Vendor vetting and third-party risk management software for lenders
Lenders have to show that the vendors they rely on are vetted and stay that way. We build and run vendor prequalification and third-party risk platforms: scored questionnaires, document collection, vendor profiles that keep every change, recertification reminders and portals for both sides. i4 Strategies, which vets suppliers for large real-estate firms, has run its program on a platform we built for four years.
The Problem
What gets in the way
Questionnaires and certificates arrive by email
Suppliers send PDFs back and forth, and someone has to read, check and file each one.
Scoring lives in spreadsheets
Safety, insurance, financial and compliance scores are calculated by hand, and reviewers score the same answer differently.
Certificates lapse between reviews
Insurance and certifications expire quietly, and buyers find out after a problem.
Examiners ask how a vendor was approved
Regulators expect lenders to show how each third party was checked, and the answer is spread across emails and files.
Generic tools do not fit specialist programs
Large GRC products follow their own model, and specialist scoring and review steps end up outside them.
What We Build
What we build and run for you
Scored prequalification questionnaires
Online questionnaires scored automatically against your criteria, with optional card payment for each submission.
Supplier profiles that keep every change
Every answer and document is versioned, so you can show what a supplier declared and when.
Document collection and checks
Insurance certificates, licenses and policies uploaded, checked and tracked against their expiry dates.
Recertification cycles
Reminders by email and text before certifications expire, with status tracked for every supplier.
Buyer and supplier portals
Suppliers manage their own profile. Buyers see who is approved and why.
Connections to your other tools
Integration with GRC platforms, data providers and the systems your buyers already use.
AI Engineering
AI for the documents suppliers send
Uploaded certificates and policies are read automatically: insurer, coverage, dates and named parties are extracted and compared with what the supplier declared in the questionnaire. Mismatches and expiring documents are flagged for a reviewer.
About our AI engineeringSecurity
Tested with Securetom before it goes live
Before a system goes live, we can test it with Securetom, the AI security product we built. You get the findings and the fixes before launch.
How we test what we buildHow It Works
From first call to running every day
- 1
Write down your program
We document your questionnaires, scoring rules, review steps and recertification cycle.
- 2
Build the platform
Questionnaires, scoring, profiles and portals, built to match how your program works.
- 3
Run it
We host, monitor, support and update it as your criteria change.
- 4
Extend it
Add ongoing monitoring, new data sources or new programs on the same platform.
Vendor vetting and TPRM: common questions
Those are good products for standard programs. We build when your scoring, review steps or data model do not fit them, and we can connect to them where you already use them.
Yes. Every answer, document and score is versioned, so you can show what a vendor declared, who reviewed it and when it was approved, at any point in time.
Yes. Card payment can be required for each submission, as it is on the platform we run for i4 Strategies.
Yes. Expiry dates are tracked automatically, and we can add checks against outside data sources between recertification cycles.
You do. The platform runs in your environment, and the data and code belong to you.
It depends on the size of your program. A first version covering questionnaires, scoring and supplier profiles is usually live within a few weeks.
Yes. Our free Exclusion Check searches up to 25 company or person names against SAM.gov exclusions, the OIG exclusion list and the OFAC SDN list. In a platform we build for you, the same checks run on every new supplier and again at recertification.
Open the Exclusion CheckTell us which workflow is slowing your team down.
Send a short note or book a call with an engineer. We will look at your systems and tell you whether we can help.
Vendor Prequalification and Recertification Checklist
Profiles and documents, a scored prequalification questionnaire, insurance, safety and financial checks, recertification and expiry tracking, audit history, and buyer and supplier access. Built from what a vendor-vetting platform has to cover, based on our work on i4 Strategies' prequalification platform. The items are general requirements.
We will send it to your inbox. No spam.
Or tell us what you're working on
Prefer to talk?
Book a Meeting
