The responsibility for updating data now rests with vendors, as does the provision of proof around governance and risk management requirements in terms of broad-based black economic empowerment (bbbEE), tax classification and banking details.