Establish and Document the Application's Vendor Information — Where Applicable - Application Management Best Practices
Establish and Document the Application's Vendor Information — Where Applicable
(Chapter 118 of Application Management Best Practices)
Executive Summary: Chapter Overview
IF4ITThe Bottom Line
Core Concepts
| Concept | Definition & Strategic Role |
|---|---|
| Vendor Applicability | The condition that triggers the vendor section: a vendor creates, hosts, operates, supports, or provides components or services for the Application, as with Vendor or Composite Sourcing Types or SaaS or Hosted Hosting Models. Without a vendor, the section is marked not applicable. |
| Vendor Information Set | The facts established for each vendor: its name and role, primary contact, internal relationship manager, governing contracts, licenses, and service level agreements with key dates, support entitlements, Release and upgrade cadence, and any other required information such as security assessments. |
| Vendor Record Linking | Linking the Application’s vendor section to the vendor’s record in the enterprise’s vendor inventory, and recording required vendor attributes in the Application Record. This reveals how dependent the enterprise is on each vendor across all its Applications. |
Quick Q&A
Question: Which vendor details must be documented for an Application that relies on a vendor?
Question: When must an Application's vendor information be reviewed?
Read More Below
This chapter explains how to establish and document information about the vendors involved with an Application, where any are involved.
When Vendor Information Applies
Vendor information applies whenever a vendor creates, hosts, operates, supports, or provides components or services for the Application, for example when its Sourcing Type is Vendor or Composite, when its Hosting Model is SaaS or Hosted, or when vendors provide significant components, development, or support. Where no vendor is involved, the vendor section of the Application Documentation is marked as not applicable.
Establish the Vendor Information
For each vendor involved with the Application, establish:
The vendor’s name, and its role with respect to the Application, such as product provider, host, developer, or support provider.
The vendor’s primary contact, and that contact’s details.
The enterprise’s internal relationship manager for the vendor, where one exists.
The contracts, licenses, and service level agreements that govern the relationship, with their key dates.
How to obtain vendor support, and what support the enterprise is entitled to.
The vendor’s Release and upgrade cadence, and how the enterprise is notified of changes.
Any other information the enterprise requires, such as security assessments of the vendor or its continuity commitments.
Document and Share the Vendor Information
Record the vendor information in the conditional vendor section of the Application Documentation, linked to the vendor’s record in the enterprise’s vendor inventory, and record in the Application Record any vendor attributes it requires. Review it with every Release and whenever contracts or contacts change.
Best Practice: Establish and Document the Application’s Vendor Information Where Applicable
It is a best practice to both establish and document the solution for an Application’s vendor relationships, wherever vendors are involved: record each vendor’s role, contacts, contracts, support entitlements, and Release cadence, and link to the enterprise’s vendor records.
Benefits: Documented vendor information lets support teams engage the vendor immediately during incidents, and lets owners manage renewals, upgrades, and vendor risk proactively. Linking to enterprise vendor records reveals how dependent the enterprise is on each vendor across all its Applications.
Connections to Related IF4IT Practices and Inventories
The Vendors Inventory and Attributes describes how vendors are recorded. The Application Portfolio Management (APM) Best Practices addresses maintaining a complete inventory of all application vendors and license agreements and assessing vendor health and viability.
How to cite this page
When referencing this page in academic work, internal standards, or external publications, include the page title, IF4IT as author and publisher (The International Foundation for Information Technology (IF4IT), LLC), the URL, and your access date.
Example (informal web citation):
The International Foundation for Information Technology (IF4IT), LLC. Establish and Document the Application's Vendor Information — Where Applicable | Application Management Best Practices. https://if4it.org/best-practices/application-management-best-practices/establish-and-document-the-application-s-vendor-information-where-applicable/ (accessed 2026-10-31).
See About Us for content governance and site-wide citation guidance.
Copyright for The International Foundation for Information Technology (IF4IT), LLC: 2008 - Present
Legal Disclaimers