Vendor Risk Software
RiskDossier™ Features
RiskDossier™ is not another tool to add to the pile of Word documents, spreadsheets and Power Apps – it completely replaces them with an automated, formalised process.
Our vendor risk management software delivers end-to-end, scrupulous vendor due diligence, undertaking all of the hard work for you.
Automated Screening
Red Flag Screening
RiskDossier™ runs searches against suppliers and identifies any problematic occurrences. It can check: sanctions, political exposure, active enforcements, financial crime or regulatory actions, adverse media and watchlist membership (including relationship or association exposure).
Sanctions and politically exposed person (PEP) screening matches suppliers and their directors against consolidated global sanctions lists, watchlists and other PEP data. This is updated daily, and reported and scored monthly. It includes details about why an entity was flagged. Meanwhile, external risk scanning checks a supplier’s domain and assigns it a score, giving an early read on the strength of their IT setup.
Expert-Built Cyber Questionnaires
RiskDossier™ comes with ready-made questionnaires written by our own IT and security specialists. They ask suppliers the questions that matter for standards such as ISO 27001, Cyber Essentials and UK GDPR, so you can screen vendors properly from day one without having to design the questions yourself. Use them as they are, or cherry-pick what you need and remove the rest.
Customisable Compliance Checks
Decide what your suppliers must prove: an ISO 27001 certificate, a signed data processing agreement, insurance cover, or anything else that matters to your business. RiskDossier™ tracks every requirement for every supplier, matches it to the evidence they upload and the answers they give, and reminds you when a review is due.
Every status is evidenced and recorded, so you can always show what was checked, when, and by whom.
Automated Questionnaire Handling
The platform automatically sends due diligence questionnaires to suppliers and tracks their responses. With documents held on a single vendor risk software platform – and not shuffled back and forth between stakeholders – completion, assessment and sign-off all occur in one manageable location.
Automatic Risk Register
With RiskDossier™, risks log themselves. A screening match, a worrying questionnaire answer, an expired certificate, a risky contract clause: each one is raised in your risk register the moment it’s found, already linked to the vendor and the evidence behind it.
Spotted something yourself? Raise a risk manually and it sits alongside the automatic ones. Every risk has an owner, a rating and a review date; attach evidence, record controls and send actions straight to the vendor. Accept it, treat it or close it. The audit trail takes care of itself.
Risk Scoring & Intelligence
Risk scoring is automated based on an aggregate of settings that include questionnaire responses, jurisdiction rules, engagement rules, vendor categories, screening outcomes and contract rules. All feed into RiskDossier™, which consolidates whatever questions a business needs to ask a vendor into a single final report. The review stage returns a pass/fail screening outcome that informs the decision to proceed with a vendor.
Risk scoring
Daleside Utilities
High risk
Overall rating from 6 inputs
- Questionnaire responsesLow
- Jurisdiction rulesMedium
- Engagement rulesLow
- Vendor categoryHigh
- Screening outcomeLow
- Contract rulesLow
Ongoing Risk & Contract Tracking
From there, ongoing risk is tracked per vendor – whether a business or an individual – via a risk register that captures decisions made through the automated process. Screening is re-run routinely once a vendor’s risk profile is established. Contracts, agreements or statements of work can then be created and tracked against that vendor within the platform, with associated risk or value-at-risk logged against the initial screening.
Book a Demonstration
Find out more about RiskDossier™ now by requesting a demo. Or meet our compliance management software team.
