Provider's Register

Help with tax identification:
- For Australia, ABN (Australian Business Number)
- For Canada, SIN (Social Insurance Number)
- For Mexico, RFC.
- For Colombia, NIT (Tax Identification Number)
- For USA, EIN number
- For India, GSTIN (State Identification Number). Please do not enter PAN number (it will not be valid).
- For EU countries, VAT number (VAT number), except:
    -- Spain: Spanish suppliers must register with the VAT number.
    -- Germany: in case the supplier does not have a VAT number, he must register with the steurnummer.
- For the rest, select Other document of proof.

Company Name ** The Company Name field should not contain special characters such as ~ " # % , & * : . < > ? / { | } or a blank space at the end of the field. Please check the name before continuing.
Type of person * Physical Legal	Type of tax identification * CIF - Tax Identification Number (NIF, CIF, NIE) ABN - Australian Business Number (Australia) SIN - Social Insurance Number (Canada) RFC - Federal Taxpayer Registry (Mexico) NIT - Tax Identification Number (Colombia) GSTIN - Goods and Services Tax Identification Number (India) EIN - Employer Identification Number (EEUU) VAT - Value Added Tax (European Union) Steuernummer (Germany) UKVAT - UK Value Added Tax /United Kingdom) Other supporting document (Other countries)
Tax identification number **
Address *
Country **	State *
City *	Postal Code *
Currency * EUR - Euro AED - United Arab Emirates Dirham AUS - Australian dollar BRL - Brazilian Real CAD - Canadian Dollar CHF - Swiss Franc CNY - Chinese Yuan COP - Colombian Peso GBP - British Pound IDR - Indonesian Rupiah INR - Indian Rupee MXN - Mexican Peso MYR - Malaysian Ringgit NZD - New Zealand dollar SGD - Singapore dollar USD - American Dollar ZAR - South African Rand THB - Thai Baht	Purchase category * Consultants and Professional Services General services Industrial Logistics Copackers Marketing-ATL Systems Insurance Packaging Trade Marketing Quality

Other information

Name of Deoleo Contact **	Email of Deoleo Contact **
Name of Supplier Contact *	Email of Supplier Contact **
Mobile Phone **	Deoleo's Provider Deoleo's Provider YesDeoleo's Provider No
Number of employees in your company < 10 Between 10 and 50 Between 50 and 250 > 250	Approximate turnover for your company Less than 2 million euros Between 2 and 10 million euros Between 10 and 50 million euros More than 50 million euros
Reference customers *
URL *
Remarks *

Compliance Information

The company has a Code of Ethics or Conduct, or similar document that aims to achieve the following objectives The company has a Code of Ethics or Conduct, or similar document that aims to achieve the following objectives NoThe company has a Code of Ethics or Conduct, or similar document that aims to achieve the following objectives Yes
The Company has already carried out or allowed to carry out training for the company's directors, addressing issues related to professional and business ethics, corruption, business and corporate malpractice. The Company has already carried out or allowed to carry out training for the company's directors, addressing issues related to professional and business ethics, corruption, business and corporate malpractice. NoThe Company has already carried out or allowed to carry out training for the company's directors, addressing issues related to professional and business ethics, corruption, business and corporate malpractice. Yes
The Company is up to date with its tax obligations and has no open proceedings with the Tax Agency. The Company is up to date with its tax obligations and has no open proceedings with the Tax Agency. NoThe Company is up to date with its tax obligations and has no open proceedings with the Tax Agency. Yes
The Company is up to date with its labour obligations and has no open social security proceedings. The Company is up to date with its labour obligations and has no open social security proceedings. NoThe Company is up to date with its labour obligations and has no open social security proceedings. Yes
Does the Company have any due diligence procedures in place to prevent money laundering? Does the Company have any due diligence procedures in place to prevent money laundering? NoDoes the Company have any due diligence procedures in place to prevent money laundering? Yes
The Company intends to subcontract or use other natural and/or legal persons for the provision of the contracted service The Company intends to subcontract or use other natural and/or legal persons for the provision of the contracted service NoThe Company intends to subcontract or use other natural and/or legal persons for the provision of the contracted service Yes

Mandatory Requirements

Confirm that the Company and/or its Directors have not had criminal convictions, and/or been involved in criminal proceedings * I confirm
Confirm that the Company supports and respects the protection of fundamental human rights within its sphere of influence * I confirm
Confirm that the Company recognises freedom of association and the right to collective bargaining * I confirm
Confirm that the Company has taken the necessary and appropriate measures to ensure and provide sufficient safety, health and social protection for its employees * I confirm
Confirm that the Company has taken the necessary and appropriate measures against all forms of discrimination in employment and recruitment. * I confirm

CiberSecurity Information

Is there a hardware inventory? Is there a hardware inventory? NoIs there a hardware inventory? Yes	Do you have a tool that allows continuous and automated updating of the inventory? Do you have a tool that allows continuous and automated updating of the inventory? NoDo you have a tool that allows continuous and automated updating of the inventory? Yes
Do you have an authorization procedure for the hardware elements before they go into production? Do you have an authorization procedure for the hardware elements before they go into production? NoDo you have an authorization procedure for the hardware elements before they go into production? Yes
Do you have mechanisms to control (detect or restrict) access of unauthorized physical devices to your network (e.g. 802.1x)? Do you have mechanisms to control (detect or restrict) access of unauthorized physical devices to your network (e.g. 802.1x)? NoDo you have mechanisms to control (detect or restrict) access of unauthorized physical devices to your network (e.g. 802.1x)? Yes
Is there an updated list of authorized software Is there an updated list of authorized software NoIs there an updated list of authorized software Yes	Do you have an automated software inventory management tool? Do you have an automated software inventory management tool? NoDo you have an automated software inventory management tool? Yes
Is there a software authorization procedure? Is there a software authorization procedure? NoIs there a software authorization procedure? Yes
Do you have a software maintenance plan, according to the manufacturers' specifications? Do you have a software maintenance plan, according to the manufacturers' specifications? NoDo you have a software maintenance plan, according to the manufacturers' specifications? Yes
Is there software on your network that is not supported by the manufacturer? Is there software on your network that is not supported by the manufacturer? NoIs there software on your network that is not supported by the manufacturer? Yes
Do you have any tool to control and prevent the installation of unauthorized software (e.g. applocker)? Do you have any tool to control and prevent the installation of unauthorized software (e.g. applocker)? NoDo you have any tool to control and prevent the installation of unauthorized software (e.g. applocker)? Yes
Is there a procedure for reviewing the software installed on the equipment and/or servers? Is there a procedure for reviewing the software installed on the equipment and/or servers? NoIs there a procedure for reviewing the software installed on the equipment and/or servers? Yes
Do you have a tool for identifying security vulnerabilities in your devices, technologies, and information systems? Do you have a tool for identifying security vulnerabilities in your devices, technologies, and information systems? NoDo you have a tool for identifying security vulnerabilities in your devices, technologies, and information systems? Yes	Are vulnerability scans performed on a regular basis? Perimeter Internal Wifi No
Is there continuous monitoring of the vulnerabilities published by the manufacturers? Is there continuous monitoring of the vulnerabilities published by the manufacturers? NoIs there continuous monitoring of the vulnerabilities published by the manufacturers? Yes	Has any vulnerability analysis been done in the last 2 months? Has any vulnerability analysis been done in the last 2 months? NoHas any vulnerability analysis been done in the last 2 months? Yes
Do you have a procedure to analyze and prioritize the resolution of identified vulnerabilities and security defects? Do you have a procedure to analyze and prioritize the resolution of identified vulnerabilities and security defects? NoDo you have a procedure to analyze and prioritize the resolution of identified vulnerabilities and security defects? Yes
Is the correction of the detected vulnerabilities tracked? Is the correction of the detected vulnerabilities tracked? NoIs the correction of the detected vulnerabilities tracked? Yes
Do you have a procedure for patching systems/technologies (operating systems, databases, applications...)? Do you have a procedure for patching systems/technologies (operating systems, databases, applications...)? NoDo you have a procedure for patching systems/technologies (operating systems, databases, applications...)? Yes
Do you have a tool(s) for the management and installation of security patches and updates? Do you have a tool(s) for the management and installation of security patches and updates? NoDo you have a tool(s) for the management and installation of security patches and updates? Yes
Is there a privilege management procedure that contemplates the limitation per user to the minimum strictly necessary to fulfill their obligations? Is there a privilege management procedure that contemplates the limitation per user to the minimum strictly necessary to fulfill their obligations? NoIs there a privilege management procedure that contemplates the limitation per user to the minimum strictly necessary to fulfill their obligations? Yes
Is there an inventory of management accounts that allows for their proper management and control? Is there an inventory of management accounts that allows for their proper management and control? NoIs there an inventory of management accounts that allows for their proper management and control? Yes
Are the administration accounts nominative (i.e., each user has his/her own, not allowing the sharing of generic accounts) Are the administration accounts nominative (i.e., each user has his/her own, not allowing the sharing of generic accounts) NoAre the administration accounts nominative (i.e., each user has his/her own, not allowing the sharing of generic accounts) Yes
Do users with administration accounts use a different account without administrator privileges for regular tasks (Internet access, e-mail, etc.)? Do users with administration accounts use a different account without administrator privileges for regular tasks (Internet access, e-mail, etc.)? NoDo users with administration accounts use a different account without administrator privileges for regular tasks (Internet access, e-mail, etc.)? Yes
Is there a procedure for the management of administration accounts? Is there a procedure for the management of administration accounts? NoIs there a procedure for the management of administration accounts? Yes
Is there an activity log of actions performed with accounts and on administration accounts for all systems (operating systems, databases, applications, etc.)? Is there an activity log of actions performed with accounts and on administration accounts for all systems (operating systems, databases, applications, etc.)? NoIs there an activity log of actions performed with accounts and on administration accounts for all systems (operating systems, databases, applications, etc.)? Yes
Does it include the record of both successful and failed actions? Does it include the record of both successful and failed actions? NoDoes it include the record of both successful and failed actions? Yes
Are there automatic alerts when admin privileges are assigned/unassigned? Are there automatic alerts when admin privileges are assigned/unassigned? NoAre there automatic alerts when admin privileges are assigned/unassigned? Yes
Are there automatic alerts when a threshold of failed access attempts is exceeded using an account with administrative privileges? Are there automatic alerts when a threshold of failed access attempts is exceeded using an account with administrative privileges? NoAre there automatic alerts when a threshold of failed access attempts is exceeded using an account with administrative privileges? Yes
Do you have a procedure for fortification or bastioning of the systems prior to putting them into production? Do you have a procedure for fortification or bastioning of the systems prior to putting them into production? NoDo you have a procedure for fortification or bastioning of the systems prior to putting them into production? Yes
If yes, do you have a backup tool(s) If yes, do you have a backup tool(s) NoIf yes, do you have a backup tool(s) Yes
Are periodic vulnerability scans, penetration tests and/or source code inspections performed on systems? Are periodic vulnerability scans, penetration tests and/or source code inspections performed on systems? NoAre periodic vulnerability scans, penetration tests and/or source code inspections performed on systems? Yes
Is a configuration monitoring system used to "monitor" in real time the security configuration of all production systems? Is a configuration monitoring system used to "monitor" in real time the security configuration of all production systems? NoIs a configuration monitoring system used to "monitor" in real time the security configuration of all production systems? Yes
Does it allow you to define alerts when changes are made to said configuration? Does it allow you to define alerts when changes are made to said configuration? NoDoes it allow you to define alerts when changes are made to said configuration? Yes
re user activities recorded in all systems? re user activities recorded in all systems? Nore user activities recorded in all systems? Yes
Does the audit trail indicate who performs the activity, how it is performed, from where it is performed, when it is performed, and on what information, regardless of the user? Does the audit trail indicate who performs the activity, how it is performed, from where it is performed, when it is performed, and on what information, regardless of the user? NoDoes the audit trail indicate who performs the activity, how it is performed, from where it is performed, when it is performed, and on what information, regardless of the user? Yes
Does it include both successful activities and failed attempts? Does it include both successful activities and failed attempts? NoDoes it include both successful activities and failed attempts? Yes	Are the logs stored only locally? Are the logs stored only locally? NoAre the logs stored only locally? Yes
Are there mechanisms to protect the logs against access and modification or deletion? Are there mechanisms to protect the logs against access and modification or deletion? NoAre there mechanisms to protect the logs against access and modification or deletion? Yes	Is the log retention period determined? Is the log retention period determined? NoIs the log retention period determined? Yes
Are backup copies of the logs made? Are backup copies of the logs made? NoAre backup copies of the logs made? Yes	Are the logs generated in the different systems centralized? Are the logs generated in the different systems centralized? NoAre the logs generated in the different systems centralized? Yes
Are activity logs reviewed for abnormal patterns? Are activity logs reviewed for abnormal patterns? NoAre activity logs reviewed for abnormal patterns? Yes
Is there any tool or service available to alert, in real time, of abnormal events based on the analysis of audit logs? Is there any tool or service available to alert, in real time, of abnormal events based on the analysis of audit logs? NoIs there any tool or service available to alert, in real time, of abnormal events based on the analysis of audit logs? Yes
Is a SIEM (Security Information and Event Management) or log analytics tool available to perform log correlation and analysis? Is a SIEM (Security Information and Event Management) or log analytics tool available to perform log correlation and analysis? NoIs a SIEM (Security Information and Event Management) or log analytics tool available to perform log correlation and analysis? Yes
Are backups made to recover lost data of a certain age? Are backups made to recover lost data of a certain age? NoAre backups made to recover lost data of a certain age? Yes	Are backups outsourced to a different location? Are backups outsourced to a different location? NoAre backups outsourced to a different location? Yes
Does it cover both the data itself and the configuration data, services, applications, equipment, or others of a similar nature from all systems or data sets? Does it cover both the data itself and the configuration data, services, applications, equipment, or others of a similar nature from all systems or data sets? NoDoes it cover both the data itself and the configuration data, services, applications, equipment, or others of a similar nature from all systems or data sets? Yes
Is cryptography used to encrypt information both at rest and in transit? Is cryptography used to encrypt information both at rest and in transit? NoIs cryptography used to encrypt information both at rest and in transit? Yes	Are recovery tests carried out from the backup copies made? Are recovery tests carried out from the backup copies made? NoAre recovery tests carried out from the backup copies made? Yes
Are the performance of these recovery tests and the incidents identified documented (or is there a record? Are the performance of these recovery tests and the incidents identified documented (or is there a record? NoAre the performance of these recovery tests and the incidents identified documented (or is there a record? Yes
Do backups enjoy the same security as the original data, both in terms of access, storage, and transport? Do backups enjoy the same security as the original data, both in terms of access, storage, and transport? NoDo backups enjoy the same security as the original data, both in terms of access, storage, and transport? Yes
Do backups enjoy the same security as the original data, both in terms of access, storage, and transport? Do backups enjoy the same security as the original data, both in terms of access, storage, and transport? NoDo backups enjoy the same security as the original data, both in terms of access, storage, and transport? Yes
Are backups directly accessible at the network level? Are backups directly accessible at the network level? NoAre backups directly accessible at the network level? Yes	Is a backup copy available on a media disconnected from the network? Is a backup copy available on a media disconnected from the network? NoIs a backup copy available on a media disconnected from the network? Yes

Bank Data

Name of the bank **
Bank Code **
Bank Account Number **
Bank Account Number / IBAN **
BIC or SWIFT **

Read and accept the following conditions in order to complete the approval registration

Read the document of General Conditions of Use * General Conditions of Use I have read and accept the document
Read the Deoleo Supplier Code of Conduct document * Deoleo Supplier Code of Conduct I have read and accept the document
Read the Privacy Policy document * Privacy Policy I have read and accept the document

Please attach the bank certificate

Leave this field blank

Generate a new imagePlay the audio code

Enter the code from the image