Vetrail is risk register and vendor risk software for startups and small businesses that have outgrown the spreadsheet but are not hiring a risk team. It keeps two registers in one place. The risk register starts with your industry's typical risks at a starting rating, records the controls you have, and brings each control back for testing on its own schedule. The vendor register tiers each vendor, sends a 24 or 54 question security questionnaire, scores the answers the same way every time, chases replies with reminders, and escalates only when something needs a decision. You set a risk appetite and see both registers measured against it. Every risk and vendor has an owner and a date. Exports are CSV, PDF or a full JSON backup. Free for up to 15 active vendors and 5 people, with unlimited assessments. Vetrail does not track incidents or key risk indicators, and it gives no compliance advice.
