Platform Improvements - October 5, 2026

While this update may seem a bit smaller on the surface, there are still some heavy-hitters in the mix. From new integrations and an addition to the content hub, to a very interesting preview at some upcoming “agentic” changes.

Grab a cup or glass of your favorite beverage, and let’s dive into the latest and greatest in the 3rdRisk platform.

Key changes

N-tier mapping

Map who supplies your suppliers: Your third-party catalog can now surface N+1 (sub-supplier) relationships automatically. For AI-enabled tenants, an AI agent identifies likely sub-suppliers behind your direct third parties and adds them to the catalog as "Identified" rows.

The catalog itself now shows this structure visually too, with sub-suppliers nesting under their parent third party and expanding in place, so you can see your extended supply chain at a glance instead of hunting for it.

AI Document Analyzer

Analyze multiple documents at once: You can now upload and analyze several PDFs in a single batch instead of one at a time, cutting down on repetitive manual work when you're reviewing a stack of contracts, policies or certificates.

DocuSign integration

Sign without leaving the platform: Send a document for signature directly from the action menu on a contract, pick your signers, and the platform handles the rest.

Status updates flow back automatically as each signer completes their part, and the fully signed PDF lands back on the contract record when everyone's done.

Customization & configuration

Give risk domains their own identity: Risk domains can now carry their own name, level names and colors, independent of the Overall Risk Profile, so the labels and colors you see reflect how your organization actually talks about risk.

Make the assistant your own: Tailoring the platform to fit your organization’s branding and culture has become even easier. Admins can set a custom name and picture for the AI assistant themselves, no support ticket required.

Archiving

Archive and restore third parties, contracts and action plans: Third parties you no longer work with can now be archived straight from the overview action menu, and found again later with an "Is archived" filter.

Archiving a third party triggers a pop-up, showing you the contracts and action plans that will be archived with it in one all-or-nothing action, with a confirmation summary before anything changes.

Changed your mind, or archived something by mistake? No worries, you can easily restore a third party, contract or action plan from the same menu, and anywhere else a record references an archived third party, you'll now see its real name with an "archived" marker instead of a blank field.

Quality of life changes

• API coverage grows: Contracts (create/update) and Questionnaires (read) have joined the v2 API, alongside generic configuration-list endpoints and updated documentation.

• SecurityScorecard in Predictive Risk: SecurityScorecard cybersecurity scores now feed into the Predictive Risk Profile and appear as tracked events on the dashboard widget.

• Automatic Slack sync: Linking Slack accounts to users is now automatic, saving admins the manual setup work & ensuring everyone gets their notifications.

• Self-service BusinessRadar: BusinessRadar activation and syncing now runs on its own schedule, with no developer involvement needed.

• World map home view: The ecosystem world map now opens centered on your own organization's region, instead of defaulting to a fixed world view.

• Bulk answer reset: Reviewers can reset the adjusted answer on several assessment questions at once from the bulk actions menu.

• Consistent risk exports: Risk profile and third-party exports now both include Overall risk and Inherent risk side by side, using the same wording you see on screen.

Content Hub

Sapin II framework

A new Sapin II framework, with a matching anti-corruption questionnaire, is now available. Sapin II is France's anti-corruption law requiring large companies to vet third parties and prevent bribery, and the new framework lets you assess third parties against it directly in 3rdRisk.

Looking ahead

We're building our first autonomous agent: the Assessment Review Agent. As soon as an assessment is submitted, it will review every question against contract obligations, compliance frameworks, risk profiles, sanctions results and prior assessment history, and prepare a suggested outcome before a human reviewer ever opens it. This is the biggest step in our AI roadmap yet, and it's already taking shape.

Alongside it, we're rolling out an MCP server, so AI clients can query and act on your platform data directly. The foundation and the Third Party module are built and awaiting release, while Contracts, Risks, Issues, Action Plans, Risk Domains, Assessments, Questionnaires and Users modules are all actively in progress.

And our API keeps expanding, with more endpoints and read/write coverage on the way.

Questions or cool ideas? You can submit a feature request, or a send us a bug ticket. Check our roadmap to see what else is coming.

Stay tuned, there’s plenty more on the horizon. 

— 3rdRisk Product Team