Documents and evidence
Questionnaires, certificates, audit reports and contracts: everything a provider claims about itself, in one place instead of four.
Home › Use cases
Vendor risk management, evidenced instead of asserted.
Vendor risk means assessing what a provider promises and showing what the assessment rests on. This domain runs on the Leapfacto engine today; the four use cases below build on each other.
Basis
Three things, nothing more
A vendor risk assessment is only as good as the documents it rests on and the trail it leaves behind.
Data points with their source
Every extracted data point stays tied to document, section and page. You read the reasoning, not just the result.
Due dates and changes
Evidence expires, contracts get renewed, subprocessors change. The vendor file records when the next review falls due.
Use cases
Four tasks, one review set
Vendor risk assessment
The first run: read the documents, present findings with sources, approve the assessment.
Re-assessment
The second run: repeat the review when evidence expires or something changed.
Security questionnaires
The evidence you send out: cite answers from the documents instead of collecting them again.
Policy gap analysis
The internal check: where a policy promises something the documents do not support.
Common ground
What all four do the same way
Source
The document decides, not a gut feeling
No finding without a passage: the system cites the place every data point comes from.
Approval
The proposal comes from the system, the decision from you
Assessments are presented for approval and only become valid once a person confirms them.
Trail
Every decision stays traceable
Who decided what and on which basis is recorded in the decision log and can be exported.
FAQ
Common questions
What exactly does vendor risk mean here?
It is the risk that comes from working with providers: missing evidence, unclear subprocessors, expiring certificates, gaps in contracts.
Is this a vendor management system?
No. Leapfacto assesses the documents for a provider and presents findings for approval. Procurement, contract management and master data stay where they are.
Where do I start?
With a provider that is due right now. One assessment from your own practice shows faster than any demo whether the assessment fits the way you work.
Contact
Review a vendor that is due right now.
We go through your documents with you and show the assessment with its sources before you decide on a pilot.
Book a demo →Or email us: info@leaplytics.de
First call is non-binding, remote or on site.