Platform / Third-Party Risk

Every vendor,
on record.

Your risk includes the vendors that touch your data. We inventory them, assess them, and keep the register current.

How it works

Inventory,
assess, govern.

01 / Assess01 / Assess

Inventory vendors

We list the vendors that process or touch personal data.

02 / Design02 / Design

Design the assessment

A risk assessment and the contracts each vendor needs.

03 / Implement03 / Implement

Assess and contract

Vendors are assessed and the right clauses are in place.

04 / Sustain04 / Sustain

Keep it current

Re-assessment on a schedule, with the register kept live.

Talk to us

What you get

What the module
does.

Vendor register

Every third party that touches data.

Risk assessment

Assess each vendor's risk.

Contract tracking

The right clauses, on record.

Re-assessment

Scheduled reviews, not one-offs.

Evidence

Assessments ready to show.

Flags

High risk vendors surfaced.

Packages

Part of your
privacy programme.

Take Third-Party Risk on its own, or bundled with a privacy or security package.

See packages

Questions

Third-party risk, in your words.

How do we know which vendors to assess?

The register starts from your data map, so the vendors that actually touch personal data are the ones you assess first.

Does it track the contracts too?

Yes. It keeps the data processing clauses and agreements on record against each vendor.

Privacy. Security. Intelligence.

Built for trust.

Tell us what you need to prove. We reply within one working day.