Products · Vendor Attest

Make vendor reviews easier to track and assess.

Use Vendor Attest to collect vendor questionnaires and supporting evidence, then review the responses in one place. Invite vendors with a unique link and use the resulting report and score to inform an onboarding or annual review.

Vendor Attest flow: a client adds a vendor, the vendor logs in through a unique URL to complete SOC 2, GDPR and ISO 27001 questionnaires and upload evidence, and Vendor Attest produces a compliance report with an overall score and an approval decision

What Vendor Attest is

One structured view of every vendor relationship.

Clients register on the platform and add the vendors tied to their business — either to request a compliance assessment from a new vendor before onboarding, or to ask an existing vendor to complete an annual compliance review. Everything about that vendor then lives in one place: assessments, evidence, service details, documents, invoicing, and compliance status.

  • Pre-onboarding or annual review. Assess a new vendor before business starts, or run a recurring yearly review of the vendors you already work with.
  • Customizable questionnaires. Build from SOC 2, GDPR, ISO, and your own client-specific requirements, with requests for supporting documents or proof of implementation attached to any question.
  • A unique URL per vendor. Each vendor you add gets its own login link to complete the questionnaires and upload evidence — no account setup friction.
  • A compliance report and score. Responses and documentation roll up into a report and an overall compliance score you can compare across vendors.
  • Review and decide. Approve the vendor for business, request additional information or evidence, or take further action where the score falls short.

Illustrative sample data. Vendor names, scores, and statuses are examples.

Northwind Cloud — SOC 2approved
Acme Payroll — GDPR + ISO 27001in review
Contoso Analytics — annual reviewevidence requested
Globex Hosting — SOC 2 + customapproved
Initech BPO — pre-onboardingquestionnaire sent

How it works

From adding a vendor to an approval decision.

Register & add vendors

Create your client account and add the vendors associated with your business, tagged as a new assessment or an annual review.

Send the questionnaire

Pick the categories and standards that apply — SOC 2, GDPR, ISO, client-specific — and attach document or proof-of-implementation requests.

Vendor completes it

The vendor opens their unique URL, answers the questionnaires, and uploads supporting evidence directly against each requirement.

Score & report

Vendor Attest generates a compliance report and an overall score from the responses and documentation submitted.

Review & act

Approve for business, request more information or evidence, or escalate — with the full history kept against the vendor.

Coverage

Questionnaires across the standards that matter.

Start from a library of category templates and tailor them to your risk requirements. Every question can carry a request for a supporting document or evidence of implementation.

SOC 2 GDPR ISO 27001 ISO 27701 HIPAA PCI DSS NIST CSF CIS Controls Business continuity Data processing & sub-processors Client-specific requirements

Beyond the assessment

The rest of the vendor relationship, in one record.

Compliance is the core of Vendor Attest, but the platform also holds the operational detail that usually lives in scattered spreadsheets and inboxes.

Service details

What each vendor provides, the systems and data they touch, and the owners on both sides.

Business documents

Contracts, DPAs, certificates, and policies stored against the vendor and versioned over time.

Invoicing information

Billing and invoice records kept alongside the compliance and service history.

Compliance statistics

Scores and status across your whole vendor portfolio, so you can see where risk is concentrated.

Evidence requests

Ask for additional information or proof after review, and track what is outstanding.

Annual reviews

Schedule recurring reviews so existing vendors are re-assessed on a predictable cadence.

The compliance score

One number, backed by the evidence.

86SCORE

Vendor Attest calculates an overall compliance score from the vendor's questionnaire responses and the supporting documentation they submit. The score sits on top of the full report, so a client can review the detail behind it, compare vendors on the same basis, and decide whether to approve, ask for more, or hold.

See Vendor Attest with your vendors.

Tell us how many vendors you manage and which standards you assess against, and we'll set up a walkthrough.