SSO, questionnaires, AI comments & granular alerts
Single sign-on, questionnaires, and smarter alerts
- Single sign-on — sign in with Google or Microsoft (Entra ID) via OIDC; enterprise SSO available by request. See Sign in & SSO.
- Vendor questionnaire portal — collect answers and evidence directly from vendors through a secure, one-time-code portal. See Vendor questionnaires.
- AI assessment comments — draft security and compliance review comments from a vendor’s evidence, with suggested open items to verify. See AI-powered enrichment.
- Granular alerts — an alert-criteria matrix routes each event type to the right recipients. See Settings & notifications.
- Data deletion & export on request — self-serve pathways clarified in Privacy.
Assessment tracking
Assessment tracking
A full assessment lifecycle: record business context, data handling, and compliance decisions with statuses (Not Started, In Progress, On Hold, Conditional Approval, Approved, Rejected), attach evidence documents, and keep an event-level approval audit log. Renew approvals as review dates approach. See Assessments.GRC scoring & posture history
GRC scoring and posture history
Vendor scoring across five trust domains (Compliance, Privacy, Breach & threat, Operational maturity, Business & financial), with integration-depth adjustment and floor rules that shape the recommendation. Monthly snapshots power vendor and portfolio score trends. See Risk scoring.Products & dependency tiers
Product lines and dependency tiers
Track individual products under a vendor, and classify vendors by dependency tier (Core, Standard, Minimal) to weight your portfolio posture. See Vendors & products and Dependency tiers.CSV import & vendor enrichment
CSV import and automatic enrichment
Import an entire vendor list from CSV with dry-run validation, and get automatic enrichment and a first risk score for custom vendors from public sources. See Add & import vendors.Incident monitoring