Due Diligence and Ongoing Monitoring

Hello all,

We contract with FIS on the three different pruducts:

CallReporter Premier

Regulatory University

BizChex, QualiFile and ID Verification 

Do we need to do a due diligence on RegU and CallReporter? What documents do you request? 
They don't have any NPI? 

Communities input is greatly appreciated.

If you login to their Client Portal, you should be able to download company-wide due diligence documents that would satisfy all services you use them for.

I would look for the standard information security and insurance information, SOC reports, etc.

Thank you for the quick response.
Currently we consider both Regulatory University (staff online training) and CallReporter Premier out of scope. 
Should we conduct a due diligence on them and not consider them out of scope?

Thanks