One concrete data point for the thread. One practical note: write down what you did and when, before you need it. Reconstructing a timeline from memory three months later is how people end up unable to answer the one question that would have resolved it.
Worth separating that from vendor vetting, which this thread keeps folding into the same question. They behave differently and the advice does not transfer.
Correct me if the detail matters more than I have assumed.