Last updated:
Where can I find a ready-made, editable template for a vendor onboarding or supplier selection control, and which one do I need?
Universal, UAE, KSA, cyber, privacy, HSE and financial checks. Each row names the domain, the check, when it applies, the evidence and the owner. For example: a legal-name and registration-status check against an official registry extract, owned by Procurement.
Use it when: you need one list of checks that scales with the type of vendor.
Open the due-diligence checklistRisk factors, tiers, assessment requirements and review cadence. Four tiers (Low, Medium, High, Critical) across service criticality, data access, and spend and exposure. Each tier sets the depth of due diligence and how often to review.
Use it when: you need to decide how deep to check, and how often to re-check.
See the risk-tiering matrixEditable policy clauses, responsibilities, controls and approval rules in nine sections, from purpose and scope to monitoring and offboarding.
Use it when: you need a written policy that names who owns, reviews and approves. It is also a starting point for the documented verification policy required under FTA Decision No. 13 of 2026.
Get the onboarding policy templateA one-page A4 checklist built only from the text of FTA Decision No. 13 of 2026. It covers scope and the small-supply exception, supplier checks, the extra checks above AED 375,000, each-supply checks, and records and policy, and it ends with a human sign-off.
Use it when: you need to show the checks were done before deducting input tax on a supply.
Get the FTA Decision 13 checklistWeighted criteria, evaluator declarations, evidence and award rationale. The default weights are: technical compliance 30%, commercial value 25%, delivery capability 15%, risk and compliance 15%, implementation approach 10%, sustainability/local value 5%. Adjust them to your tender.
Use it when: several evaluators need to score bids the same way and record why.
Use the RFP scorecardCore fields, sources, validation rules, ownership and ERP mappings, from vendor_id and legal_name to tax_number and bank_account_name.
Use it when: you are cleaning a vendor master, or preparing supplier data for an ERP or e-invoicing project.
View the master data dictionaryA seven-question self-assessment across governance, evidence, workflow, monitoring and integration, scored from Initial to Optimised. It is a self-assessment, not an independent certification.
Use it when: you want a quick baseline before changing your process.
Take the maturity assessmentGeneral information only, not legal advice. Verify requirements with the relevant competent authority and qualified advisers.
Yes. All seven templates are free to read online and to download.
They are buyer-side controls for onboarding and evaluating suppliers. The due-diligence checklist includes UAE-specific checks and a tax/VAT status check. They are not registration forms for government supplier portals. Tailor them to your obligations and get specialist review where required.
No. They are operating aids.