Compliance and audit template
Vendor Security Review template
Procurement request, questionnaire, risk rating, DPA, approval. This template has 13 shapes: 2 decisions and 3 people and teams.
Free plan, no card. Opens in the Wavelength editor.
- Procurement Person or team
- Vendor Request Start
- Security Person or team
- Send Questionnaire Step
- Rate Risk Step
- High Risk? Decision
Yes: Legal. No: Approve Vendor - Legal Person or team
- Approve Vendor Step
- Review DPA Step
- Add to Register Step
- DPA Redlines? Decision
Yes: Resolve Redlines. No: Approve Vendor - Vendor Onboarded End
- Resolve Redlines Step
Procurement submits a vendor request when a new supplier is needed. Security sends the vendor a security questionnaire. The security team rates the vendor's risk. If the risk is high, legal reviews the data processing agreement. If the risk is low, the vendor goes straight to approval. Legal approves or flags redlines in the DPA. Once approved, the vendor is added to the approved vendor register.
Wavelength drew this flow from the conversation above. Say your own version and it draws yours.
Who uses this template
Compliance and audit teams use it as a starting point. Review cycles with evidence and sign-off steps. See how compliance and audit teams use Wavelength.
Start from it
Open the template and the flow is on the canvas, laid out and ready to edit.
Change it by talking
Say what is different in your team. Wavelength adds, removes, and renames the shapes for you.
Send it
Share a link, or export to PNG, PDF, PowerPoint, draw.io, BPMN, or an SOP document.
Related templates
View all templates →
Questions
Is the vendor security review template free?
Yes. Every Wavelength plan can open this template, the Free plan included. The Free plan saves up to 5 flows and needs no card.
Can I change the template to match my process?
Yes. Open it, then describe what is different in your team, by typing or by holding the mic. Wavelength edits the flow to match. You can also drag, rename, and delete shapes by hand.
What can I export the template to?
Exports include PNG, PDF, PowerPoint, draw.io and Lucidchart, BPMN 2.0, Mermaid, an SOP document, n8n, and a CSV of steps.
Open the vendor security review template
It opens in the editor, ready to change by talking.