Skip to content
SecTepe.Core
Vendor Portal

Supplier & Vendor Portal for structured TPRM

Suppliers complete questionnaires themselves, upload evidence and receive automatic risk scoring. No more email ping-pong.

What you get

  • Self-service questionnaires
  • Evidence upload
  • Risk scoring
  • SIG / CAIQ templates
  • Vendor dashboard
  • NDA workflow

Features at a glance

Structured third-party risk management with proven templates and automation.

Questionnaire Templates

Ready-to-use SIG, CAIQ and TISAX templates – plus an editor for custom questionnaires.

Self-service Portal

Suppliers log in, complete questionnaires and manage their own users – branded with your corporate identity.

Evidence Upload

Secure upload of certificates, audit reports and policies – directly linked to the questionnaire response.

Automatic Scoring

Weighted risk scoring based on responses – with highlighted critical gaps and recommendations.

Re-assessment Cycles

Annual or risk-based reassessment cycles with automatic reminders and delta reports.

Dashboards & Alerts

Management dashboards show vendor risk at a glance – with alerts for deteriorating scores.

Your benefits

Regulation forces companies to monitor the security posture of every supplier. A structured vendor portal replaces email-driven back-and-forth with a repeatable, auditable process.

  • Drastically lower effort for procurement and IT
  • Consistent risk scoring across all suppliers
  • Evidence stays centralised and versioned
  • NIS2 and DORA supply-chain requirements addressed
  • Professional vendor experience with clear branding

Use cases

Onboarding new suppliers

Every new vendor receives a SIG or CAIQ questionnaire plus NDA workflow – fully digital.

Annual vendor review

Automated reassessment cycles keep the risk view of your supplier landscape current.

NIS2 supply-chain due diligence

Structured due diligence that meets new NIS2 supply-chain obligations.

DORA-critical ICT providers

Special workflow for DORA-critical third parties with extended evidence requirements.

Ready for structured third-party risk management?

See in a personal demo how SecTepe.Core streamlines vendor assessments from onboarding to reassessment.