What Vendor Risk Criteria Do You Monitor Constantly?

Most of my clients today monitor at least their key suppliers to mitigate risk. But the criteria they look at are mostly limited to the contractual ("Do I get what I pay for?") and financial ("Are they stable?") performance of those vendors in scope. While the delivery performance information comes from the SLA tracking, the financial information comes either from the supplier's balance sheet or from services firms providing such information on a subscription basis.

I am interested if you are monitoring other criteria? If yes — which ones, and how do you get the data needed for such analysis?