AboutWhat's newContact & demo
Third-Party Risk ManagementAvailable now

Choose vendors on evidence, not instinct.

Create a business opportunity, add the competing vendors and compare them across weighted sections, with clarifying Q&A, AI adequacy checks and a recorded, approved decision.

Illustration with sample data

Overview

What Vendor Due Diligence does

Due Diligence starts before a contract exists. A business opportunity holds one or more due diligence records with their candidate vendors. Questions can be answered internally, looked up, or shared with the vendor through a secure questionnaire link, depending on a per-record switch. Assessors can ask the vendor for clarification.

AI checks whether answers are adequate and offers a vendor comparison, both advisory. Sections are weighted to total 100%. The decision goes through multi-level approval in Pending Approvals, and approved vendors appear in the Approved Third Parties list.

Leadership team meeting around a table
Capabilities

Key capabilities

01

Opportunity-based

Business opportunities hold one or more due diligence records.

02

Weighted sections

Weights total 100% and can be configured in settings.

03

Vendor or internal answers

Share a secure link or answer internally; a per-record switch decides.

04

Clarifying Q&A

Ask vendors for clarification alongside the scores.

05

AI adequacy & comparison

Advisory checks and a side-by-side comparison.

06

Multi-level approval

Approved decisions feed the Approved Third Parties list.

Benefits

The business case.

Efficiency, multi-framework alignment, reduced complexity and streamlined processes: what Vendor Due Diligence changes for your programme.

Risk reduction
Risk priced in

Before contract signature

Security, legal and financial risk inform selection, not just onboarding.

Potential savings
>60%

Faster vendor selection

Structured comparison replaces email threads and scattered spreadsheets.

Achieving compliance
Documented rationale

Defensible procurement

A recorded, approved decision supports procurement policy and audits.

Streamlined processes
Shared channel

Fewer back-and-forths

Questions and answers live alongside the scores.

Efficiency figures compare the effort of each workflow cycle in RiskVantis with the same work done manually or in a traditional GRC tool. Your result depends on your starting point; we will model it with you in a demo.

How it works

From setup to outcome.

Create the opportunity

Describe the business need.

Add candidate vendors

Invite each vendor or answer internally.

Assess and clarify

Score weighted sections; ask questions; review AI checks.

Decide

Compare and send the decision for approval.

Framework alignment

Supports your obligations.

Vendor Due Diligence contributes evidence and coverage to these frameworks and regulations.

ISO/IEC 27001:2022 (A.5.19, A.5.20)NIS2 (Art. 21)SOC 2 (CC9.2)

All supported frameworks

FAQ

Common questions.

Do vendors have to answer?

No. A per-record switch decides whether the questionnaire is sent to the vendor or answered internally.

Does AI pick the vendor?

No. AI adequacy checks and comparisons are advisory. The decision is made by people and approved.

Can section weights be changed?

Yes, as long as they total 100%.

See Vendor Due Diligence in action.

Book a 30-minute walkthrough tailored to your frameworks, vendors and team.