The contracts, read for you
Notice periods, renewal dates, audit rights and exit terms, with the clause attached.
Third-Party
A supplier risk team, ready on day one.
Without hiring one.
One process for your customers and your suppliers. The AI reads the contracts, compares what each party says with the evidence and chases what is missing. The person with the mandate makes the decision, and every decision is on record.
Procurement · Risk · Security · Compliance · From 5-person suppliers to regulated groups
The chasing, done for you
Suppliers answer and sign through a link. No account needed. Reminders go out on time.
The register, ready when asked
Your DORA register of information and supplier evidence, from the same data as your decisions.
Customers and suppliers
Know who you do business with.
In both directions.
Customers (KYC) and suppliers run through the same five steps, each against the requirements that apply to them: onboard, assess, decide, follow up and watch. A change in board, owner, certificate or incident reopens the review. What you promise your customers and what you require of your suppliers stay consistent, because both read from the same record.
The first step is a fixed-fee, eight-week pilot in one country, credited to year one.
The problem
Third-party risk is a team sport.
Played without a shared scoreboard.
Legal sees the contract, procurement the price, security the access, product the components, sales the questionnaires, the board a summary, the CISO a sample. Each sees a slice. Nobody can answer the board’s question alone: are we all looking at the same facts, and could we prove it?
48%
of breaches involved a third party. Verizon DBIR 2026
29%
of 3,383 major ICT incidents in EU finance were caused by third-party failures. ESAs, major ICT incidents report, Jun 2026
6.5%
of DORA registers passed every data-quality check in the 2024 dry run. ESAs, DORA dry run, Dec 2024
What your AI colleague takes on
The whole supplier programme.
Your people only make the decisions.
01 · Start
Bring your list in.
Connect your accounting system read-only, or drop in the spreadsheet you already keep. Your AI colleague sorts it for you. Name who decides what, never the admin by default.
02 · Know
See what each supplier keeps running.
Place suppliers against your business functions. Ask what stops if one fails, and see where you depend on too few.
03 · Check
Check in proportion to the risk.
Full reviews for critical suppliers, standard for the rest. Ask only questions you have approved, and require a second reviewer where it matters.
04 · Decide
The mandate holder decides.
Approve, add conditions, record an exception or decline, each with a reason. For critical suppliers, plan the exit before you need it.
05 · Watch
Hear about changes before they hurt.
Ownership changes, incidents and lapsed certificates come back to the right owner, with what they affect.
06 · Prove
Show the record to whoever asks.
Register of information, board view, audit packs and a receipt for every decision, verifiable without an account.
Works with what you have
- Fortnox
- Visma
- Microsoft 365
- Entra ID
- GitHub
- Jira
And more by country. Read-only where it reads; scope agreed for your environment.
See the work
The supplier work, prepared.
Explore a fictional example. Open the sources, then try the human review step.
Illustrative example
Contract review, prepared.
Prepared work
- Notice period
- 90 days’ written notice
- Renewal date
- 30 June 2027
- Audit rights
- Scope needs review
Ready for your review
The key terms are ready for review.
Notice periods, renewal dates and audit terms are pulled into the review, with the source attached. You check the terms and make the decision.
Review owner · Procurement
What does this change for us?
Proposed links: awaiting your review
RequirementExisting workReview
Supplier registerConfirm match
Audit rightsReview wording
Exit planningNo evidence linkedCheck what exists
Your authorised reviewer confirms the matches.
Draft for review
Our policy requires annual reviews. The current review needs confirmation.
Notice periods, renewal dates and audit terms are pulled into the review, with the source attached. You check the terms and make the decision.
Review owner · Procurement
The preparation is done. The judgment is yours.
Your example decision
Explore supplier reviews Fictional sources · Interactive product illustration
One product · Every size
From a five‑person supplier
to a regulated group.
Same platform, same proof. What changes is how much it takes on for you.
Growing companiesEnterprise
How you startConnect your accounting system or drop in a file: in minutes, no card neededYour registers, entities and business functions, mapped
SuppliersUp to a few hundred; your suppliers install nothingHundreds, with tiers, monitoring and campaigns
Who signsThe authorised signatory, with a colleague checkingMandates, committees and delegation, maker ≠ checker
ReportingAnswers for your customersDORA register of information and a board view
The same at every size
- A named person makes every decision
- A receipt for every decision
- Public verification without an account
- Export everything and leave, any time
Third-Party Office · services-as-software
Or let us run it.
The third-party office you don’t have to staff.
Not a tool your team still has to run, and not a consultancy billing by the hour. Your AI colleague and our people take over the third-party assurance work and hand back finished outcomes. A named person owns every judgment and appears on every receipt.
The outcomeDone meansProof
A supplier in serviceFrom a row in your register to categorised, risk-tiered and under watch, with the method recorded, not just the result.Onboarding receipt
An assessment completedSent, chased, collected, reviewed by your AI colleague and judged by a named person. You get the judgment, not a pile of returned forms.Assessment receipt
A customer questionnaire answeredDrafted from your own decision history, approved by a named person, returned in the customer’s format.Answer receipt
A watch judgmentA monitoring finding judged in your context and decided, not an alert forwarded to an inbox nobody opens.Judgment receipt
An audit pack deliveredA supervisory or audit request answered with a bundle your auditor can verify without trusting us or you.Export receipt
An incident reconstructionThe timeline of who decided what, rebuilt and recorded, while everyone else is still searching mailboxes.Reconstruction receipt
Outcomes, not hours
You pay for finished outcomes, not hours. Every line on the invoice resolves to a receipt you can open. No receipt, nothing to bill.
What we never take over
Accountability stays with your management body. A CISO of record, a DPO and anything filed with a regulator is always a named human. Certification comes from an accredited body, never from us.
A few useful answers.
Is it for small companies or enterprises?
Both. A small supplier starts from the supplier list it already has; a regulated group runs tiers, mandates and the DORA register across entities. Same platform, same proof.
Does the AI approve a supplier?
No. It prepares the comparison and findings. Approving, setting a tier and sealing are refused to the AI in the product; your authorised reviewer makes the decision.
Do our suppliers need an account?
No. A supplier gets a link, confirms who they are, answers with evidence and countersigns. Their signed answers stay on record.
Can it produce our DORA register of information?
Yes. The register is built from the same supplier, service and contract data your decisions use, shaped to the EU templates. Gaps are shown as gaps, not filled in.