Independent risk analyses
Annual, versioned vendor risk assessments across financial, IT, ESG, compliance, and more — prepared by Brunnfeld's independant analytics team.
B2B SaaS · EU-hosted · Audit-ready
Thrid party risk analytics you can trust
A dedicated platform for independent vendor risk assessments, controlled document sharing, and sign-off workflow — built for regulated enterprises and their vendors.
Everything in one workflow
From vendor questionnaire to published analysis and client sign-off — without spreadsheets or email chains.
Vendor-controlled access
Vendors grant access only to clients they work with. Clients explicitly accept to view analyses and documents.
Audit-ready assessments
Clients add their own rating and comments alongside the platform analysis. This enables time-saving third-party risk assessments with all key information already available.
Enterprise-grade isolation
Strict multi-tenant separation with row-level security. Each organization sees only its own users, vendors, and data.
Two dedicated portals
Client dashboard, and vendor portal — each tailored to its role in the vendor risk workflow.
How it works
Vendors and clients register separately. Access is always explicit and consent-based.
1
Vendor registers & submits
Vendors complete the annual questionnaire and upload supporting documents.
2
Platform publishes analysis
Risk experts create and publish the independent assessment for the vendor.
3
Client accepts & accesses
Clients accept the grant, purchase year access, and review analysis plus documents.
For clients
Per-vendor annual access
Purchase access per vendor and calendar year. Keep permanent access to purchased years for audit and documentation — even if a grant is later revoked.
- • View platform risk analysis and vendor documents
- • Document your own overall assessment
- • Export analysis as PDF
For vendors
Annual platform participation
Submit your questionnaire, manage client grants, and share documents with clients you approve — without seeing the platform's independent analysis.
- • Structured annual questionnaire
- • Document upload (SOC, ISAE, certifications)
- • Grant and revoke client access