |

---

*Per GDPR Articles 28(5) and 42, and Summit Cloud Partners Vendor Certification Acceptance Policy.*