We currently use two systems to complete the scans, both of which are carried out by an independent third party: Implementation Scan: This process involves a questionnaire based on our Supplier Code of Conduct, and an onsite audit and a risk assessment.