Security PoliciesFree trial Risk AssessmentFree check CONTACT US

NEW SUPPLIER & PRODUCT RISK ASSESSMENT

Check It Properly Before You Sign, Connect or Go Live.

New software, a new supplier, an outsourced build or an AI tool: each one gets access to your data, your systems or your money. Find out how exposed you would be and what to fix first, in plain English, before you commit.

Start the Free Risk Check → See Pricing
  • Free check in about 5 minutes
  • Instant exposure tier and top risks
  • No supplier names needed

WHY IT MATTERS

Most Breaches Now Come Through Someone You Trusted

Suppliers Hold Your Data

Cloud apps, payroll providers and IT contractors hold or reach your data. If they are breached, the breach is still yours to explain to customers and regulators.

The Contract Is Your Only Leverage

Breach notice, data return, liability and exit terms are easiest to get before you sign. After go-live, you take what you are given.

Insurers and Customers Ask

Cyber insurers, auditors and larger customers increasingly ask how you assess suppliers. A written assessment is the answer they are looking for.

HOW IT WORKS

From a 5-Minute Check to a Clear Go, Go-With-Conditions or Stop

  1. Take the free check

    Answer 17 plain-English questions about how it will work in your business. See your exposure tier and top three risks straight away.

  2. Go deeper if it matters

    The full questionnaire adds the supplier, the product and how it connects to your systems. Only the areas that apply to you are asked.

  3. Upload the evidence

    Every “Not sure” becomes a specific request: the contract, a certificate, a test report. Upload them in your client portal.

  4. Get a written assessment

    A senior practitioner reviews it all and delivers a risk assessment report with a clear recommendation and the conditions to put in place.

WHAT'S ASSESSED

Ten Key Facts Decide What Applies. Nothing More.

A simple software subscription gets far fewer questions than a custom build connected to your payroll. Small businesses without their own IT team get plain wording and skip the enterprise-only questions.

Agreements and ownership

Every assessment

What is actually signed, what was only promised, who owns it once it is running, and what happens when it ends.

Data, privacy and access

When data or logins are involved

Where your data goes and stays, overseas transfers, breach notification, logins, MFA and whether you can cut off access yourself.

Build, hosting and continuity

When it is built, hosted or relied on

Secure development and testing, who patches and monitors it, backups that have been restored, and a way out if the supplier fails.

  • Data handling
  • Privacy and overseas data
  • Logins and access
  • Connections and data accuracy
  • Technical ownership
  • Hosting and running it
  • Secure development
  • Supplier and contract
  • Continuity and exit
  • People and conduct
  • AI use
  • Agreements and ownership

PRICING

Check It Free. Then Pay Only for the Depth It Needs.

Free Risk Check

$0

As many as you like

  • About 5 minutes, no supplier names needed
  • Exposure tier from 1 to 4
  • Your top three risks in plain English
  • The areas a full assessment would cover
  • Result on screen and by email
Start the Free Check

Fixed price by tier

Supplier Risk Assessment

From $690 + GST

Your free check tells you the tier, and the price, before you start.

  • Tier 1, light-touch record: $690 + GST
  • Tier 2, standard assessment: $1,650 + GST
  • Tier 3, with independent assurance: $3,950 + GST
  • Tier 4, with executive sign-off: $6,950 + GST
  • One supplier or product and one use case
  • Every risk area that applies, with evidence review
  • One round of follow-up questions to the supplier
  • Written report with a clear recommendation and conditions
  • Progress, uploads and the report in your client portal

Penetration testing or code review by a testing firm is not included. Where your tier needs it, we review the results.

Start With the Free Check → Or book a free call

QUESTIONS

Frequently Asked Questions

What can I assess?

Anything you are about to rely on: a cloud or SaaS product, a payroll or finance system, an IT or managed service provider, a developer or agency building something for you, a contractor working inside your team, or a tool that uses AI on your data.

Why does the free check not ask which supplier it is?

So you can check something before it is public, and so the result is about how it will work in your business, which is where most of the risk sits. The full assessment does name the supplier and product.

What does “Not sure” do to my result?

It counts. Every “Not sure” is treated as a risk until the supplier gives you evidence, which can push your tier up. Your result lists exactly what to ask them for.

How is the tier worked out?

From how critical it is to your business and ten key facts: who delivers it, whether software is built for you, whether your data leaves your systems, connections, outside access, where it runs, personal information, dependency, changes to core records and AI.

Is the free check a risk assessment?

No. It is general guidance based only on your answers, designed to show whether a proper assessment is worth doing. The full assessment reviews the evidence and is written by a senior practitioner.

Five Minutes Now Beats Five Months Unwinding a Bad Contract.

See your exposure tier and top risks before you sign. Free, no credit card, no supplier names needed.

Start the Free Risk Check → Book a Free Call