Template
Supplier Offboarding Evidence Template
This template defines the evidence record produced at supplier offboarding to demonstrate that access has been revoked, organizational data has been returned or destroyed, residual obligations are documented, and the relationship has closed cleanly. The record is the auditable trail required by GDPR Article 28, DORA exit-strategy obligations, sector regulators, and the supplier exit procedure.
- Type
- Template
- Version
- 1.0.15
- Date
- 2026-10-23
- Owner
- Supplier Risk Maintainer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Supply Chain Governance
- Review frequency
- Annual and upon material exit, data-return obligation, or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Scope
- Offboarding evidence record
- Operating expectations
- Framework alignment
- Limitations
Frameworks it maps to
- GDPR / UK GDPR
- DORA
- EBA Guidelines on outsourcing arrangements
- ISO/IEC 27036
- ISO 28000:2022
- NIST SP 800-88 Rev. 2
- IEEE 2883-2022
- CSA CCM v4.1
- ISO/IEC 27001:2022
Related documents
- Supplier Exit and Data Return Proceduresupply-chain
- Cloud Exit and Data Portability Standardsupply-chain
- Supplier Security and Privacy Assurance Standardsupply-chain
- Supplier Risk Register Templatesupply-chain
- Privacy and Data Governance Policyprivacy
- Records Retention and Destruction Standardgovernance
- Access Control Proceduresecurity
Next
All Documents