Legal Identity
Registered business name, DBA, formation state, entity type, and federal EIN plus upload of formation or registration documents to confirm legal standing and signatory authority.
A consistent assessment reduces onboarding delays, standardizes risk decisions, and creates an auditable record for legal and compliance teams. It clarifies required evidence, supports cross-functional reviews, and helps identify high-risk vendors early in procurement.
Multiple teams participate in completion and review to ensure legal, operational, and data protections are validated before contracting.
Use a defined routing order so the vendor completes required fields first, procurement validates commercial terms, then legal and security clear the record before signature.
| Field | Configuration |
|---|---|
| Required Fields | Mark legal name, EIN, and insurance as mandatory. |
| Routing Order | Vendor -> Procurement -> Legal -> Security -> Signatory |
| Authentication | Use email link plus SMS code for higher risk vendors. |
| Attachments | Allow PDFs, DOCX; require certificate upload for insurance. |
Choose a platform that supports secure uploads, conditional fields, and a tamper-evident audit trail.
Ensure the vendor platform stores an immutable audit trail, supports conditional fields for optional clauses, and can export signed records in common formats for legal retention and audits.
Registered business name, DBA, formation state, entity type, and federal EIN plus upload of formation or registration documents to confirm legal standing and signatory authority.
List beneficial owners, executive contacts, and individuals with signing authority to support conflict checks and sanctions screening before contract execution.
Detailed insurance coverage including carriers, policy numbers, limits, and expiry dates; require certificate upload and additional insured endorsements where applicable.
Licenses, registrations, industry-specific authorizations, and any disciplinary actions or sanctions that could affect eligibility to provide services.
Data categories processed, encryption, subcontractors, breach history, and whether a Business Associate Agreement (BAA) or similar is required for HIPAA data.
Recent litigation, bankruptcy filings, and high-level financial stability indicators to identify material risk before entering multi-year commitments.
7–14 calendar days to return completed assessment
3–5 business days for commercial validation
5–10 business days depending on complexity
7–21 days for high-risk vendors with penetration testing
Typically 2–6 weeks end-to-end
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | Yes, 7-day trial | Varies | Varies | Varies | Varies |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
| Envelope Cap | No cap | 100 envelopes/user/year | Varies | Varies | Varies |