10000app #0046 · PMF pre-judgment 85/100 · 60 days + 150 qualified visits before a behavioral verdict

Tier the relationship.
Do not invent a vendor score.

Describe one supplier relationship using redacted business facts. The free tool exposes the access, data, criticality, resilience and contract questions that must be answered before an accountable human records a decision.

Triage one vendor 核对依据

Free · browser-only

Local vendor relationship triage

Redacted vendor labelUse a category or alias. Do not enter a legal name, URL, contract text, credentials or personal data. Accountable owner Business purpose Data exposure Technical access Business criticality Substitution / exit Subprocessors Incident notice Deletion / return Current assurance evidence Next review date

Human decision gateDESCRIBE ONE RELATIONSHIP

Declared exposure tier—

Evidence questions0

Relationship factors0/4

Review dateNOT SET

Evidence to request

Contract / owner questions

Inputs stay in this browser. The tier describes the declared relationship, not the vendor's security quality. The paid report receives only this redacted summary and consumes one review credit.

Vendor-risk boundary: this tool does not scan, monitor, audit, certify or recommend a supplier. A report, badge or questionnaire is not proof that controls operate. Procurement, security, privacy, legal and the business owner must verify scope, exceptions, contract terms and residual risk under the rules that govern the relationship.

Paid · one vendor / one credit

$5 vendor review workpaper

Spend one credit to generate an editable, redacted questionnaire, contract-question list, evidence register and human accept / remediate / decline decision record for this relationship.

Relationship tier with transparent declared factors
Scoped evidence request and vendor questionnaire
Incident, deletion, subprocessor and exit questions
Human decision, exception owner and next-review record

unlocked · secure-vendor-risk only

生成当前方案

credits available after verification

Source ledger

Due-diligence guidance and full-platform substitutes

PMF pre-judgment 85/100 · 60 days + 150 qualified visits before a behavioral verdict

NIST SP 1326 · Due Diligence AssessmentNIST frames supplier due diligence as research that supports an informed acquisition decision; it is broader than a single questionnaire or badge.NIST SP 1305 · CSF 2.0 C-SCRMOrganizations can use the CSF to operate supply-chain risk management and communicate supplier requirements.CISA · Vendor SCRM template for SMBsPrimary substitute and baseline: a free operational template aimed at small and medium businesses.Vanta · Vendor security assessmentsFull-platform substitute: questionnaires, evidence requests, collaboration, findings, recommendations and residual-risk records.UpGuard · Vendor Risk pricingEnterprise substitute: continuous monitoring, assessments, remediation and audit workflows; public pricing also shows the low-end gap this narrow workpaper tests.

Tier the relationship.Do not invent a vendor score.