Your portfolio exceeds your ability to assess it
You assess the most critical suppliers. The others remain off your radar due to a lack of time and resources.
Repeated questionnaires, follow-ups, manual analyses: your teams cannot assess everything. TrustCycle is the first platform to centralise both your client and supplier roles: assess your third parties and share your own cyber maturity with your clients. AI-powered analysis of documentary evidence and external cyber ratings save you time, allowing you to extend your assessments across your entire ecosystem. Translated with DeepL.com (free version)
To assess more suppliers, we need to change our approach. We shouldn’t just keep sending out more questionnaires.
TrustCycle uses AI to analyse your suppliers’ security documentation and supporting evidence. Security Rating complements this assessment by analysing their external exposure.
Automate the analysis of existing security documents to reduce manual work. Extend your coverage beyond critical third parties and focus your teams on the gaps that need addressing.
Assess your third parties as a client and share your maturity as a supplier. Centralise your documentation and reuse it with multiple authorised clients.
The same service can be assessed according to each client’s requirements, thanks to customisable security profiles. The results are supported by documentary evidence.
In an ecosystem, everyone is both a customer and a supplier. With TrustCycle, manage both roles in one place: assess your third parties and share your own cybersecurity maturity with your authorised customers.
Access your assessments in a consolidated view and interpret them in the context of the service used and your security requirements.
Upload and update your security documentation in one place. Reuse this documentation for assessments by multiple authorised customers, without collecting it all again.
You stay in control of access
As a supplier, you authorise the relationships
that allow your customers to view your assessment.
Switch from a consolidated view of your suppliers to a detailed view of a specific service or control to identify priorities, understand variances and guide your actions.
Cross-reference your suppliers’ criticality against their assessed maturity to identify relationships that require further investigation or closer monitoring.
View your ratings at group, business unit or activity level. Filter services from the same provider to examine the scope that applies to you.
Explore the results by category and by assessment. Find the reference materials that support the level awarded and the criteria required to reach the next level.
Import your suppliers
Link the services they provide to your operations and define the security profiles that meet your requirements.
Gather the existing documents
Your suppliers submit their safety documentation: policies, procedures, safety assurance plans and completed questionnaires.
AI analyses documentary evidence
For each assessment against the SCF framework, the AI identifies the documented evidence required to assign a maturity level and cites the sources used.
Update the documents, restart the assessment
When a supplier adds or updates their documentation, the analysis is restarted. The assessment is updated as new information becomes available.