Overall Risk Calculation Flexibility
To improve the autonomy of customers, we would like to give them the ability to self-determine how they want to calculate the overall risk score of a third-party, by e.g. taking into account characteristics of the third-party, internal sources (e.g. assessments) and external data sources (e.g. adverse media monitoring).
Rule-Based Risk Profiles
To automate the risk profiling of third parties, we like to introduce risk-based risk profiles. This will allow users to create if-then rules used for the calculation of the inherent risk.
Improve Self-Service of Modules
To improve user autonomy and flexibility, the platform will introduce self-service customisation options, allowing users to modify notifications and fields and perform bulk uploads without external support.
Add AI to Internal Control Workflows
To improve the efficiency of internal control testing, we would like to add AI to propose testing results based on the description of the control, testing guidelines and provided evidences.
Organisation Model - Filters & Search
Search input allows searching on element name. Filters enable selection by: Type (e.g. department), Status (active, inactive), Responsible colleague (dropdown of users), Risk assessment template, Risk profile score Available everywhere: On both the organisation model configuration page and any selection modals
AI chat with platform data
We are introducing AI chat functionality that allows users to interact with platform data such as risks, contracts, and documentation. This feature helps users find insights faster, ask questions in natural language, and make better-informed decisions without needing to manually search through the platform. Key enhancements Natural language queries across modules Users can ask questions like “What are the top open risks this quarter?” or “Show me contracts expiring in the next 60 days,” and receive direct answers based on real-time data. Context-aware responses The AI understands the structure and relationships within your data, enabling accurate and relevant responses—even across different modules. Faster access to insights Instead of navigating through multiple screens, users get instant answers that help them act quickly and confidently. Supports risks, contracts, and documents Initial scope includes AI access to registered risks, contract metadata, and uploaded documentation—making cross-referencing and discovery seamless. This feature reduces time spent searching for information, improves platform usability, and empowers teams to make data-driven decisions more efficiently.
AI-powered risk profile suggestions
To enhance consistency and reduce manual effort, we are launching AI-powered risk profile suggestions. This feature intelligently recommends a suitable risk profile for each third party based on available data and context. Key enhancements Intelligent risk profile recommendations The AI analyses third-party attributes such as business relationship, service type, criticality, and industry and suggests the most appropriate risk profile. Accelerated third-party assessment setup Users receive an instant recommendation during third-party onboarding, reducing guesswork and manual classification. Consistent risk segmentation AI helps enforce a uniform risk classification framework across the organisation, aligning risk profiles with internal policies and reducing human variability. This feature supports more accurate, scalable, and efficient risk onboarding enabling organisations to make faster, data-informed decisions when assessing third parties.
Introducing AI-Powered Tier Mapping for Third Parties
To streamline onboarding and improve risk segmentation, we are introducing Tier Mapping by AI. This feature uses AI to suggest the appropriate tier for each third party reducing manual effort and ensuring consistent risk classification. Key Enhancements Automated Tier Suggestions The system analyses available third-party data (e.g., type, criticality, industry, relationship context) and recommends an appropriate tier level. Faster Onboarding Users save time during third-party setup by receiving tier suggestions up front, with the flexibility to review and adjust as needed. Improved Consistency and Accuracy AI-driven recommendations ensure a more standardised approach to tiering across the organisation, reducing human bias and classification errors. This enhancement simplifies the tiering process, increases operational efficiency, and lays the foundation for smarter, data-driven third-party risk management.
Define and filter self-assessment frequency for controls
To support better planning and execution of assessments, we are introducing a new Self-Assessment Frequency attribute. This allows internal control users to define how often a control should be assessed and filter accordingly during bulk assessments. Key Enhancements New Control Attribute: Self-Assessment Frequency Users can now specify a Self-Assessment Frequency when adding or editing a control. This is separate from Control Frequency and follows the same dropdown options for consistency. Improved Control Clarity To distinguish both attributes clearly, Frequency has been renamed to Control Frequency in the control modal. Filtering in Control Library A new filter has been added to the Control Library page, enabling users to filter controls by Self-Assessment Frequency when initiating bulk assessments. These improvements give users better visibility and control over assessment planning, helping streamline internal processes and reporting accuracy.
Self-Service Email Template Management
To give customers greater control over their communication, we are introducing self-service email template management. This enhancement empowers customer admins to customise email content sent to third parties and internal stakeholders—without relying on 3rdRisk support. Key Enhancements Dedicated Email Template Section Customer admins can access a new section in the platform to view, edit, and preview email templates relevant to their subscription and add-ons. Customisable Content and Branding Users can easily update subject lines, body content, placeholders (e.g., supplier name, due date), and apply company-specific elements like footers and legal disclaimers using a WYSIWYG or markdown editor. Restore Defaults and Version Control Templates can be reverted to their default state at any time, with optional change tracking to maintain a clear history of edits. Role-Based Access Control Only authorised users will have permission to edit email templates, ensuring secure and compliant access management. Seamless Integration Email templates connect directly with the existing delivery system, with safeguards to prevent invalid formatting or delivery issues. This new functionality increases agility and consistency in customer communications, reduces dependency on CX and engineering teams, and enables organisations to align emails with their brand and compliance needs at scale.
Refactor filtering logic for improved reliability and maintainability
To enhance code maintainability, reduce duplication, and improve user experience, the filtering logic in the application will be refactored. This update will introduce structured exception handling, unify filtering behavior across components, and allow users to save and reuse filters. Key Enhancements Exception handling: Improved error handling ensures that a single faulty filter does not disrupt the entire filtering process. Pipeline pattern implementation: Reduces code duplication and streamlines filtering logic across components. Test coverage: Additional tests to ensure filter reliability and prevent regressions. Unified filtering logic: Standardized filtering across pages, reducing inconsistencies. Filter reusability: Users can save filters and reuse them across multiple pages and updates. This update will enhance system reliability, reduce errors for users, and future-proof the filtering functionality while improving testability and code maintainability.
AI-powered document question auto-fill
To streamline assessments and reduce manual input, AI will be introduced to auto-fill questionnaire responses based on document analysis, improving efficiency in third-party risk management and compliance reporting. Key Enhancements automated question answering: AI extracts relevant answers from uploaded documents to pre-fill assessments. context-aware suggestions: users can review and validate AI-generated responses before submission. reduced manual effort: significantly cuts down time spent on filling in questionnaires and compliance forms. This update will improve accuracy, save time, and enhance the assessment process.
AI-powered recommendations and auto-suggestions
To improve decision-making and efficiency, AI-driven recommendations and auto-suggestions will be introduced, helping users proactively manage risk, compliance, and assessments. Key Enhancements context-aware recommendations: AI suggests best practices based on past risk assessments and industry standards. automated risk mitigation guidance: provides suggestions on risk treatments and control improvements. smart workflow optimization: AI recommends next steps based on previous actions, reducing manual input. This update will enhance decision support, reduce errors, and improve overall risk and compliance management
Management console for 3rdRisk partners to manage clients and gain insights
To enhance partner efficiency and client oversight, a management console will be introduced, allowing 3rdRisk partners to manage their clients, track activities, and gain valuable insights within the platform. Key Enhancements client management dashboard: partners can view and manage multiple client accounts from a single interface. real-time insights & analytics: track client risk profiles, assessment progress, and compliance status. user access control: partners can assign roles and permissions for different client engagements. reporting & performance tracking: generate reports on client risk trends, control effectiveness, and engagement levels. integration with platform tools: seamless access to assessments, compliance frameworks, and supplier networks. This update will streamline partner-client interactions, improve service efficiency, and enhance visibility into risk and compliance data.
Supplier network
To enhance third-party collaboration and risk management, a supplier network will be introduced, connecting suppliers with the platform and supplier portal for more efficient engagement, assessments, and compliance tracking. Key Enhancements network-wide visibility: suppliers can manage relationships with multiple organizations within a single platform. centralized risk and compliance data: unified access to assessments, certifications, and risk scores. real-time updates & collaboration: streamlined communication between suppliers and organizations. efficiency in onboarding & assessments: standardized processes for faster supplier onboarding and evaluation. integration with supplier portal: seamless connection for document submission, compliance tracking, and risk monitoring. This update will improve supplier engagement, reduce administrative workload, and enhance transparency in supplier risk management.
Supplier portal for streamlined third-party management
To enhance third-party risk management (TPRM) and compliance, a supplier portal will be introduced, allowing suppliers to directly engage with the platform for assessments, documentation, and communication. Key Enhancements self-service access: suppliers can update their profiles, submit assessments, and provide compliance documentation. real-time status tracking: suppliers can view the progress of risk assessments, approvals, and required actions. secure document exchange: centralized repository for contracts, certifications, and audit reports. automated notifications & reminders: ensures timely responses and document submissions. integration with risk assessments: direct linkage between supplier data and ongoing TPRM processes. This update will increase efficiency, reduce manual follow-ups, and improve transparency in supplier risk management
Enhanced gamification
To enhance engagement and compliance, gamification elements will be introduced in third-party risk management (TPRM) and internal control processes. This will encourage user participation, improve adherence to risk policies, and create a more interactive experience. Key Enhancements achievement tracking: users earn badges or points for completing assessments, mitigating risks, or improving control effectiveness. leaderboards & progress indicators: visibility into team and individual performance to drive engagement. streaks & rewards: incentives for maintaining consistent compliance and timely risk management actions. interactive challenges: scenario-based quizzes or simulated risk events to reinforce best practices. This update will increase user motivation, improve risk awareness, and drive more proactive risk and control management