> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vendexlabs.com/llms.txt
> Use this file to discover all available pages before exploring further.
# VendexLabs documentation
> Track vendors, run security and compliance assessments, and monitor your third-party risk posture from one place.
VendexLabs is a third-party risk management (TPRM) platform. It gives security, compliance, and procurement teams a single place to inventory their vendors, assess each vendor's security and privacy posture, track approvals, and watch for incidents that change the picture.
The core idea is simple: **risk is vendor posture multiplied by how you use the vendor.** A SOC 2 report tells you something about a vendor, but not how deeply that vendor sits in *your* environment. VendexLabs pairs **agent-based research** — evidence-backed vendor intelligence gathered continuously from public sources — with the context you add (dependency tier, data collected, use case) to produce a decision you can defend. It's the shift from check-the-box compliance to continuous, operational trust.
## Start here
Go from an empty account to a scored, tracked vendor portfolio in a few minutes.
The moving parts — vendors, tiers, scoring, and assessments — and how they fit together.
Record a compliance decision, set an approval status, and attach evidence.
How VendexLabs protects your data, and how we handle privacy and compliance.
## What you can do
Add vendors one at a time or import a whole list by CSV. New vendors are automatically enriched from public sources.
Compliance, privacy, breach history, operational maturity, and financial stability roll up into one aggregate score.
Every vendor moves through a clear approval lifecycle with a full audit log of who changed what.
When a vendor shows up in the news for a breach or vulnerability, it lands in your triage queue, ranked by severity.
Agent-based research builds a current, cited profile for every vendor — and can even draft your review comments.
Send a secure, self-service questionnaire; vendors verify by one-time code and upload evidence directly.
## For developers
VendexLabs is API-first. Everything in the product — vendors, lists, assessments, and portfolio metrics — is available over a REST API secured with your organization's tokens.
Authentication, endpoints, roles, and data models for building on top of VendexLabs.
Not sure where to begin? If you manage a vendor program, start with the [Quickstart](/quickstart). If you're integrating VendexLabs with your own systems, jump to the [API introduction](/api/introduction).