Your service providers lists the practices working with your organisation and the access you have granted each. Agreeing the work and granting access are separate steps: a practice reaches your records only once you authorise it.
Who can do this
Anyone in the workspace can see your service providers. Only an owner or editor can bring in a new provider or name a DPCO as your auditor.
Find it
Open Partners in the sidebar. The page is Your service providers.
At the top, it counts Open provider relationships, Current engagements with granted access and Requests awaiting your decision.
Bring in a provider
Working with a provider has three steps:
- Choose your provider: find a practice, or name your DPCO from the register. Press Find a provider to search the marketplace.
- Agree the engagement: confirm the work with the practice. It must accept the engagement.
- Grant scoped access: authorise record access separately, after the agreement.
Name a DPCO from the register
Under Bring in a DPCO, choose the Practice from the register and press Name as auditor. The practice then accepts or declines. Accepting authorises nothing. Access is still yours to grant.
Your engagements
Current and Ended list each engagement with its provider, status and authority, and the dates it was opened, authority was requested, granted and expires, and when it ended. Open an engagement to see its record.
Common questions
"Can a provider see our records once it accepts the work?" No. Record access is authorised separately, after the agreement.
"Where are reviews of providers we engaged?" On Reviews, linked from the bottom of the page.