Introduction

This redacted Third‑Party Risk Management (TPRM) evidence sample pack is designed to help industrial compliance teams benchmark what “audit‑ready” looks like without exposing sensitive data. Use it to align stakeholders, test workflows, and validate integrations across vendor onboarding, due diligence, continuous monitoring, certifications, and incident response. For end‑to‑end automation, the pack maps cleanly to Parakeet capabilities like Rosella AI Compliance Agent, Certification Automation, COI Verification, and platform Features.

Key characteristics:

Redacted personally identifiable and proprietary information
Structurally realistic files for hands‑on validation
Compatible with spreadsheet‑centric workflows and Parakeet’s importers
Intended for internal evaluation and training; not production use

What’s included (concise manifest)

Below is the file manifest included in the redacted pack. Filenames, formats, and descriptions are preserved to mimic real audit evidence while protecting confidentiality.

File	Format	Purpose	Redactions
third‑party‑inventory	.xlsx	Master register of vendors, services, data types, and criticality tiers	Vendor names, IDs, contacts
vendor‑tiering‑model	.xlsx	Impact and inherent risk scoring with business/IT ownership	Thresholds, reviewer names
due‑diligence‑checklist	.docx	Checklist used before contract execution; aligns to internal controls	Criteria weights, approver signatures
questionnaire‑response‑log	.xlsx	Tracking of questionnaire responses, issues, and remediation status	Free‑text responses
coi‑verification‑log	.xlsx	Certificates of Insurance status, coverage dates, and gaps	Policy numbers, broker contacts
dpa‑template	.docx	Data Processing Agreement template with configurable schedules	Party names, annexes
access‑review‑report	.pdf	Quarterly access review summary for vendor‑hosted systems	Usernames, ticket IDs
incident‑communication‑playbook	.docx	Stakeholder comms for third‑party incidents, including RACI	Phone/emails, escalation paths
corrective‑action‑register	.xlsx	CAPA items from due diligence and monitoring with SLAs	Root‑cause narratives
supplier‑performance‑sla‑tracker	.xlsx	KPI/SLA metrics, penalties, and service credits	Contract values
iso‑certificate‑tracker	.xlsx	Vendor ISO and related certifications with renewal dates	Certificate numbers
regulatory‑change‑log	.xlsx	Tracked regulatory updates and mapped obligations for vendors	Source URLs, analyst notes

Inline previews (redacted excerpts)

The following short excerpts illustrate structure and field naming. These are not full files and are provided for orientation only.

Preview A — third‑party‑inventory (text excerpt)

Vendor: [REDACTED]
Service: Cloud ERP Hosting
Data Types: Production Data; Finance Summaries
Criticality Tier: High
Owner (Business/IT): [REDACTED] / [REDACTED]
Review Cadence: Quarterly

Preview B — coi‑verification‑log (text excerpt)

Vendor: [REDACTED]
Coverage: General Liability; Workers’ Comp; Cyber
Effective Dates: 2025‑01‑01 → 2025‑12‑31
Status: Approved (No Gaps)
Notes: Auto‑notify 30 days prior to expiration

Preview C — corrective‑action‑register (text excerpt)

CAPA ID: CAPA‑TPRM‑023
Source: Due Diligence — Security Questionnaire
Issue: MFA not enforced for privileged access
Action: Implement MFA + quarterly access attestations
Owner: [REDACTED]  |  SLA: 45 days  |  Status: In Progress

How to use this pack with Parakeet

Import and normalize
Load .xlsx artifacts into Parakeet to populate registers and dashboards. See Features for import workflows and automation.
Automate evidence and alerts
Use Rosella to extract fields, flag gaps, and auto‑generate follow‑ups (e.g., CAPA tasks, policy references, renewal reminders).
Tie into operational systems
Sync workforce/compliance owners via Workday or BambooHR.
Route remediation tasks through Trello and collaborate in Slack or Microsoft Teams.
Track COI expirations and coverage changes with COI Verification and deadline syncing via Google Calendar.
Stay audit‑ready year‑round
Maintain certification timelines with Certification Automation and link vendor evidence to ISO controls and supplier obligations.

Release information

Pack version: v1.0
Release date: October 21, 2025
Intended audience: Compliance Officers, Risk Managers, EHS Directors, Procurement and IT Owners in industrial sectors

License and use

This redacted evidence pack is provided for internal evaluation, enablement, and training. Do not repurpose any sample content as production documentation, contracts, or attestations. No legal advice is provided. All sample company names and data are fictional or redacted. For questions or permissions beyond internal evaluation, contact the Parakeet team.

Related resources

Industrial GRC platform capabilities: Features
AI‑assisted research and audit automation: Rosella AI Compliance Agent
Certification timelines and evidence workflows: Certification Automation
Vendor insurance evidence at scale: COI Verification
Supply chain and manufacturing context: Solutions and Manufacturing