Vendor Management System
Requisitions, sourcing and purchase orders, in one system.
Manage supplier records, terms and performance.
Explore the specification
ActiveEffectiveTo BETWEEN todaytoday + 60 days
| Vendor | Cert Number | Carrier | Coverage Type | Amount Millions |
|---|---|---|---|---|
| VND-135 | INS-74633 | CRR-763 | GeneralLiability | 150 |
| VND-226 | INS-35164 | CRR-167 | Auto | 440 |
| VND-116 | INS-27481 | CRR-533 | WorkersComp | 370 |
| VND-104 | INS-17236 | CRR-124 | Cyber | 360 |
| VND-194 | INS-79155 | CRR-573 | ProfessionalLiability | 340 |
| VND-201 | INS-63734 | CRR-602 | ErrorsAndOmissions | 830 |
StatusSentInProgressoverdue
StatusScheduledInProgress
StatusOpenInProgressAwaitingVerificationOverdue
StatusOpenUnderInvestigationActionInProgress
StatusPendingInProgressYou
ApprovedOverallRiskScore > 75
| Vendor | Assessment Date | Overall Risk Score | Risk Tier | Next Assessment Due |
|---|---|---|---|---|
| VND-017 | 05 Sep | 40 | 820 | 10 Sep |
| VND-038 | 29 Sep | 75 | 500 | 03 Oct |
| VND-101 | 24 Sep | 45 | 660 | 03 Oct |
| VND-088 | 11 Sep | 65 | 600 | 16 Sep |
| VND-004 | 26 Sep | 40 | 850 | 28 Sep |
| VND-094 | 29 Sep | 50 | 890 | 03 Oct |
ActiveExpirationDate BETWEEN todaytoday + 60 days
| Vendor | Certification Type | Certificate Number | Certification Body | Expiration Date |
|---|---|---|---|---|
| VND-125 | ISO9001 | CRT-16005 | CB-803 | 25 Sep |
| VND-221 | ISO14001 | CRT-88502 | CB-933 | 06 Sep |
| VND-153 | ISO27001 | CRT-87524 | CB-761 | 05 Sep |
| VND-228 | AS9100 | CRT-61525 | CB-684 | 18 Sep |
| VND-155 | SOC2_Type1 | CRT-89125 | CB-727 | 18 Sep |
| VND-072 | SOC2_Type2 | CRT-78520 | CB-338 | 17 Sep |
OnboardingReadyForReview
| Vendor Code | Name | Classified As | Tier | Relationship Owner |
|---|---|---|---|---|
| VC-687 | Vendor 478 | Corp | Strategic | FB |
| VC-488 | Vendor 246 | LLC | Critical | PH |
| VC-733 | Vendor 703 | Partnership | Routine | MH |
| VC-257 | Vendor 463 | SoleProp | OneTime | SJ |
| VC-749 | Vendor 383 | NonProfit | Strategic | NV |
| VC-162 | Vendor 287 | GovEntity | Critical | KD |
YouActive
| Vendor Code | Name | Tier | Last Review Date | Business Criticality |
|---|---|---|---|---|
| VC-226 | Vendor 902 | Strategic | 07 Sep | High |
| VC-670 | Vendor 849 | Critical | 06 Sep | Medium |
| VC-770 | Vendor 778 | Routine | 14 Sep | Low — feeds tier-segmentation |
| VC-800 | Vendor 888 | OneTime | 15 Sep | High |
| VC-799 | Vendor 353 | Strategic | 29 Sep | Medium |
| VC-473 | Vendor 521 | Critical | 19 Sep | Low — feeds tier-segmentation |
Suspended
| Vendor Code | Name | Tier | Suspend Reason | Relationship Owner |
|---|---|---|---|---|
| VC-130 | Vendor 224 | Strategic | Suspended vnd-660 | FA |
| VC-858 | Vendor 474 | Critical | Suspended vnd-666 | ZG |
| VC-446 | Vendor 880 | Routine | Suspended vnd-280 | YE |
| VC-986 | Vendor 271 | OneTime | Suspended vnd-990 | WG |
| VC-464 | Vendor 392 | Strategic | Suspended vnd-142 | AU |
| VC-433 | Vendor 122 | Critical | Suspended vnd-569 | TJ |
You
| Vendor Code | Name | Status | Tier | Onboarding Date |
|---|---|---|---|---|
| VC-761 | Vendor 796 | Prospect | Strategic | 07 Sep |
| VC-389 | Vendor 276 | Onboarding | Critical | 07 Sep |
| VC-437 | Vendor 824 | Active | Routine | 27 Sep |
| VC-993 | Vendor 427 | Suspended | OneTime | 15 Sep |
| VC-189 | Vendor 708 | Inactive | Strategic | 20 Sep |
| VC-508 | Vendor 699 | Prospect | Critical | 26 Sep |
Illustrative records generated from the specification. Explore the views to inspect the planned operating model.
Built for your team.
Purchasing teams who want every spend to follow the process.
- Defined tables
- 24
- Operational views
- 12
- Defined roles
- 8
- Reports
- 8
Defined in the planned system specification.
What’s inside.
Manage supplier records, terms and performance.
Requisitions
Requests with budget and approval
Sourcing
RFQs, comparison and awards
Purchase orders
Terms, changes and confirmations
Receiving
Goods receipts and inspection
Invoice matching
Two- and three-way match
Suppliers
Onboarding, scorecards and contracts
- 01Requisition
- 02Approve
- 03Purchase order
- 04Receive and match
- 05Pay
Built for your team
Incident NumberVendorIncident TypeSeverity
Security Breach
Procurement Lead
Owns the VMO function. Sole authority to sign off on Tier classification (especially Strategic), to approve a Vendor out of Onboarding into Active, to approve Tier-change recommendations from the segmentation workflow, and to overturn a Suspended status. Reviews all Scorecards.
CANumberSourceVendorDescription
Incident Report
Vendor Relationship Owner
Named manager assigned per Vendor (Vendors.RelationshipOwner = self). Runs the operating relationship — quarterly Scorecards, quarterly BusinessReviews, day-to-day issue triage with the vendor.
VendorAssessment DateOverall Risk ScoreRisk Tier
Risk Officer
Third-Party Risk Management owner. Owns RiskAssessments, RiskCategories, RiskQuestionnaires, QuestionnaireResponses, and IncidentReports. Sets the OverallRiskScore that the auto-suspend workflow keys off.
Vendor CodeNameTierSuspend Reason
Critical
Compliance Officer
Owns the document-and-certificate compliance shelf. Validates DocumentSubmissions, Certifications, Insurances, and ESGRatings. The named Verifier on every compliance artifact.
Audit NumberVendorAudit TypeScope
Remote
Audit Lead
Executes the Audit cadence and tracks CorrectiveActions to closure. Verifies vendor-uploaded remediation evidence.
Vendor CodeNameStatusTier
Onboarding
Vendor User
External user — the vendor's own personnel accessing the vendor portal. Sees only their own Vendor row and only the records attached to that Vendor. Implicitly invoked by the vendor portal; scoped via Vendors.PortalUser = self.
Viewer
Read-only seat for adjacent stakeholders (Finance, Operations leadership, Internal Audit consumers).
Reports and dashboards
Explore what each report measures and the records behind it.
Vendor Risk Profile
Per Vendor, the current OverallRiskScore with the six RiskCategories sub-scores (Financial / Cyber / Geopolitical / Operational / Compliance / ESG), the latest assessment date, and the trailing 24-month trend. Rolled up by Tier × Category. The Risk Officer's daily landing report and the source for the board-level third-party-risk briefing.
Compliance Coverage
Per Vendor, the count of required-but-missing DocumentRequirements, the count of expired vs active Insurances and Certifications, and a computed ComplianceHealth % (verified / required). Rolled up by Tier and by VendorCategory. Surfaces the document cliff before it triggers an auto-suspend.
Scorecard Trend
Quarterly OverallScore trend per Vendor with the six dimension breakdowns; rolled up by Tier × VendorCategory and by RelationshipOwner. The Procurement Lead's quarterly business-review prep report.
Audit & Findings Status
Open AuditFindings by Severity (Major / Minor / Observation) per Vendor, with open / closed / overdue CorrectiveActions counts and average days-to-closure by Severity. Drives the audit-cadence staffing plan.
ESG Performance
Annual EnvironmentalScore / SocialScore / GovernanceScore / OverallESGScore per Vendor with year-over-year delta. Filtered by Tier and by VendorCategory; the source for the company's annual sustainability report on supplier ESG.
Spend by Vendor
Trailing-12-months AnnualAmount per Vendor, rolled up by Tier × VendorCategory × State, with concentration-risk flags for Vendors above 10% of total spend. Drives tier-segmentation-recompute inputs.
Incident Trend
IncidentReports by IncidentType × Severity × Vendor over a rolling 12 months, with open / resolved counts and average time-to-resolution by Severity. Surfaces the systemic-failure Vendors that warrant a re-tier or off-board.
Vendor Onboarding Cycle Time
For each Activated OnboardingPlan, days from StartDate to ActualActivationDate vs the program's TargetCycleTimeDays, with the breakdown of OnboardingTasks time-in-status (which task category is the long pole). Drives onboarding-process improvement.
One connected workspace
Vendor Onboarding Cycle Timelist
For each Activated OnboardingPlan, days from StartDate to ActualActivationDate vs the program's TargetCycleTimeDays, with the breakdown of OnboardingTasks time-in-status (which task category is the long pole). Drives onboarding-process improvement.
| Vendor Code | Name | Status | Tier | Onboarding Date |
|---|---|---|---|---|
| VC-761 | Vendor 796 | Prospect | Strategic | 07 Sep |
| VC-389 | Vendor 276 | Onboarding | Critical | 07 Sep |
| VC-437 | Vendor 824 | Active | Routine | 27 Sep |
| VC-993 | Vendor 427 | Suspended | OneTime | 15 Sep |
- Prospect
- Onboarding
- Active
- Suspended
- Inactive
- VendorCode
- VC-761
- Name
- Vendor 796
- Tier
- Strategic
- OnboardingDate
- 07 Sep
- ActivatedDate
- 16 Sep
ownerVendor User
Go from the big picture to the details behind it. Open any record to see its status, owner and history.
Illustrative records. Connections follow the authored specification.
Controls and automation
System checks
vendor-intake-triggers-onboarding — webhookTrigger from the public intake form → creates Vendors, VendorContacts, VendorCategories, OnboardingPlans, OnboardingTasks, emails portal invitation.
document-expiry-warning — scheduleTrigger daily → T-60 / T-30 / T-7 reminders to Compliance Officer + Vendor Relationship Owner + Vendor primary contact.
risk-assessment-questionnaire-send — appEventTrigger on RiskAssessments.record.created → creates RiskQuestionnaires per Tier-template mapping, emails Vendor.
risk-recompute-on-response — appEventTrigger on QuestionnaireResponses.record.created/updated → aggregates SubScores, recomputes OverallRiskScore, alerts Risk Officer on high-risk threshold breach.
scorecard-quarterly-recalc — scheduleTrigger first business day of each quarter → creates Scorecards and ScorecardCategories for active Strategic / Critical Vendors, pre-fills DataDriven dimensions, assigns Vendor Relationship Owner.
vendor-status-auto-suspend — appEventTrigger on Insurances, Certifications, RiskAssessments updates → flips Vendors.Status: Active → Suspended on lapse or risk-breach, emits block-list event to scm-procurement.
audit-scheduling — scheduleTrigger weekly Monday → creates Audits rows for Tier-cadence-due Vendors and high-risk re-audits.
finding-corrective-action-routing — appEventTrigger on AuditFindings.record.created → creates CorrectiveActions row with Severity-routed DueDate, emails Vendor.
esg-data-collection — scheduleTrigger annually February 1 → creates ESGRatings for Strategic / Critical Vendors, emails Vendor questionnaire link.
tier-segmentation-recompute — scheduleTrigger annually January 15 → recommends Tier changes from Spend × Risk × Criticality matrix, routes to Procurement Lead for approval. Integrations: inbound from the public vendor-intake form (webhook), the vendor portal (document uploads, questionnaire responses, ESG submissions, corrective- action evidence), scm-procurement (PO and receipt data feeding Delivery / Quality scorecard inputs and Spend.POAmount), fin-bill-pay-ap (paid-bill data feeding Spend.PaidAmount), third-party risk-data services (D&B / RapidRatings financial scores, BitSight / SecurityScorecard cyber ratings, EcoVadis ESG ratings, OFAC sanctions screening), and the document store (uploaded W-9, COI, SOC 2 PDFs). Outbound to scm-procurement (Vendor master records and the Suspended-status block-list), the vendor portal (questionnaire invitations, document-renewal reminders, corrective-action assignments), the document store (signed audit reports, executed scorecard PDFs, ESG report PDFs), email (all vendor-facing notifications, internal-owner reminders), and BI tooling (full vendor / risk / scorecard data export).
