When it applies
Applicability
To a configured business engagement and only to the processing purposes and access roles actually activated.
Before completion
What to prepare
- Corporate identity and authorised-representative data.
- A document inventory classified by purpose and sensitivity.
- Any data-sharing role or public-financing access that must be documented.
Responsibilities
Who completes what
- Client organisation
- Provides only the documents necessary for the selected service and confirms its authority to share them.
- Commenda
- Defines purposes, privacy roles, access segregation, retention, and incident coordination.
Privacy and signature
Protected boundary
Business plans, representative contacts, identity evidence, financial files, technical documents, and access logs stay in protected systems.