Vendor Risk
Manage third-party AI vendors with risk assessment, contract lifecycle tracking, and due diligence documentation. Maintain a complete registry of every AI vendor your organization relies on.
Vendor Risk Levels
Each vendor is assigned a risk level based on the criticality of the AI services they provide. Risk level determines review frequency and due diligence requirements.
Critical
Core AI infrastructure, irreplaceable
High
Significant dependency, limited alternatives
Medium
Moderate dependency, alternatives exist
Low
Minimal dependency, easily replaceable
Vendor Status Workflow
Vendors progress through a review and approval workflow before being cleared for use.
Vendor Record
Each vendor record captures the information needed for risk management and contract oversight.
Company Details
- ›Vendor name and website
- ›Primary contact
- ›Country and jurisdiction
- ›Services provided
Risk & Compliance
- ›Risk level (Critical/High/Medium/Low)
- ›CCPA compliant flag
- ›Subprocessors list
- ›DPO Central vendor cross-reference
Contract
- ›Contract start and expiry dates
- ›Renewal alerts
- ›Contract value
- ›SLA terms
Assessments
- ›Vendor risk assessments
- ›Due diligence documentation
- ›Review schedule
- ›Findings and remediation
AI Vendor CatalogPremium
The AI Vendor Catalog (powered by Vendor.Watch) provides a pre-audited database of AI vendors. Search the catalog, view vendor profiles, and add vendors directly to your registry with auto-filled details.
Search & Browse
Search by vendor name or browse by category. Each catalog entry includes a description, website, and compliance flags.
Auto-fill
When adding a vendor from the catalog, the form is auto-filled with the vendor's details — saving time and ensuring accuracy.
Register as AI System
Optionally register the vendor's product as an AI system in your registry at the same time, linking the vendor and system records.
Adding a Vendor
AI OfficerNavigate to Vendors
Go to Operations → Vendors from the top navigation.
AI OfficerClick Add Vendor
Use the button in the top-right corner. Optionally search the AI Vendor Catalog to auto-fill details.
AI OfficerComplete vendor details
Enter the vendor name, website, contact, services, and assign a risk level.
AI OfficerAdd contract information
Document contract dates, renewal terms, and SLA details.
AI OfficerSchedule risk assessments
From the vendor detail page, create vendor risk assessments and set review schedules.