Due Diligence and Ongoing Monitoring

 View Only
  • 1.  How to collect documents for large companies

    This message was posted by a user wishing to remain anonymous
    Posted 07-23-2025 11:04 AM
    This message was posted by a user wishing to remain anonymous

    We have a relationship with Meta Ads - and need to collect a Certificate of Insurance from them. There is no contract with the vendor because it is subscription based and online. How do others work around this situation?

    Thanks in advance!

    Register today for the third-party risk management bootcamp - June 23-25


  • 2.  RE: How to collect documents for large companies

    This message was posted by a user wishing to remain anonymous
    Posted 07-23-2025 02:07 PM

    This message was posted by a user wishing to remain anonymous

    Hello,

    We carved out subscription based services as a category that we do not track in TPRM, so we aren't collecting any due diligence for these type of services. 

    Register today for the third-party risk management bootcamp - June 23-25


  • 3.  RE: How to collect documents for large companies

    Posted 07-23-2025 02:07 PM
    In my opinion, review Meta's terms if they include indemnification or liability clauses; this may be accepted by internal audit in place of a COI. Alternatively,  you may escalate through their business support.
    Register today for the third-party risk management bootcamp - June 23-25


  • 4.  RE: How to collect documents for large companies

    This message was posted by a user wishing to remain anonymous
    Posted 07-23-2025 02:07 PM
    This message was posted by a user wishing to remain anonymous

    Hello,

    What I typically do is contact customer service and let them know that I am collecting due diligence documentation. in your case I would let them know upfront that you are needing X type of insurance certificate and that your organization is a current customer, provide your organization's name. I have found that their customer support teams will usually take care of my requests fairly quickly, or they get me in contact with the right person.

    Hope this helps!


    Register today for the third-party risk management bootcamp - June 23-25