How to read your score
Each "Yes" is one documentable credential the vendor can produce and you can verify at the source — a certificate number you can look up in an issuer's directory, a certificate of insurance you can read, a sample report you can inspect. A "No" or "Not sure" isn't a verdict on the vendor; it's a prompt to request a specific document before you decide. The gaps list below your score names exactly what to ask for, line by line.
This is deliberately a credentials scorecard, not a full vendor assessment. It doesn't cover the information-security attestations a security team evaluates separately — SOC 2, ISO 27001, and the like — which belong in your standard infosec review. Within its scope, a strong ITAD provider should be able to answer every line with a document. For the reasoning behind each criterion, read the Vendor Due Diligence guide; for a vendor that can evidence all ten in one file, the Compliance & Credentials Packet is the worked example.