Questions and answers
What people ask us.
If your question is not here, write to us.
The product
Who is it for?
UK service businesses with roughly 50 to 500 people and 30 to 300 technology and service suppliers, the IT, security, operations and compliance people who look after them, and the consultants who help.
Does it tell me whether a supplier is safe?
No. It organises the questions, evidence and reasoning so a person in your organisation can decide, and it records that decision. There is no supplier score, rating or badge.
Can I use my own questionnaire?
Yes. Start from the built-in security, privacy and resilience questionnaire, or build your own with branching, priorities and expected answers. You can also import and export questionnaires as Excel or CSV.
Does it check certificates against official registers?
Not automatically. Suppliers record the certificate scheme, number, issuer, scope and dates, and the number is shown as stated by the supplier. Your reviewers can check it and record that they did.
Is there any AI in it?
Not today. Your documents are not read by a model, and every decision is recorded by a person.
Can I get my data out?
Yes. Export a complete decision record as PDF and JSON, your supplier register as CSV, or everything your organisation holds.
Suppliers
Do suppliers need to pay or buy anything?
No. A supplier sets up an account from the invitation and answers for free.
Can a supplier see what we think of them?
No. Your reviewers’ notes, findings, risks and decisions are never available to suppliers. That is enforced in the database, not only hidden in the screens.
Can several people at a supplier help?
Yes. Any question can be handed to a colleague, who gets their own email and sees what they need.
Security and data
Where is our data stored?
In Amazon Web Services in London (eu-west-2). It is encrypted in transit and at rest.
How is our data kept apart from other customers?
Every request checks permissions, and the database separately enforces row-level security, so a fault in the application still cannot return another customer’s records.
How do people sign in?
By invitation only, with a password and a six-digit code sent by email, or with a Microsoft work account.
Is the audit history tamper-proof?
We describe it as append-only: the application can add to it but cannot change or delete it. Someone with full control of the database server could still alter it, so we do not call it tamper-proof.
The pilot
What does the pilot involve?
You use Vendwise with your own suppliers and tell us what works and what does not. We agree the scope and terms with each pilot customer.
How much does it cost?
We agree pricing with each pilot customer and have not published a price list yet. There is no charge per person.
See it with your own suppliers.
We are looking for a small number of early customers to pilot it with. Tell us how you look after suppliers today and we will show you how it would work for you.