Scope
Describe the goods or services covered, contract reference numbers, and the period of applicability so reviewers can confirm the declaration matches the engagement.
A formal declaration centralizes vendor attestations, reduces onboarding friction, and documents controls for audits and risk management. It makes compliance gaps visible early, supports consistent contract enforcement, and helps avoid payment delays and downstream remediation costs.
Describe the goods or services covered, contract reference numbers, and the period of applicability so reviewers can confirm the declaration matches the engagement.
Collect full legal entity name, legal structure, Tax Identification Number, registered address, and primary contact details to enable tax and onboarding checks.
Require concise yes/no attestations for export controls, sanctions screening, anti-bribery, conflicts of interest, and data protection; include required supporting documentation for each affirmative.
List active third-party certifications (for example ISO, SOC 2) and permit upload of certificates with validity and issuer details to support risk scoring.
Capture insurance types, policy limits, carrier name, policy numbers, and expiration dates; require certificate naming your organization as additional insured when contractually required.
Provide an authorized signatory line, printed name, title, and date; include a statement that signatory has authority and that false statements may be subject to contractual remedies.
| Field | Configuration |
|---|---|
| Signing Order | Sequential by approver role to ensure required reviews occur in order. |
| Authentication | Email link or SMS code for basic identity verification; use stronger KBA for high-risk suppliers. |
| Attachments Allowed | Accept PDF and DOCX for certificates and tax documents; limit file sizes per policy. |
| Retention Settings | Retain signed PDFs and audit trails per corporate retention schedule and regulatory requirements. |
Choose a platform that preserves cryptographic integrity, captures IP and timestamps, and stores a detailed audit trail to support future audits or investigations.
Upon contract award or pre-PO issuance
Company typically reviews within 10 business days
Supplier must update within 30 days of material changes
Recertify annually or per contract requirement
Periodic retention checks align with records policy
Form and attachments uploaded to intake system for validation.
TID, insurance, and certificate dates are checked for completeness.
Risk or legal teams review attestations and request clarifications.
Approved record is stored and supplier profile updated for payment.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial, no credit card required | Varies by vendor | Varies by vendor | Varies by vendor | Varies by vendor |
| Bulk Send | Yes (premium) | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes (BAA available) | Yes | Yes | No | No |
Small vendors, subcontractors, and international suppliers may also complete the form when required by contract or regulatory review.
A multinational buyer required supplier attestations for cybersecurity certification
A clinic required HIPAA BAAs and privacy attestations