Due Diligence and Ongoing Monitoring

 View Only
  • 1.  How to collect documents for large companies

    This message was posted by a user wishing to remain anonymous
    Posted 07-23-2025 11:04 AM
    This message was posted by a user wishing to remain anonymous

    We have a relationship with Meta Ads - and need to collect a Certificate of Insurance from them. There is no contract with the vendor because it is subscription based and online. How do others work around this situation?

    Thanks in advance!



  • 2.  RE: How to collect documents for large companies

    This message was posted by a user wishing to remain anonymous
    Posted 07-23-2025 02:07 PM

    This message was posted by a user wishing to remain anonymous

    Hello,

    We carved out subscription based services as a category that we do not track in TPRM, so we aren't collecting any due diligence for these type of services. 



  • 3.  RE: How to collect documents for large companies

    Posted 07-23-2025 02:07 PM
    In my opinion, review Meta's terms if they include indemnification or liability clauses; this may be accepted by internal audit in place of a COI. Alternatively,  you may escalate through their business support.


  • 4.  RE: How to collect documents for large companies

    This message was posted by a user wishing to remain anonymous
    Posted 07-23-2025 02:07 PM
    This message was posted by a user wishing to remain anonymous

    Hello,

    What I typically do is contact customer service and let them know that I am collecting due diligence documentation. in your case I would let them know upfront that you are needing X type of insurance certificate and that your organization is a current customer, provide your organization's name. I have found that their customer support teams will usually take care of my requests fairly quickly, or they get me in contact with the right person.

    Hope this helps!