Due-diligence material can include commercial proposals, service terms, SLA information, data-processing documentation, security and hosting information and relevant assurance evidence. The exact pack should reflect the procurement process.