Third party compliance oversight

Vendor oversight from intake through periodic review.

Maintain a vendor inventory with due diligence, risk classification, contracts, privacy and cybersecurity compliance documentation, AI vendor identification, issues, remediation and annual reviews.

What you can do

  • Vendor inventory with service, data access and risk classification
  • Due diligence with privacy, cybersecurity compliance and AI reviews
  • Contracts, insurance and compliance documentation stored as evidence
  • Issues that create linked remediation records
  • Review schedules, renewals, annual reviews and offboarding

Operational workflow

  1. 1Vendor request
  2. 2Initial intake
  3. 3Determine service and data access
  4. 4Assign risk level
  5. 5Due diligence
  6. 6Privacy review
  7. 7Cybersecurity compliance documentation review
  8. 8AI review if applicable
  9. 9Identify issues
  10. 10Remediation if required
  11. 11Approval
  12. 12Active vendor
  13. 13Periodic review
  14. 14Renewal
  15. 15Termination or offboarding