Vendor information & assessment resources
Document version: 3.0
Date: 2026-10-15
Issued by: Hoodin AB
1. Purpose
This document identifies the provider of Compliance Studio and directs customers to information supporting procurement, supplier assessment and qualification.
It provides an entry point to the relevant documentation and a route for requesting clarification or supporting evidence.
2. Vendor and service identification
Item | Information |
Legal entity | Hoodin AB |
Country | Sweden |
Service | Compliance Studio |
Vendor role | Software provider responsible for developing, operating and maintaining the service within its defined scope and contractual commitments. |
Delivery model | Cloud-hosted Software as a Service, accessed through a web browser. |
Service purpose | Decision support for regulatory professionals establishing and maintaining Regulatory Positions for products and companies across markets. |
Assessment enquiries |
Legal entity identifiers and registered address details should be checked against the applicable contracting and invoicing documentation during supplier onboarding.
The service’s intended use, users and boundaries are defined in System overview & intended use.
3. Assessment resources
The following documents address complementary assessment topics.
Assessment topic | Relevant document | Information provided |
Intended use and system boundaries | System overview & intended use | Intended users, principal capabilities, appropriate reliance and responsibility allocation. |
Verification, validation and qualification | Validation approach for Compliance Studio | Assessment methods, risk proportionality, change assessment, customer responsibilities and supporting evidence. |
AI use and professional oversight | AI Literacy Statement | AI-supported functions, output limitations, competence expectations, source verification and escalation. |
Security and data handling | Security & data handling overview | Hosting, access, technical protection, third-party processing, retention, recovery and incident information within the scope described by that document. |
Personal data | Privacy Policy | Information about personal data processing and relevant contact arrangements. |
Contractual commitments | Terms and Conditions and applicable agreements | Subscription terms, responsibilities and other contractual provisions. |
Changes affecting use | Relevant release information | Changes customers may need to consider when maintaining their assessment of the service. |
Customers should record the version and date of documents used in their assessment. A reference to a document does not establish that it answers every customer-specific question.
4. Customer-specific questionnaires and supporting evidence
Customers may submit supplier questionnaires or requests for clarification to https://www.resources.hoodin.com/contact.
To support an efficient response, requests should identify:
The intended organisational use of Compliance Studio.
The relevant regulatory or quality framework.
The specific questions and evidence required.
Any required response date and confidentiality arrangements.
Responses should be assessed within their stated scope, date and any identified limitations. A general description of the service should not be interpreted as confirmation of a specific control or contractual commitment.
Requests for verification and validation evidence are handled as described in Validation approach for Compliance Studio. Supporting information may be provided through summaries, selected records or controlled review, depending on availability and applicable confidentiality, security and third-party restrictions.
5. Security, AI processing and data protection enquiries
Customer assessment may require clarification of processing locations, AI providers, data retention, model-training arrangements, access controls or deletion.
These matters should be assessed using the relevant security documentation and applicable contractual or data processing terms. They should not be inferred from the service’s SaaS delivery model, intended use or the location of its primary hosting infrastructure.
Where a data processing agreement or additional supplier information is required, customers should identify that requirement during procurement so the applicable documentation and arrangements can be established.
6. Responsibilities and contractual boundaries
Hoodin is responsible for the service within its defined scope and contractual commitments.
Customers determine whether the service, available evidence and their own procedures are sufficient for the intended organisational use. Supplier acceptance does not automatically establish suitability for every workflow or fulfil the customer’s regulatory obligations.
Pricing, subscription conditions, service levels and any additional commitments are governed by the applicable agreements. This document does not establish separate availability guarantees, response times, audit rights or compliance assurances.
For assessment-related enquiries or routing to the appropriate contact, use: https://www.resources.hoodin.com/contact
7. Document maintenance
This document is reviewed when vendor details, assessment resources or enquiry arrangements materially change.
It replaces:
Procurement & vendor information, version 1.2.
Procurement questionnaire companion, version 2.1.
References to those documents in other Compliance Studio materials should be updated to Vendor information & assessment resources.