Customer due diligence
Compliance evidence matrix
A practical map from common due-diligence questions to the relevant Zeenna summary and deeper evidence source.
Audience: Procurement, Legal, Compliance, DPO and IT Security
Updated: September 2026
Evidence map
| Area | Pack summary | Detailed evidence |
|---|---|---|
| Security governance | Security and compliance architecture | ISMS materials and Trust Center |
| Privacy and GDPR | Privacy policy | Data-protection policies, DPA and subprocessor information |
| Contractual terms | Terms and conditions | Customer agreement and applicable DPA |
| AI governance | AI governance and human oversight | AIMS materials, AI-SIA and related policies |
| Decision logic | AI governance summary | Instructions for Use and Decision Process Architecture guide |
| Access and technical controls | Access control and security controls | Control evidence and relevant internal policies |
| Operational resilience | Continuity, recovery and incidents | Business continuity plan, recovery tests and incident records |
| Assurance | Security page and Trust Center | Current certificates, reports and approved evidence |
How to request evidence
Detailed materials may be available for customer due diligence subject to contractual arrangements, access approval and document sensitivity. Use the Trust Center for the current evidence catalogue or contact the Zeenna team for a scoped review.