Platform Improvements - September 2026
Another update brings another batch of improvements and new features to the 3rdRisk platform. So, without further ado, let’s dive into the latest changes.
Key changes
Assessments
Optional questions: Last month we brought conditional questions. This time we’re bringing you its brother: optional questions.
You can now choose if a question is required or not, allowing your supplier to submit a response without answering every single one, instead of getting stuck on a question that isn’t actually essential.
Contract management
Keep a colleague in the loop: Add a CC email address at contract level for incoming assessments, so a colleague gets a copy without you needing to forward it manually.
Notifications reach the right person: Contract, third-party and assessment notifications now go to the assigned contract manager or business owner, rather than whoever happened to create the record, so the right person hears about it even if they joined the file later.
EBA compliance
If you report against the EBA Guidelines on outsourcing arrangements, then this is by far the most important section for you.
Deeper contractual and sub-outsourcing detail: Maintain a record of the contractual safeguards regulators expect, such as agreed service levels, mandatory insurance, data access on insolvency, a regulator cooperation clause and a BRRD reference, plus full detail on sub-outsourcing, including where each named subcontractor is registered and where your data actually sits.
Improved autofill: Upload an agreement and Lexi’s contract analyzer now auto-fills every field the register needs, not just the original set, and records why an arrangement is classified critical or important, who signed off on that, and its audit dates.
Outsourcing register, ready for export: Generate an EBA outsourcing register export straight from the platform, a cover sheet plus three data sheets in Excel, with a built-in check that flags any required field still missing before you send it anywhere.
On top of this we also added cloud service model and deployment model fields for cloud outsourcing arrangements, and made some changes to ensure eight existing contract fields are marked and exported, so they now come through correctly as EBA register data.
Ecosystem country risk map
See where your risk actually sits: The Ecosystem page has a new Country Risk tab: a world map with every country colored by its risk level.
Hover for the level, click through for that country’s AI risk profile and recent news, or create or link a risk or issue without leaving the map. The existing supply-chain tree diagram keeps its place, now on a tab of its own alongside it.
Individual & entity screening
One view for company and individual hits: Your risk profile gets a dedicated tab for sanctions and PEP screening, plus a matching tab for individuals connected to a third party, such as directors or beneficial owners. Add someone yourself, or let Lexi flag them automatically.
Anything Lexi finds stays marked as unconfirmed until you check it, so nothing slips through without a second pair of eyes, and your catalog’s compliance indicator updates the moment a hit comes in.
Overall Risk Profile
A risk score you can trust: The Overall Risk Profile is now one fully configurable, calculated score, combining inherent risk, assessment results, sanctions and country risk, with the weighting behind it set by your organization.
It replaces the old manual “Risk Profile” field, so the badge on a third party’s record reflects the same formula every time, rather than whoever last had a hunch about it.
Set the weights yourself: Decide how much inherent risk, assessments, sanctions and country risk each count for, tenant-wide, from your own configuration screen, rather than living with a fixed formula.
Change the balance as your risk appetite shifts, and every score across the catalogue recalculates to match. This way the scores you see always line up with your organization’s priorities.
Self-service & administration
Restoring users: Admins can now restore an archived user directly, instead of filing a request and waiting for us to do it.
Set up registration forms yourself: Configure the fields, owners, coordinators and messages on your registration forms without raising a support ticket.
Third-party catalogue
A ready-made risk report: Generate a Third-Party Risk Report straight from the catalogue. Preview it on screen, then download it as a PDF whenever you need one for a file, a meeting with the board, or an auditor.
Heads-up before you create a duplicate: Adding a third party that shares a VAT, DUNS, KvK or reference number with an existing record now gets blocked outright, and a shared name and country gets a softer warning. Either way, you get to spot the duplicate before it’s officially in the system, instead of realizing months later.
One action plan, many third parties: Link a single action plan to several third parties at once, instead of duplicating it for each one and losing track of which copy is current.
UK material third party register (PRA/FCA)
If you're preparing for the PRA, FCA and Bank of England's joint third-party reporting requirements (PS7/26), effective 18 March 2027, you can start building your register now rather than scrambling closer to the deadline.
A UK register, ready for compliance: Put any contractual arrangement into UK scope alongside DORA or the EBA guidelines. Every field the Form M notification and Material Third Party (MTP) Register ask for, now has a place on the contract, matched field-for-field to the FCA's own templates.
Only asked what applies to your firm: Materiality reasons, impact tolerances and supervisory objectives are driven by the supervisory authority or authorities on your organisation profile, so an arrangement only surfaces the questions relevant to you, whether that's the PRA, the FCA, or both.
Know what's missing before you submit: A dedicated UK register health check shows your overall completeness, flags exactly which arrangements and fields still need attention, and takes you straight into the contract to fix it.
Export in the format regulators expect: Generate the MTP Register export or a Form M notification for a single arrangement, in the FCA's own template structure and wording, ready for submission via RegData or FCA Connect.
Quality of life changes
API documentation: Published, up-to-date documentation for the third-party and action plan APIs, for anyone on your team integrating with 3rdRisk directly.
Contract setup from the catalogue: Create a default contract, individually or in bulk, directly from the third-party catalogue instead of hitting an empty dropdown.
Faster contract screen: Dropdowns in the contract screen now search live instead of loading every option upfront, so it opens and responds noticeably quicker.
Filter memory in the control library: The control library now remembers your filters, search and page position after you save an item, instead of resetting.
News monitoring where you’d expect it: News monitoring moved from a standalone pop-up into a tab on the third-party record itself, with a badge flagging anything that needs your attention.
Unlink an issue without starting over: Remove a linked issue from a control assessment, with confirmation and a full audit trail, instead of being stuck with it once it’s linked by mistake.
Looking ahead
Restoring an archived user landed this time, and the same workflow is coming to third parties, contracts and action plans too. We’re also in the final stretch of testing our DocuSign integration, so accepting a signed contract won’t mean leaving the platform to chase it. The final step of our Slack is ready, so expect that in the coming week.
Further out, we’re teaching the platform to spot who supplies your suppliers, so the tier just out of sight today stops being a blind spot. And lastly, published API documentation is just another piece of the developer portal puzzle, with much more to come every week!
Questions or cool ideas? You can submit a feature request, or a send us a bug ticket. Check our roadmap to see what else is coming.
Stay tuned, there’s plenty more on the horizon.
- 3rdRisk Product Team