Skip to main content

Add and manage vendors

Where: Trust Management → Vendors, or open Vendors.

Who: admins, or members whose department has access to the Vendor Management module.

The Vendors page is the register of every third party with access to your systems or data. It is separate from Third Parties under Third-Party Risk Management, which is where you send security questionnaires. To add a third party for questionnaires, see Add a third party.

Add a vendor​

  1. Click Add vendor.
  2. Enter the Vendor name and the Vendor website.
  3. Pick a category. To use a new one, type its name in the category picker and select it.
  4. Click Add vendor.

The vendor joins the register as unscored. Score its inherent risk and open an assessment from its profile.

Assign owners​

Each vendor has a Business owner and a Security owner. Set them in the register. A vendor with either one blank is flagged as unassigned until both are set.

Find a vendor​

  • Use Search vendors to search the register.
  • The tabs are Active, Archived, All and Discovered.

Archive or restore a vendor​

Archiving moves the vendor to the Archived tab and stops it appearing in assessment reminders. You can restore it at any time.

  1. Open the vendor and click Archive vendor, then confirm Archive vendor?.
  2. To bring it back, open the Archived tab and click Restore.

Delete a vendor​

  1. Open the vendor from the register to see its profile.
  2. Click Delete vendor.
  3. Confirm Delete vendor?. This action cannot be undone, so use Archive vendor if you may need the vendor again.

Add a discovered app​

Apps your team signs in to with Google Workspace or Office 365 appear on the Discovered tab after the next scan.

  • Click Add to register and confirm the vendor's details to move it into the register.
  • Click Dismiss to hide it. It is not deleted and will not come back on later scans.