Send a questionnaire scaled to the tier, collect answers with documents attached, and keep the whole exchange in one place. Re-assessment is scheduled rather than remembered, and a finding raised against a vendor goes into the same lifecycle as your own.
Most third-party programmes fail at the same point: the vendor will not use your tool. The portal needs no account with us, no licence and no training.
A link, a deadline and a form. The vendor answers, attaches the document and submits. Nothing to buy, nothing to install.
A critical vendor and a stationery supplier do not get the same form. Templates per tier, with evidence required against the answers that need it.
A yes with a certificate attached and a yes on its own are different claims, and the platform keeps them different.
Set a cadence per tier and the next cycle opens itself, carrying the previous answers forward so the vendor confirms or changes rather than retyping.
A gap found in an assessment becomes a finding with an owner and a due date, in the same lifecycle as everything else, instead of a note in a document.
Who asked, who answered, what was attached and when. Available to your auditor without anyone assembling it afterwards.
No. They receive a link, answer in the browser and attach documents. Nothing is bought or installed on their side, which is the only version of this that gets completed.
Yes. Templates are yours to define, and you can keep the wording your legal team already approved rather than adopting ours.
The assessment stays open and visibly overdue, and the reminder schedule is part of the template. Silence shows up as silence rather than as a gap in the register.
A working demo with your data shape, not a slide deck.