|
| 1 | +# Vendor Change Request Policy |
| 2 | + |
| 3 | +**1. Policy Title:** Vendor Change Request Policy |
| 4 | + |
| 5 | +**2. Version:** 1.0 |
| 6 | + |
| 7 | +**3. Effective Date:** 21.01.26 |
| 8 | + |
| 9 | +**4. Review Date:** 21.01.27 |
| 10 | + |
| 11 | +**5. Policy Owner**: Head of Procurement  |
| 12 | + |
| 13 | +**6. Policy Sponsor:** Director of Operations |
| 14 | + |
| 15 | +*** |
| 16 | + |
| 17 | +Note: Following receipt of a change request, all subsequent transactions and smart contract payments may be temporarily paused until verification is complete and the request is processed. |
| 18 | + |
| 19 | +**7. Purpose:** |
| 20 | + |
| 21 | +* This policy defines the procedures for requesting, verifying and processing changes to vendor contract details and operational arrangements after contract execution. It applies to change requests submitted by a vendor’s Authorized Signatory or Designated Representative in accordance with the Vendor Delegation of Authority Policy. The policy ensures all changes are securely verified, properly authorized, auditable, and processed in a risk-based manner. |
| 22 | + |
| 23 | +**8. Scope:** |
| 24 | + |
| 25 | +This policy applies to all vendors with active contracts and encompasses the following types of changes: |
| 26 | + |
| 27 | +* Wallet address or bank account detail changes |
| 28 | +* Whitelist or approved account/address/system updates  |
| 29 | +* Vendor entity or company detail changes (company name, registration, address, tax information) |
| 30 | +* Signatory or authorized representative changes |
| 31 | +* Commercial and operational contract changes, including: |
| 32 | + * Milestone adjustments |
| 33 | + * Milestone delivery date changes |
| 34 | + * Pricing or cost changes |
| 35 | + * Payment terms or payment triggers |
| 36 | + * Other agreed operational updates |
| 37 | + |
| 38 | +**Excluded or at Intersects discretion:** |
| 39 | + |
| 40 | +* Amendments to legal clauses |
| 41 | +* Liability or indemnity provisions |
| 42 | +* Contract term or termination rights |
| 43 | + |
| 44 | +**9. Principles:** |
| 45 | + |
| 46 | +This policy is grounded in the principles of: |
| 47 | + |
| 48 | +* **Authorization**: Only an Authorized Signatory or formally recognized Designated Representative may submit change requests. |
| 49 | +* **Verification**: All change requests must be verified before implementation. |
| 50 | +* **Security**: Additional safeguards apply to higher-risk financial changes. |
| 51 | +* **Auditability**: All change requests, approvals, and actions are logged with method, date/time and verifier retained for internal audits. |
| 52 | +* **Risk**-**Based Controls**: Verification steps are proportionate to the risk level of the requested change. |
| 53 | + |
| 54 | +**10. Definitions:** |
| 55 | + |
| 56 | +* **Authorized Signatory:** The individual who executed the vendor contract and has authority to bind the vendor. |
| 57 | +* **Authorized Representative:** An individual formally delegated authority by the Authorized Signatory under the Vendor Delegation of Authority Policy.  |
| 58 | +* **Change Request:** Any formal request submitted by a vendor to update contractual, operational or payment-related details. |
| 59 | +* **Change Request Form (CRF):** Form outlining the Vendor Change Request, signed off by the Authorized Signatory or Authorized Representative.   |
| 60 | +* **High-Risk Change**: Changes that affect financial instructions or payment destinations. |
| 61 | +* **KYC/KYB:** Know Your Customer / Know Your Business identity verification process. For more information, read the [Intersect Due Diligence Policy](https://docs.intersectmbo.org/legal/policies-and-conditions/intersect-administration-policies/due-diligence-policy). |
| 62 | +* **Enhanced Verification**: Additional checks which may include phone or video confirmation or further documentation review. |
| 63 | +* **Wallet Address:** Blockchain wallet used for receiving payments. |
| 64 | +* **Vendor Whitelist:** List of approved addresses for vendor fund withdrawals |
| 65 | +* **Verification Call:** A phone call conducted to confirm the identity and intent of the individual requesting the wallet address change. |
| 66 | + |
| 67 | +**11. Policy Statements:** |
| 68 | + |
| 69 | +* All post signed contract changes must be submitted in writing via email and fill out a Change Request Form as provided by Intersect. |
| 70 | +* Only Authorized Signatories or recognized Designated Representatives may request changes, as per the Vendor Delegation of Authority Policy. . |
| 71 | +* No change will be implemented until required verification is completed. |
| 72 | +* Requests outside delegated authority or within excluded categories require formal contract amendment. |
| 73 | +* For financial or system-related changes, Intersect may temporarily pause related payments or system actions until verification is complete. |
| 74 | +* All approved changes will be confirmed in writing and recorded for audit purposes. |
| 75 | + |
| 76 | +**12. Roles and Responsibilities** |
| 77 | + |
| 78 | +**Vendor Authorized Signatory** |
| 79 | + |
| 80 | +* Appoints and maintains Designated Representatives. |
| 81 | +* Submits or authorizes contract change requests in writing via email. |
| 82 | +* Completes Change Request Form as requested by Intersect. |
| 83 | +* Provides clarification where required. |
| 84 | + |
| 85 | +**Designated Representative** |
| 86 | + |
| 87 | +* Acts only within their delegated scope. |
| 88 | +* Submits or authorizes contract change requests in writing via email. |
| 89 | +* Completes Change Request Form as requested by Intersect. |
| 90 | +* Provides supporting documentation or verification as requested. |
| 91 | + |
| 92 | +**Intersect Procurement and Operations Team** |
| 93 | + |
| 94 | +* Provide Change Request Form once received initial Change Request. |
| 95 | +* Verify requester authority and documentation. |
| 96 | +* Apply appropriate verification measures, including conducting verification calls for high-risk change requests. |
| 97 | +* Process approved changes. |
| 98 | +* Maintain logs of all change requests, Change Request Form, verification steps, and approvals, including method, date/time and verifier. |
| 99 | +* Escalate out-of-scope requests to the Authorized Signatory. |
| 100 | + |
| 101 | +**13. Procedures** |
| 102 | + |
| 103 | +**Submission of Change Requests** |
| 104 | + |
| 105 | +* Change Request Forms must be submitted in writing via email to **procurement@intersectmbo.org** and cc in **operational-services@intersectmbo.org** |
| 106 | +* Intersect will aim to respond within 10 working days. Should no response be received, the vendor is responsible for re-submission. |
| 107 | +* Requests must clearly describe the proposed change and provide supporting documentation. |
| 108 | + |
| 109 | +**Verification** |
| 110 | + |
| 111 | +Intersect verifies: |
| 112 | + |
| 113 | +* The vendor’s KYB records on file. |
| 114 | +* The requester’s authority under the Vendor Delegation of Authority records. |
| 115 | +* Supporting documentation for the requested change. |
| 116 | +* For higher-risk changes, Intersect will require the requesting individual to complete KYC and may perform enhanced identity verification, including direct confirmation through a verification call or equivalent control. KYC of the requesting individual is only required for high-risk changes. |
| 117 | + |
| 118 | +**Processing** |
| 119 | + |
| 120 | +* Verified change requests are processed by Intersect. |
| 121 | +* Out-of-scope or excluded changes are escalated for formal contract amendment. |
| 122 | +* Approved changes are implemented and confirmed in writing and logged by Intersect. |
| 123 | +* Where changes affect payments, Intersect may temporarily pause payments until verification is complete. Intersect reserves the right to pause payments for any change within the scope of this policy. |
| 124 | + |
| 125 | +**14. Verification Guidelines\*** |
| 126 | + |
| 127 | +Guidelines are discretionary, but typical verification illustrated below.  |
| 128 | + |
| 129 | +| **Change Category** | **Verification Required** | **Notes** | |
| 130 | +| --------------------------------------------- | ------------------------------------------------------------------ | ------------------------------------------------------------------ | |
| 131 | +| Wallet / Bank Account Detail Changes | KYB on file + KYC of requesting individual + enhanced verification | High-risk - financial instructions updated only after verification | |
| 132 | +| Whitelist / Approved Account / System Updates | KYB on file + KYC of requesting individual + enhanced verification | High-risk | |
| 133 | +| Replacement of Authorized Signatory | KYB on file + KYC of requesting individual + enhanced verification | Critical - authority records updated immediately | |
| 134 | +| Entity / Company Detail Changes | New KYB + documentation review | Additional verification if needed | |
| 135 | +| Commercial / Operational Contract Changes | KYB on file + authority verification of requester | Must fall within delegated scope | |
| 136 | +| Other Agreed Operational Updates | KYB on file + documentation review | Risk-based discretion | |
| 137 | + |
| 138 | +\*KYC is to prove legitimacy of the individual, not necessarily personal background checks. |
| 139 | + |
| 140 | +**15. Monitoring and Compliance:** |
| 141 | + |
| 142 | +* All change requests and approvals must be securely retained, including verification steps. |
| 143 | +* Unauthorized or unverified requests will be rejected. |
| 144 | +* Repeated non-compliance may result in delayed processing or contractual remedies. |
| 145 | + |
| 146 | +**16. Review and Amendment** |
| 147 | + |
| 148 | +This policy will be reviewed annually by the Policy Owner or earlier if required by operational, contractual, or regulatory changes. Amendments require approval from the Policy Sponsor. |
| 149 | + |
| 150 | +**17. Related Documents / References** |
| 151 | + |
| 152 | +* Vendor Delegation of Authority Policy |
| 153 | +* Delegation of Authority Form  |
| 154 | +* [Intersect Due Diligence Policy](https://docs.intersectmbo.org/legal/policies-and-conditions/intersect-administration-policies/due-diligence-policy) |
0 commit comments