Review & Approval
Review vendor responses and manage the DPIA approval workflow.
Review Process Overview
When a vendor submits their assessment, it moves to the "Submitted" status and appears in your Pending Reviews queue. Here's how to review and approve assessments.
Assessment responses showing questions with answers and risk scores
Screenshot placeholder
Reviewing Responses
Access the Assessment
Click "Review" from the Pending Reviews section or the Assessments list.
Review Vendor Answers
Each response is displayed with:
Check Risk Score
Review the total risk score and risk level at the top of the assessment. Pay special attention to high-scoring answers.
Make Decision
Based on your review, approve or reject the assessment.
Automation Results
The Automation Results section shows the calculated risk metrics:
Risk Score
100
Total points accumulated
Risk Level
CRITICAL
Based on thresholds
Rules Evaluated
0
Automation rules checked
Rules Triggered
0
Rules that fired
Approval Actions
Approve
Approve the assessment when:
- Risk level is acceptable
- All required answers are satisfactory
- Vendor meets compliance requirements
Reject
Reject the assessment when:
- ✗Critical compliance gaps identified
- ✗Unacceptable risk level
- ✗Incomplete or inadequate responses
Adding Review Comments
When approving or rejecting, you can add comments to document your decision:
Review Notes
"Approved with conditions. Vendor must implement encryption at rest within 30 days and provide updated documentation."
Post-Approval Actions
Send notification of approval/rejection to the vendor
Decision and comments are logged in the timeline
Assessment moves from Pending to Approved/Rejected
Any configured Rule Engine actions execute
Include in compliance reporting and audit trail
Review Best Practices
Review Promptly
Don't let submissions sit too long - vendors expect timely feedback
Focus on High-Risk Items
Pay special attention to answers with high risk scores
Document Rationale
Always add notes explaining approval conditions or rejection reasons
Be Consistent
Apply the same standards across similar vendors