Handles a vendor or purchase request at the front door: capture the underlying need rather than the named product, classify data exposure and business criticality into a risk tier using a fixed table, and list the reviews each tier requires before any evaluation or commercial conversation begins. Use when someone asks to buy, trial, renew or expand a third-party product or service, and when a request has already reached legal or security without being triaged. Trigger on 'we want to buy X', 'can we get a licence for X', 'vendor request', 'someone started a trial of X', 'does this need a security review', 'what checks does this supplier need', 'renewal is coming up'. Not f…
