Fictional Proof Asset Preview
A public preview of a fictional vendor risk review sample built for Indigenous organizations evaluating software, MSP, cloud, and health system providers.
What this preview shows
This preview shows how a vendor review can score security, data sovereignty, implementation risk, and accountability before a contract is signed, renewed, or renegotiated.
Best fit
Communities and Indigenous organizations reviewing vendors that host, process, support, or access sensitive community data.
Tier 3: Implementation and Procurement
The sample is built to support pre-signing and renewal decisions, not only technical implementation planning.
The review produces negotiation priorities and a decision memo so procurement and leadership know what to fix before signing or renewal.
The table below is a limited public excerpt from a fictional sample. The full version includes more context, assumptions, and implementation notes.
| Criterion | Weight | Review focus |
|---|---|---|
| Data sovereignty and residency | 20% | Ownership, hosting location, subprocessors, and export terms |
| Security controls | 20% | MFA, logging, encryption, backup, and vulnerability management |
| Incident accountability | 15% | Notification timeline, response role, and escalation contact |
Request the complete fictional sample
The public preview is intentionally limited. Request the full fictional sample if you want to review how this deliverable is fully structured and sequenced in practice. The full fictional sample includes a renewal context, weighted scoring, a conditional approval decision memo, negotiation priorities, and follow-up actions for procurement and contract renewal.