Skip to main content
VendexLabs is a vendor risk registry for security and compliance teams. One place to inventory vendors, record approval decisions with a full audit log, attach evidence, get renewal reminders, and triage incidents affecting vendors you track. The core idea is simple: import your vendor list and your program exists by lunch. VendexLabs pairs cited public-source research with the context you add (dependency tier, data collected, use case) to help you start reviews faster. You make the decision; Vendex records the history. VendexLabs dashboard showing tier-weighted score, approvals, active tasks, assessment status, and score trend

Start here

Quickstart

Go from an empty account to a scored, tracked vendor portfolio in a few minutes.

How VendexLabs works

The moving parts — vendors, tiers, scoring, and assessments — and how they fit together.

Run an assessment

Record a compliance decision, set an approval status, and attach evidence.

Security & Trust

How VendexLabs protects your data, and how we handle privacy and compliance.

What you can do

Inventory every vendor

Add vendors one at a time or import a whole list by CSV. New vendors are automatically enriched from public sources.

Research context across five domains

Cited public-source research to start your review — compliance, privacy, breach history, and more.

Track approvals over time

Every vendor moves through a clear approval lifecycle with a full audit log of who changed what.

Monitor incidents

When a vendor shows up in the news for a breach or vulnerability, it lands in your triage queue, ranked by severity.

Enrich on import

Add a vendor and get cited research across security and privacy — a starting point for your review, not a verdict.

Collect answers from vendors

Send a secure, self-service questionnaire; vendors verify by one-time code and upload evidence directly.

For developers

VendexLabs is API-first. Everything in the product — vendors, lists, assessments, and portfolio metrics — is available over a REST API secured with your organization’s tokens.

API reference

Authentication, endpoints, roles, and data models for building on top of VendexLabs.
Not sure where to begin? If you manage a vendor program, start with the Quickstart. If you’re integrating VendexLabs with your own systems, jump to the API introduction.