Vendor Risk

Manage third-party AI vendors with risk assessment, contract lifecycle tracking, and due diligence documentation. Maintain a complete registry of every AI vendor your organization relies on.

Vendor Risk Levels

Each vendor is assigned a risk level based on the criticality of the AI services they provide. Risk level determines review frequency and due diligence requirements.

Critical

Core AI infrastructure, irreplaceable

High

Significant dependency, limited alternatives

Medium

Moderate dependency, alternatives exist

Low

Minimal dependency, easily replaceable

Vendor Status Workflow

Vendors progress through a review and approval workflow before being cleared for use.

Under Review
Active
Approved
Suspended
Terminated

Vendor Record

Each vendor record captures the information needed for risk management and contract oversight.

Company Details

  • Vendor name and website
  • Primary contact
  • Country and jurisdiction
  • Services provided

Risk & Compliance

  • Risk level (Critical/High/Medium/Low)
  • CCPA compliant flag
  • Subprocessors list
  • DPO Central vendor cross-reference

Contract

  • Contract start and expiry dates
  • Renewal alerts
  • Contract value
  • SLA terms

Assessments

  • Vendor risk assessments
  • Due diligence documentation
  • Review schedule
  • Findings and remediation

AI Vendor CatalogPremium

The AI Vendor Catalog (powered by Vendor.Watch) provides a pre-audited database of AI vendors. Search the catalog, view vendor profiles, and add vendors directly to your registry with auto-filled details.

Search & Browse

Search by vendor name or browse by category. Each catalog entry includes a description, website, and compliance flags.

Auto-fill

When adding a vendor from the catalog, the form is auto-filled with the vendor's details — saving time and ensuring accuracy.

Register as AI System

Optionally register the vendor's product as an AI system in your registry at the same time, linking the vendor and system records.

Adding a Vendor

1

AI OfficerNavigate to Vendors

Go to Operations → Vendors from the top navigation.

2

AI OfficerClick Add Vendor

Use the button in the top-right corner. Optionally search the AI Vendor Catalog to auto-fill details.

3

AI OfficerComplete vendor details

Enter the vendor name, website, contact, services, and assign a risk level.

4

AI OfficerAdd contract information

Document contract dates, renewal terms, and SLA details.

5

AI OfficerSchedule risk assessments

From the vendor detail page, create vendor risk assessments and set review schedules.