Here are some resources to help you with your TRA submission.
Link to Western University's MAPP website:
Link to Western University's Data Classification information:
Example of Privacy Schedule (this document is typically appended or integrated into the proposed vendor contract, so please feel free to supply to your vendor from the outset of the discussions):
Document for assessing cloud-based applications with eCommerce components
and maintained in Cascade CMS.