1. Purpose of Forms & Records in Procurement Governance

This document defines the authoritative set of forms, records, and governance artefacts required for the EX-PR-01 Procurement Procedure. All forms and records are governance artefacts, not UI or technical schemas. They exist to ensure auditability, impartiality, and compliance with ISO 17020, ISO 27001/27002, and ISO 9001.

2. Master Table of Forms/Records

| Form ID | Form Name | Purpose | Creator Role | Reviewer Role | Approver Role | Procedure Section | Mandatory/Conditional | |--------------|----------------------------|-----------------------------------------|-------------------|-------------------|--------------------|-------------------|----------------------| | F-PR-01-01 | Procurement Request | Initiate procurement process | Requestor | Procurement Admin | Governance Manager | Initiation | Mandatory | | F-PR-01-02 | Supplier Offer Submission | Submit supplier offer | Supplier | Procurement Admin | Governance Manager | Offers | Mandatory | | F-PR-01-03 | Offer Evaluation Record | Record evaluation of offers | Evaluator | Quality Reviewer | Governance Manager | Evaluation | Mandatory | | F-PR-01-04 | Selection Justification | Justify selected supplier | Evaluator | Procurement Admin | Governance Manager | Selection | Mandatory | | F-PR-01-05 | Procurement Decision Record| Record final procurement decision | Governance Manager| Quality Reviewer | None | Decision | Mandatory | | F-PR-01-06 | Conflict of Interest Declaration | Declare independence/conflict status | All roles | Governance Manager| None | All Sections | Mandatory | | F-PR-01-07 | Procurement Closure Record | Record closure of procurement | Procurement Admin | Governance Manager| None | Closure | Mandatory |

3. Detailed Placeholder Descriptions

F-PR-01-01 Procurement Request

• Purpose: Initiate the procurement process and define requirements.
• Created by: Requestor
• Reviewed by: Procurement Admin
• Approved by: Governance Manager
• Governance significance: Entry point, ensures traceability and audit trail.
• Security classification: CONFIDENTIAL

F-PR-01-02 Supplier Offer Submission

• Purpose: Submit supplier's offer for evaluation.
• Created by: Supplier
• Reviewed by: Procurement Admin
• Approved by: Governance Manager
• Governance significance: Ensures impartiality and supplier independence.
• Security classification: CONFIDENTIAL

F-PR-01-03 Offer Evaluation Record

• Purpose: Record evaluation of all submitted offers.
• Created by: Evaluator
• Reviewed by: Quality Reviewer
• Approved by: Governance Manager
• Governance significance: Ensures transparent and auditable selection.
• Security classification: CONFIDENTIAL

F-PR-01-04 Selection Justification

• Purpose: Justify the selection of the winning supplier.
• Created by: Evaluator
• Reviewed by: Procurement Admin
• Approved by: Governance Manager
• Governance significance: Prevents arbitrary or biased selection.
• Security classification: CONFIDENTIAL

F-PR-01-05 Procurement Decision Record

• Purpose: Record the final procurement decision.
• Created by: Governance Manager
• Reviewed by: Quality Reviewer
• Approved by: None
• Governance significance: Finalizes procurement, ensures audit trail.
• Security classification: CONFIDENTIAL

F-PR-01-06 Conflict of Interest Declaration

• Purpose: Declare independence or any conflict of interest for all participants.
• Created by: All roles
• Reviewed by: Governance Manager
• Approved by: None
• Governance significance: Ensures impartiality and compliance with ISO 17020.
• Security classification: CONFIDENTIAL

F-PR-01-07 Procurement Closure Record

• Purpose: Record closure and completion of procurement process.
• Created by: Procurement Admin
• Reviewed by: Governance Manager
• Approved by: None
• Governance significance: Ensures proper closure and record retention.
• Security classification: CONFIDENTIAL

4. Procurement-Specific Evidence Categories (Conceptual)

• Procurement requests
• Supplier offers
• Offer evaluation records
• Selection justifications
• Procurement decision records
• Conflict of interest declarations
• Closure records

5. Independence & Conflict-of-Interest Constraints

• Requestor, evaluator, and approver roles MUST be separated.
• Suppliers MUST NOT evaluate or approve their own offers.
• All participants MUST submit a Conflict of Interest Declaration.
• Governance Manager MUST review all declarations for compliance.

6. Audit & Traceability Requirements

• All forms and records MUST be retained for audit.
• All approvals and reviews MUST be traceable to individual roles.
• No record may be deleted or altered after closure (immutability).

7. Settlement & Anchoring Positioning

• Procurement records MAY be anchored for proof of existence.
• Anchoring SHALL serve as cryptographic proof ONLY, never as approval.
• Settlement SHALL indicate finalization, not approval or control.

8. GDPR & Confidentiality Considerations

• All forms and records containing personal or sensitive data MUST be classified as CONFIDENTIAL.
• Access to records MUST be limited to authorized roles only.
• Data minimization and lawful basis for processing MUST be ensured.

9. Prohibited Actions Related to Procurement Records

• Records MUST NOT be altered or deleted after closure.
• Approvers MUST NOT approve their own submissions.
• Suppliers MUST NOT access evaluation or selection records of competitors.
• Blockchain anchoring MUST NOT be used as a substitute for governance approval.

10. UNDEFINED Items Requiring Organizational Decision

• Retention period for procurement records: UNDEFINED
• External supplier access policy: UNDEFINED
• Digital vs paper record policy: UNDEFINED
• Additional evidence requirements for regulatory compliance: UNDEFINED