Legal entity verification, jurisdiction of incorporation, DBA registrations, and beneficial ownership disclosure including any parent entities or controlling interests.

Not assessed.

General liability, professional/E&O, cyber liability, and workers compensation — verify coverage limits, effective dates, named-insured accuracy, and certificate currency.

Not assessed.

Audited financial statements, revenue and solvency indicators, banking references, and any material adverse financial disclosures.

Not assessed.

Security certifications (SOC 2, ISO 27001, PCI DSS), penetration testing, vulnerability management practices, and applicable regulatory compliance documentation.

Not assessed.

Disclosure of data breaches, regulatory enforcement actions, material litigation, and evidence of remediation for any disclosed incidents.

Not assessed.

MSA terms, SLA commitments and penalties, IP ownership, liability caps, indemnification provisions, data processing agreements, and sub-processor disclosures.

Not assessed.