Vendor due diligence as a service for organizations
Know your vendors before you rely on them.
KYV helps an organization register third-party vendors, run one-off checks in external sources, route findings to the right experts, and reach a documented, explainable approval decision.
One vendor, separate facts
- EvidenceVendor claim
- ScreeningNot run
- Expert reviewPending
- Inherent riskTo be assessed
- DecisionNot approved
Illustration only. Every kind of status is stored and shown on its own.
What is KYV
KYV (Know Your Vendor) is a service we provide to organizations to run due diligence on third-party vendors in a structured, repeatable and auditable way.
Each organization gets its own isolated workspace at its own address. Organization staff, not the vendor and not an algorithm, own the final decision.
How it works
Register the vendor
Capture the legal entity, the product or service, the data and access involved, and the ownership structure.
Run the checks
Send one-off queries to registries and screening providers. If a source has no automated access, a manual research task is created; a result is never invented.
Expert review
Compliance, security, privacy and other experts review what was found and record their own conclusion next to the raw source data.
Risk and decision
A configurable, rule-based model calculates inherent risk and an assurance score. The approval route depends on the outcome and can require several approvers.
Audit
Sources, query dates, criteria, reviewers, status changes and the decision are recorded and can be reproduced later.
Principles
Evidence of different strength is kept apart
A vendor's own statement, a partially verified fact and a confirmed one are never merged into a single status.
Nothing is "clear" without a check
A check that was not run or that failed is shown as exactly that. A potential match is not a confirmed match.
People decide
Automation prepares and calculates. A mandatory expert review that is still open blocks final approval; exceptions are never approved automatically.
Complete audit trail
Raw provider responses are never overwritten. The preliminary result and the reviewer's final result are stored separately.
BASIC package
For organizations that need a structured process for a limited vendor base.
Up to50 active vendors
Included
- Vendor registration and profile
- Product / service identification
- Offboarding checklist
- Simplified assessment: ownership and beneficial owners, compliance, security, privacy, continuity, financial standing
- Remediation, contract and approval workflow
- Simple configurable rule-based risk scoring with human override
- Manual reassessment
Not included
- Continuous monitoring: only one-off queries and manual reassessment
- Own assessment of fourth parties: declaration and an upgrade recommendation only
- AI and advanced automation
Professional and Enterprise packages are available on request. Pricing is discussed individually.
Security
We describe what the service is designed to do and do not claim what we cannot yet show.
Separate workspace per organization
Each organization works at its own address, with its data separated from other organizations.
Role-based access
Experts see the tasks of their own role; every action is attributed to a user.
Uploaded documents
Documents are intended to be scanned and stored in dedicated storage.
This website
It is static, uses no third-party scripts, no trackers and no advertising cookies, and does not connect to any organization workspace.
KYV does not currently claim any security certification or attestation. Details of security arrangements are discussed with the organization during the demo and the contracting process.
FAQ
Is KYV software installed at the organization?
No. KYV is provided as a service. Each organization gets its own workspace.
How does an organization employee sign in?
Use the link you received from your organization. The sign-in address is not listed publicly.
Does KYV decide whether to approve a vendor?
No. KYV calculates and routes. The decision is taken and recorded by the organization's approvers.
What if no automated source exists for a check?
A manual research task is created. The result is entered by a person with its source; it is never generated.
Does BASIC monitor vendors continuously?
No. BASIC supports one-off queries and manual reassessment.
Can the scoring rules be changed?
Weights, thresholds and triggers are configuration with versions, and each decision records the version used.
Request a demo
Leave your details and we will get back to you. Please do not include confidential information about vendors or customers in the message.