Know who you're trusting with your business.
Third-party risk is one of the most significant and least-managed governance challenges for SMEs. Our supplier assurance module provides structured due diligence, ongoing monitoring, and audit-ready supplier records — on subscription.
Risk Tiering Framework
Not all suppliers carry the same risk.
Suppliers with access to sensitive data or systems whose failure would cause significant business disruption. Quarterly review cycle, full due diligence.
Suppliers with material data access or significant operational dependency. Bi-annual review, targeted due diligence questionnaire.
Suppliers with limited data access or moderate operational impact. Annual review, standard due diligence.
Suppliers with no data access and low operational impact. Biennial review, lightweight assurance check.
Module Capabilities
End-to-end supplier assurance.
From initial supplier discovery through to ongoing monitoring — every stage of the supplier assurance lifecycle, managed as a subscription service.
Supplier Discovery & Tiering
Identify and classify all third-party suppliers by risk tier — critical, high, medium, and low — based on data access, business dependency, and regulatory exposure.
Due Diligence Workflows
Structured questionnaire workflows tailored to supplier risk tier. Automated chasing, response tracking, and evidence collection built in.
Contractual Obligation Tracking
Map and monitor key contractual obligations — data processing agreements, security clauses, audit rights — across your entire supplier base.
Ongoing Monitoring & Review
Scheduled review cycles for each supplier tier. Continuous monitoring for material changes, incidents, and certification lapses.
Supplier Incident Management
Structured processes for managing supplier security incidents, data breaches, and service failures — with escalation paths and regulatory notification support.
Audit-Ready Supplier Records
A complete, auditor-ready supplier assurance record for every third party — due diligence evidence, risk assessments, review history, and contractual documentation.
How It Works
From supplier inventory to ongoing assurance.
Supplier Inventory
We work with your procurement and operations teams to build a complete inventory of all third-party suppliers and service providers.
Risk Tiering
Each supplier is assessed and classified by risk tier based on data access, business criticality, and regulatory exposure.
Due Diligence
Tailored due diligence questionnaires are issued to suppliers by tier. Responses are tracked, reviewed, and stored as evidence.
Ongoing Assurance
Scheduled review cycles, continuous monitoring, and incident management keep your supplier assurance programme current and audit-ready.
What's Included
Everything your auditor will ask for.
- Complete supplier register with risk classification
- Tailored due diligence questionnaires by risk tier
- Data processing agreement (DPA) tracking
- Supplier security certification monitoring
- Contractual obligation register
- Supplier incident log and response records
- Annual review evidence and sign-off records
- Audit-ready supplier assurance pack
Ready to take control of third-party risk?
Book a consultation with our supplier assurance specialists. We'll assess your current supplier landscape and outline a clear path to structured third-party governance.