Platform · Third-Party Risk
Vendor risk that runs on evidence, not email
Two hundred vendors and one inbox is not a methodology. Assessments run through a portal, score themselves, and never go stale.
Tiered register, campaign sends
Criticality-tiered vendor register. Campaigns send questionnaires to whole segments through a vendor portal, not a mailbox.
AI drafts the first pass
Vendors upload their documents and the AI drafts cited first-pass answers. Your reviewers review; they do not retype.
Scores that update themselves
Completed assessments score each vendor and update the register automatically. Expired vendor evidence flags itself. Periodic reassessment runs on a cadence.
Questionnaire assist, cited, scored, reviewable
Q: How is access to production systems reviewed?
Access to production systems is reviewed quarterly by the platform owner, with results recorded and exceptions remediated within 30 days.
The audit trail records what was proposed, what was accepted, and by whom.
Illustrative, computed live per tenant in the platform.
Frequently asked questions
How are vendors scored?
Completed assessments score against your questionnaire's scoring model and update the vendor's entry in the criticality-tiered register automatically. Expired vendor evidence degrades the score until it is renewed.
Can vendors respond without buying anything?
Yes. Vendors respond through the portal at no cost to them. They upload documents, answer the questionnaire and track their own submissions.