01
Start with the relationship
Capture why the vendor exists, what they touch, who owns the relationship, and the context needed for a fair tier.
See the workflowThird-party risk management
From intake to decision.
One governed workspace for procurement, security, and the people who own the outcome.
Built for accountable teams. Your evidence and approvals stay together.
Designed for decisions that need to stand up later.
Security-first access
Clear ownership
Traceable decisions
One operating model
The workflow stays visible as risk moves.
Compy connects the work between procurement, security, business owners, and approvers without forcing everyone into the same view.
Evidence that travels with the decision
Less hunting. More confident review.
Every request has a place to land, a person responsible for moving it, and a record that explains what happened.
- Reuse trusted vendor identity without losing relationship-specific context.
- Give each role only the portfolio and action scope they need.
- Carry the audit trail from intake through reassessment and offboarding.
Everyone sees the part they own.
A strong review is not one person's spreadsheet. It is a chain of responsibility with a shared source of truth.
Business sponsors
Explain the service, data, and business need behind the relationship.
Security and risk
Apply the right diligence and keep evidence tied to the risk being assessed.
Approvers and auditors
See the decision, its boundaries, and the record that supports it.
A better starting point
Make the next vendor decision easier to trust.
Create a workspace for the work that should never disappear into a shared inbox.
Create workspace