Vendor Library FAQs
What is the Vendor Library? Vendor Library
The Vendor Library is a catalogue of pre-assessed Vendors and Processing Operation Assessments (POAs) maintained by 9ine.
Instead of assessing a Vendor from scratch, you can review the assessment, understand its privacy, safeguarding and AI considerations, and Quickstart it into your own Vendor Assessment and Processing Operation Assessment (POA) logs.
Who can use the Vendor Library, and do I need a licence? Vendor Library
Access to the Vendor Library is included with your organisation's Vendor Platform licence.
Users with the appropriate permissions can browse, preview, request access to and Quickstart entries into their own organisation.
Access is granted by your organisation's administrator through User Management. If you cannot access the Vendor Library, contact your organisaiton's 9ine Platform administrator.
How do I find a vendor in the library? Vendor Library
Search by Vendor name or Processing Operation Assessment (POA) title.
To narrow or reorder the results, you can:
- Filter by A–Z, 0–9, Coming Soon, Certified or All
- Sort by Release Date, Vendor Legal Name or Processing Operation Assessment (POA) title
What do the tags and icons on a Vendor tile mean? Vendor Library
Tags identify the current status of a Vendor:
- Coming Soon: Published but not yet available to Quickstart.
- Recently Updated: The assessment has recently been updated.
- Certified: Part of 9ine's certified programme.
The icons highlight key information about the Vendor, including:
- Whether it processes Special Category Data
- Whether it uses Artificial Intelligence (AI) and its AI risk level
- Any Safeguarding considerations
- Its Processing Compliance status
What can I see in the Vendor Library Preview? Vendor Library
The Preview allows you to review a Vendor before deciding whether to Quickstart it.
It includes the assessment details, risk indicators, associated Risks, Issues, Lessons and Tasks, related library records, a description provided by 9ine, and the Vendor's Quickstart and access history.
What does Quickstart do? Vendor Library
Quickstart copies a Vendor and its Processing Operation Assessment (POA) into your organisation's Vendor Assessment and Processing Operation Assessment (POA) logs.
Associated attachments, notes, logo, Risks, Issues, Lessons and Tasks are also copied.
Quickstart runs in the background. Once the Vendor and POA are ready, you will receive both an in-platform notification and an email.
What happens if we already have that vendor? Vendor Library
If a Vendor with the same name already exists in your Vendor Assessment log, Quickstart detects it.
You can either:
- Create a new Vendor; or
- Attach the Processing Operation Assessment (POA) to the existing Vendor.
This helps prevent duplicate Vendor records.
How do I know a record came from the Vendor Library? Vendor Library
Vendors and Processing Operation Assessments (POAs) Quickstarted from the Vendor Library are identified by an icon in the first column of the log.
The icon allows you to distinguish library records from records created within your own organisation. Once the record has been edited and saved, the icon is removed.
What happens after I Quickstart a Vendor? Vendor Library
Once Quickstarted, the Vendor and Processing Operation Assessment (POA) become part of your organisation's Vendor Assessment and Processing Operation Assessment (POA) logs.
From there, you can review and customise the records, link them to Records of Processing (RoPs) or Data Protection Impact Assessments (DPIAs), and, where applicable, publish the application to your Application Library.