Risk Opto Logo
Business Partner Assessment · Expert-reviewed

Supplier Onboarding Assessment

The financial strength, quality and capacity, sustainability and international regulatory readiness, and compliance and integrity of a supplier that supplies, or is preparing to supply, buyers primarily in the EU and around the world.

Raporda neler var

  • The class and what it means for this service
  • Information sufficiency and a list of missing information
  • Strengths and findings for each dimension
  • Starting conditions, actions and monitoring recommendations

Decision

Which decision does it support?

Adding a Turkish supplier to an approved supplier list, or enabling the supplier to present an independent report to its buyers in Türkiye and abroad.

Who it is for

  • Foreign buyers sourcing from Türkiye, primarily in the EU, and procurement teams in Türkiye
  • Turkish manufacturers that want to approach buyers abroad with an independent assessment report
  • Companies that want to document their supply chain with regard to CBAM, forced labour and sanctions

Two ways to apply

Buyers and suppliers can both apply

The question set and the assessment are the same; what differs is who applies and who receives the report.

Applying as a buyer

A buyer in Türkiye or abroad has its supplier assessed

  • The buyer applies; the supplier answers the questions in the panel.
  • If the buyer shares its annual purchase value and volume, dependency and capacity coverage ratios are calculated.
  • The report is delivered to the buyer; the supplier cannot access it.
  • The report can be prepared in English, or in Turkish and English.
Apply as a buyer

Applying as a supplier

A Turkish supplier requests a report on its own company

  • On the application form, choose “My own company (as the supplier)”.
  • You answer the questions and can state your target markets and customer profile.
  • The report is delivered to you; you can share it in full with current and prospective buyers.
  • Your buyers confirm the report's authenticity on RiskOpto with its verification code.
Apply as a supplier

To verify a report: degerlendirme.riskopto.com/dogrula

Why now

Buyers primarily in the EU and around the world are asking suppliers for more information

A buyer may not be able to ask everything directly, but it still carries the risk. An independent expert report makes things easier for both sides.

CBAM (Carbon Border Adjustment Mechanism)

The definitive period began on 1 January 2026. Without installation-level emissions data, a buyer importing cement, iron and steel, aluminium, fertilisers, electricity or hydrogen pays for more expensive certificates based on default values.

EU Forced Labour Regulation

From 14 December 2027, products made with forced labour can no longer be placed on the EU market; the regulation applies regardless of company size. The UFLPA in the US and the Modern Slavery Act in the UK are pushing buyers towards similar checks.

Supply chain due diligence

Buyers covered by the EU CSDDD, Germany's LkSG and similar rules, and companies with global procurement policies, ask suppliers for risk analyses, codes of conduct and grievance mechanism details.

Sanctions and re-export

EU, US (OFAC), UK and UN sanctions lists, the “No Russia” contract clause and end-user checks are questions buyers ask frequently.

Assessment dimensions

What do we review?

Each dimension's weight determines its contribution to the class. If a critical dimension cannot be assessed, no class is given.

Financial strength and continuitycritical

Profitability, indebtedness, liquidity, customer concentration and the buyer's share of the supplier's turnover.

25%

Quality, capacity and deliverycritical

Quality certificates, capacity and utilisation, on-time and in-full delivery, traceability, and the product conformity requirements of the target market.

30%

Sustainability and international regulatory readiness

CBAM emissions data, greenhouse gas inventory, environment and occupational safety, labour rights and sub-suppliers.

25%

Compliance and integritycritical

Beneficial owners, sanctions screening, sales to sanctioned countries, anti-bribery and payment security.

20%

The report is not a compliance certificate; it does not declare conformity with CBAM, CSDDD, LkSG, the EU Forced Labour Regulation or the legislation of any other country. It shows the supplier's level of readiness based on its declarations and documents. The report is valid for 12 months from the date of approval.

Result

What do the classes mean for this service?

A

Can be approved as a standard supplier; annual monitoring is sufficient.

B

Can be approved; a time-bound improvement plan and 6-monthly monitoring are recommended.

C

A conditional start is recommended: pilot order, on-site audit or additional safeguards.

D

Approval as a supplier is not recommended on the basis of current information; the issues to be resolved are listed.

If critical information or documents are missing, no class is given (Not assessable). Information sufficiency and the dimension profile are reported alongside the class.

Information and documents

What is requested from you and the candidate?

From the requesting company

Collected at the proposal stage and used as thresholds in the assessment.

  • Expected annual purchase value (EUR)
  • Expected annual volume

Main documents in the document-supported scope

The full list and mandatory documents are shown in the panel. No documents are requested in the declaration-based scope.

  • Financial statements for the last 2 years (as filed with the tax returns) and trial balance for the latest period
  • Quality and other management system certificates
  • Machine/line and capacity table, delivery performance and complaints summary (Excel template in the panel)
  • Labour rights, code of conduct, anti-bribery and sanctions compliance policies
  • CBAM emissions report and verification report, if the product is within the scope of CBAM

Process

From application to approved report

  1. 1

    Application

    You tell us in the panel the service, the business to be assessed, the purpose and the scope you need. The application is not binding.

  2. 2

    Scope and proposal

    The GRC team reviews the application and sends the scope, fee and timeline in a written proposal. You accept the proposal in the panel.

  3. 3

    Information and documents

    Questions and documents are collected through the panel. They can be answered by the business being assessed or by your company.

  4. 4

    Expert review

    A GRC expert reviews the answers and documents, raises missing items and correction requests in the panel, and justifies the score.

  5. 5

    Approved report

    The report is published in the panel after a check by a separate approver. It can be prepared in Turkish, English or both.

Scope

You choose the scope of the review

The report states clearly what each piece of information is based on.

Declaration-based

Answers and explanations of the authorised person

Does not mean that the declarations have been independently verified.

Document-supported

Recommended

Answers plus the financial statements, bank and official documents requested within the scope

Submission of a document does not mean that it has been confirmed with an external source.

Verified (additional scope)

In addition to the document-supported scope, an agreed site visit or external source check

The report states which information was verified, against which source and on what date.

Presentation

The result is given through three indicators

Class

A · B · C · D

Tells you on what terms you can work together. If critical information is missing, no class is given: Not assessable.

Information sufficiency

High · Medium · Low

Shows how much of the assessment rests on answers and documents. Gaps are not hidden; they are listed in the report.

Dimension profile

Strong · Adequate · Weak

The level of each dimension is shown separately, so strengths and issues to address are visible.

FAQ

Frequently asked questions

Apply for the Supplier Onboarding Assessment

Applying is not binding. The GRC team reviews the scope; the fee and timeline are sent in a written proposal. For questions, write to sales@grcmngmnt.com.

Privacy noticeTerms of useReport verificationSign in to the panel