Vendor Risk 360

Vendor Risk 360

Vendor Risk 360 takes suppliers and service providers from onboarding to offboarding: tiering, control assessment, findings, evidence, contracts and periodic reviews in one supplier file – for information security, procurement, privacy and compliance teams. Scores and tiers are transparent decision aids; the decision stays with you.

FEATURES
• Tier 1–4 from four profile questions (data access, connectivity, outage impact, replaceability) with the points calculation shown and a review cycle per tier
• Control assessments with 26 controls in 10 domains and four templates (baseline security, privacy, business continuity, cloud/SaaS); custom control catalogs supported
• Residual risk with a disclosed formula combining control effectiveness, open findings, expired evidence and contract coverage
• Dashboard with a tier × residual risk heatmap, portfolio index, “Important now” and the metrics MTTC, SLA compliance and assessment coverage
• Findings with SLAs by severity (30/60/90/180 days), remediation with progress and verification by another person; risk acceptance limited to 12 months
• Evidence in 10 types (including ISO 27001 certificate, SOC 2 report, pentest, insurance) with request, receipt, acceptance or rejection, validity and a reminder before expiry; files and photos encrypted with a SHA-256 checksum
• Contracts with required clauses derived from the profile (e.g. DPA, breach notification, audit rights, exit plan), clause coverage in percent and notice-period alerts
• Reviews with the decision continue, continue with conditions, restrict or terminate; four-eyes approval for tier 1 and an offboarding checklist with deletion confirmation
• Supplier file as PDF, ZIP or JSON with masking of sensitive fields, seven CSV lists and an export manifest with SHA-256
• Four roles with a PIN per person and an audit log kept as a hash chain, verifiable in the app

LOCAL AND PRIVATE
All data stays on your device – no account, no login, no server, no tracking. You share encrypted backups and encrypted exchange packages for single suppliers yourself.

SUBSCRIPTION
Free: up to three active suppliers with all features; demo data does not count, and reading, export, backup and deletion always stay free. The monthly subscription unlocks unlimited suppliers. It renews automatically and can be canceled at any time in your store settings.

Privacy Policy: https://tonke.de/data-protection-en.html