1. Data Protection: Required when vendor processes personal data, ensuring GDPR compliance

2. Service Levels: Include when specific performance metrics and standards need to be maintained

3. Business Continuity: Required for critical vendors or services where continuity is essential

4. Change Control: Include when the scope of services may need modification during the contract term

5. Environmental Compliance: Required for vendors whose services have environmental impact

6. Anti-Bribery and Corruption: Include for international vendors or high-risk services

7. Staff and Subcontractors: Required when vendor personnel will be working on-site or when subcontracting needs to be regulated

8. Export Control: Include for international trade of goods or technology

9. Transition Services: Required for complex services requiring handover at contract end

1. Schedule 1 - Services Specification: Detailed technical specifications of goods/services

2. Schedule 2 - Pricing and Payment: Detailed pricing structure, rates, and payment terms

3. Schedule 3 - Service Levels: Specific performance metrics, KPIs, and measurement methods

4. Schedule 4 - Data Processing Agreement: GDPR-compliant data processing terms and details

5. Schedule 5 - Contact Details: Key contacts and escalation matrix for both parties

6. Schedule 6 - Approved Subcontractors: List of pre-approved subcontractors if applicable

7. Appendix A - Form of Change Order: Template for documenting agreed changes to services/scope

8. Appendix B - Security Requirements: Specific security standards and requirements to be maintained