Search results for Veed.io

ProPortal is an online procurement purchasing portal with vendor registration.

The pliXos Tender Manager is an online service designed to streamline the tender management process for complex IT outsourcing projects. By automating key phases—from creating tender documents to evaluating bids—the platform significantly reduces both time and costs associated with procurement. Users can generate tender documents with ease, ensuring no critical questions are overlooked, and simplify the evaluation process through structured methodologies. For service providers, the system offers a transparent and equitable process, minimizing the effort required to participate in tenders. Overall, the pliXos Tender Manager enhances efficiency, promotes transparency, and delivers better results in IT outsourcing endeavors. Key Features and Functionality: - Automated Tender Document Creation: Generate comprehensive tender documents effortlessly, reducing manual effort and ensuring completeness. - Integrated NDA Process: Manage non-disclosure agreements seamlessly within the platform, maintaining confidentiality and compliance. - Centralized Contact Management: Organize and manage all supplier contacts in one place, facilitating efficient communication. - Comprehensive Question Database: Access a vast repository of standardized questions to ensure thorough and consistent tender documents. - Evaluation Tools: Utilize built-in tools to objectively assess and compare supplier responses, streamlining the decision-making process. - Multi-User Support: Collaborate with team members by assigning roles and permissions, enhancing teamwork and accountability. Primary Value and Problem Solved: The pliXos Tender Manager addresses the complexities and inefficiencies inherent in managing IT outsourcing tenders. By automating and standardizing the tendering process, it reduces project costs by up to 80% and shortens project durations by up to 60%. The platform ensures that all critical aspects of the tender are covered, minimizes the risk of overlooking important details, and provides a transparent framework for both buyers and sellers. This leads to more efficient procurement cycles, better supplier relationships, and successful project outcomes.

A professional R&D project management system.Scrum, Kanban, waterfall and hybird, all in one place.

Ubiscore is a leading provider of privacy ratings and privacy analytics for businesses. The company's mission is to help organizations of all sizes achieve their full potential by providing them with the tools and insights they need to understand and improve their privacy practices.

Respond To Security Questionnaires and RiskAssessments in Minutes. The RiskAssessmentAI platform uses Artificial Intelligence (AI) to deep search and scan your documentation, and builds a highly-accurate knowledge base. The fast, accurate and super efficient way to respond to prospect cyber security questionnaires and risk assessments.

Azanzi TPRM is a Third-Party Risk Management platform that our customers use to manage cyber security and ESG compliance in the supply chain

Qubixor is a comprehensive platform designed to help organizations assess, benchmark, and enhance their post-quantum cryptographic maturity. As quantum computing advances, traditional encryption methods face increasing vulnerabilities. Qubixor addresses this challenge by offering tools and resources that enable businesses to evaluate their readiness for the post-quantum era, compare their status with industry standards, and develop strategic migration plans. Key Features and Functionality: - Post-Quantum Maturity Assessment: Utilizes the Qubixor Post-Quantum Maturity Model (QPQMM) to evaluate an organization's current cryptographic posture across five levels, from Unaware to Proactive. - Benchmarking: Allows organizations to compare their maturity scores with anonymized market and sector benchmarks, providing insights into their standing relative to peers. - E-Learning Modules: Offers self-paced courses on post-quantum cryptography, catering to different expertise levels, and provides certificates upon completion. - Ecosystem Collaboration: Enables organizations to invite partners and suppliers to assess their readiness, fostering a comprehensive security view of the entire ecosystem. - Awareness Quizzes: Facilitates the launch of multi-level quizzes to educate employees, track participation, and measure knowledge on post-quantum topics. Primary Value and Solutions Provided: Qubixor empowers organizations to proactively prepare for the impending quantum computing era by: - Identifying Vulnerabilities: Helps detect potential weaknesses in current cryptographic systems that could be exploited by quantum technologies. - Ensuring Regulatory Compliance: Aligns with standards such as NIST, ANSSI, ENISA, NIS2, DORA, and eIDAS, assisting organizations in meeting regulatory requirements for cryptographic risk management. - Facilitating Strategic Planning: Provides actionable insights and structured roadmaps for transitioning to post-quantum cryptographic solutions, ensuring data security against future threats. By leveraging Qubixor, organizations can safeguard sensitive information, maintain compliance with evolving regulations, and stay ahead in the rapidly changing cybersecurity landscape.

AppTotal is a platform that focuses on assessing the risks involved with OAuth apps

The Standardized Control Assessment is a comprehensive suite of procedures and tools designed to assist risk professionals in planning, scoping, and conducting third-party risk assessments. Serving as the "verify" component in a third-party risk management program, the SCA is typically employed after initial questionnaires, such as the Standardized Information Gathering Questionnaire, to gather and confirm artifacts that attest to the veracity of the assessment. Key Features and Functionality: - Comprehensive Assessment Procedures: The SCA provides a standardized set of assessment procedures that can be efficiently utilized during onsite or virtual assessments, as well as for auditing internal systems. - Resource-Rich Toolkit: It includes a variety of resources such as solutions, templates, checklists, and guidelines, all aimed at facilitating thorough third-party risk assessments. - Alignment with Critical Risk Domains: The SCA mirrors 21 critical risk domains from the SIG, including Access Control, Application Security, Cloud Hosting Services, Compliance Management, and Supply Chain Risk Management, among others. - Customizable Scope: Organizations can tailor the SCA to their specific needs, selecting relevant test procedures based on their unique risk factors. Primary Value and Problem Solved: The SCA addresses the challenge of efficiently and effectively verifying third-party controls within a risk management framework. By providing a standardized, comprehensive, and customizable set of assessment procedures, it enables organizations to: - Enhance Assessment Efficiency: Streamline the assessment process through standardized procedures and resources, reducing time and effort required for thorough evaluations. - Ensure Consistency and Accuracy: Promote uniformity in assessments, leading to more reliable and comparable results across different third-party engagements. - Facilitate Regulatory Compliance: Assist organizations in meeting regulatory requirements by providing a structured approach to control verification. - Adapt to Various Assessment Scenarios: Support both onsite and virtual assessments, offering flexibility in conducting evaluations regardless of logistical constraints. By integrating the SCA into their third-party risk management programs, organizations can achieve a more robust and reliable assessment process, ultimately strengthening their overall risk posture.

The Vendor Risk Management Maturity Model (VRMMM is a comprehensive framework designed to help organizations assess and enhance their third-party risk management programs. By evaluating existing practices against industry benchmarks and best practices, the VRMMM enables organizations to identify areas for improvement, allocate resources effectively, and establish a baseline for program maturity. This model is particularly beneficial for organizations aiming to adapt their risk management strategies based on factors such as industry type, organizational size, and risk tolerance. Key Features and Functionality: - Program Governance: Establishes a risk management governance model with defined objectives, board reporting, and oversight, including considerations for ESG and codes of conduct. - Policies, Standards, and Procedures: Develops comprehensive policies for vendor risk management, including risk categorization, due diligence standards, and lifecycle management. - Contracts Management: Provides guidelines for contract provisions, relationship management, and procedures for vendor termination or exit. - Vendor Risk Assessment Process: Implements processes for pre-outsourcing risk evaluation, vendor risk tiering, ongoing assessments, and process automation. - Skills and Expertise: Defines roles and responsibilities, staffing levels, training programs, and qualifications necessary for effective risk management. - Communication and Information Sharing: Facilitates integration of vendor risk programs, reporting mechanisms, and communication protocols. - Tools, Measurement, and Analysis: Utilizes workflow management, risk scoring tools, financial analysis, and automation to monitor vendor risks. - Monitoring and Review: Establishes procedures for tracking contract provisions, monitoring service level agreements, and conducting continuous monitoring programs. Primary Value and Problem Solved: The VRMMM addresses the critical need for organizations to manage and mitigate risks associated with third-party vendors. By providing a structured approach to evaluate and improve vendor risk management programs, the VRMMM helps organizations make informed decisions regarding resource allocation and vendor-related risks. It enables the establishment of a maturity baseline, identification of high-value components, and tracking of program progress over time. Ultimately, the VRMMM empowers organizations to enhance their risk management capabilities, ensuring robust governance and compliance in their third-party relationships.

Privacy due diligence software for verifying legal compliance of third-party data providers.

AI-powered tool for automating security questionnaire completion

Trail is an AI governance platform designed to help organizations develop and deploy trustworthy and high-quality artificial intelligence systems efficiently. By integrating seamlessly into existing workflows, Trail automates governance processes, ensuring compliance with evolving standards like the EU AI Act.

Enkrypt AI's Compliance Management Frameworks provide automated solutions to ensure AI applications adhere to the latest regulatory standards. By integrating customized, enterprise-ready guardrails, organizations can safeguard their AI systems against risks such as non-compliance, malicious threats, and biased or toxic content. This framework is designed to work across various industries, including insurance, life sciences, finance, and technology, offering tailored solutions to meet specific compliance requirements.

CYRAPID AI, a research-based & risk-managed GENERATIVE AI Platform for Cyber, enables accelerated cyber risk and TPRM assessments with more accuracy and at 65% less cost while guaranteeing human-level quality.

Manage everything from sourcing to renewal of vendors in one platform

CyberNark is a ISO27001-focused SaaS platform that automates supplier risk assessments, evidence management, and continuous supply-chain monitoring.

Mokxa's E-Procurement Software streamlines the procurement process, offering a centralized platform for businesses to manage purchasing activities effectively. With its user-friendly interface and customizable workflows, Mokxa enables seamless integration with ERPs, ensuring enhanced supply chain efficiency and optimized procurement strategies. Experience smarter spending and procurement management with Mokxa's comprehensive E-Procurement Software.

Sekorti is AI-native trust center platform for modern SaaS companies. Create a customer-ready Trust Center in minutes and automate security questionnaires like SIG, CAIQ, and VSAQ with AI. Prove SOC 2, ISO 27001, GDPR, ISO 42001, and EU AI Act readiness without spreadsheet chaos.

Vendor Triage is an AWS-native SaaS platform for third-party risk management. It automates vendor security assessments and generates audit-ready reports — accelerating vendor evaluation from the industry-typical 2 to 3 weeks down to 2 to 3 days through intelligent workflows, multi-stakeholder routing, and evidence validation. The questionnaire: 78 industry-standard questions across 8 security domains — information security policy, access management, encryption and key management, network security, vulnerability management, incident response, business continuity, and third-party / subprocessor risk. Questions map to SOC 2, ISO 27001, NIST CSF, HIPAA, GDPR, and PCI DSS controls. Why completion rates beat the industry: Vendor Triage achieves an 85%+ questionnaire completion rate by routing each section to the appropriate stakeholder at the vendor — security questions to the CISO or security lead, privacy questions to the DPO, technical questions to engineering. Single-recipient questionnaires from competitors typically stall on a single overworked contact and complete at 50-60%. Evidence validation: vendors upload SOC 2 reports, ISO certificates, penetration test reports, insurance certificates, and policy documents directly into the platform. Vendor Triage performs automated verification — expiry date checks, scope validation, cross-reference matching against questionnaire responses. Evidence and answers combine into an audit-ready PDF. Risk scoring: intelligent classification by contract value, data sensitivity, and operational criticality. Critical vendors (those handling regulated data or core operations) trigger expanded due diligence; low-risk vendors complete the standard assessment. Risk scores roll up into the executive summary auditors reach for first. What you get: audit-ready PDF with executive summary, full questionnaire, evidence references, risk score, and prioritized remediation roadmap for any vendor that fails any control. Supports SOC 2, ISO 27001, NIST CSF, HIPAA, GDPR, and PCI DSS framework alignment. Who uses Vendor Triage: vendor risk managers, TPRM leads, procurement teams, legal teams, and CISOs at any organization managing 10 or more vendors with compliance requirements. Particularly valuable for FinTech, HealthTech, B2B SaaS, and government contractors that need vendor assessments on file before audit time. What it replaces: spreadsheet-based vendor assessment processes, single-recipient SurveyMonkey-style questionnaires, and enterprise GRC TPRM modules at $50,000-plus per year. Vendor Triage is purpose-built for the mid-market 100-1,000 employee company that's outgrown spreadsheets but can't justify enterprise GRC pricing. Pricing description (500 chars max) Subscription on AWS Marketplace from $49/month for low-volume teams to $999/month for high-volume vendor risk programs.