GRC FlowGRC Flow
  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
FeedbackSign inGet started
  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
  • Share feedback
  • Sign in
GRC Flow

Governance, risk and compliance workspace: policies, risk assessments, gap assessments and evidence that stay connected.

Product

  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
  • About

Frameworks

  • ISO/IEC 27001
  • GDPR
  • NIS2
  • DORA
  • HIPAA
  • PCI DSS

Legal

  • Terms
  • Privacy
  • Legal notice

© GRC Flow

  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact

Run Third-Party Risk Assessment

No account needed. Answer a few questions, pay securely, and receive your deliverable right away.

Your company

Your company

The company named in the deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Deliverable

Deliverable

Its title, its author and its structure are yours: they steer what is written.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

As it will appear on the deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Shown as the author of the deliverable; never filled in by the AI.

Third party

Third party

Who is assessed.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Function responsible for this relationship.

Service and dependency

Service and dependency

How much the business relies on it.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Nature, objectives and scope.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Access to systems and data

Access to systems and data

What it can reach.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Categories only, not the data.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Which systems, which privileges, how it connects.

Information security

Information security

What it has stated or shown.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Compliance and data protection

Compliance and data protection

Certifications are stated as supplied.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

E.g. “ISO 27001 until 03/2027”.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Continuity and incidents

Continuity and incidents

What happens when things go wrong.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Finances and contract

Finances and contract

What protects the business.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Evidence

Evidence

What was actually received.

DocumentDateWhat it shows

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

One row per entry, e.g. “ISO 27001 certificate; 12/03/2026; Scope covers the hosting platform only”

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Anything the service should take into account.

What the AI provider receives

Your answers, to write this deliverable.

Replaced first, then put back in your deliverable: Email addresses, People's names, Company names.

€1.00

What a free account adds

Running a service never requires an account. An account adds:

  • Your company details filled in for you on every form
  • Every result saved, reusable as a source by any service
  • Results editable in the browser and in the layout editor, with their saved versions
Create a free account