Welcome to Vendorpedia

Manage the vendor lifecycle, from selection to onboarding and through to supplier termination. Identify bottlenecks and use assessment automation technology to perform faster due diligence, speeding up procurement to get your team the tools they need to succeed, without sacrificing security or compliance.

Vendorpedia is powered by OneTrust DataGuidance intelligence to offer regulatory, security, privacy, and third-party risk research from over 50 in-house researchers and a global network of 500 lawyers. Research your vendors with a database of aggregated vendor information from public and private sources to understand the state of your vendors’ security, privacy, and compliance programs.

Maintain a watchful eye on all your vendors to identify critical risk and performance changes that occur over time. Get notified and automate actions when changes that affect security, privacy, compliance, and performance arise. With Vendorpedia, you can monitor vendor breaches; regulatory enforcement actions; security certification lapses; SLA performance; 4th-party changes; controls; contract expirations; internal use case changes; and much more. And when these events occur, leverage configurable automation workflows to rapidly respond.

Build an inventory of every vendor, with the granularity to track the information you care about most, all while maintaining records for compliance for every product, service, contract, and supplier engagement. Extract and monitor key contract terms and SLAs, as well as keep your vendor inventory up to date.

Streamline communication across teams with roles-based access controls for third-party risk, infosec, procurement, sourcing, IT, and privacy professionals. Automate task delegation, track activity to maintain audit trails, and configure automation rules to develop systematic processes, as well as increase accountability across your team.

Personalize your risk scoring framework to track inherent and residual risks. Using Vendorpedia, you can flag risks automatically with intelligent assessments and kick off repeatable risk treatment workflows that align to goals. When a risk emerges, take necessary actions, such as accepting the risk, making mitigation recommendations, or assigning controls. Lastly, track risks in a central register to identify risky vendors and prioritize treatment.