Supplier audit
Know who you are doing business with before you sign
We audit your suppliers on privacy, information security, and responsible AI, each against the standard applicable to that specific supplier. We determine which suppliers are critical to you, map the supply chain, and provide a clear assessment.
- Privacy & GDPR
- Information Security
- Responsible AI
Why it matters
Your supplier is your weakest link
Most incidents originate via a third party. Yet, suppliers are rarely truly audited, and organizations often do not even know how critical they actually are.
The leak comes from outside
A weak supplier is an open door to your own systems and data. Their risk becomes your incident.
Not every supplier is equally critical
An indispensable partner deserves a more rigorous assessment than a standalone tool. That is why we first determine who is critical.
You are responsible for the supply chain
NIS2 and the GDPR hold you accountable for what your suppliers and their sub-processors do. A claim on paper is not evidence.
The audit
From criticality to supply chain, in one audit
We first determine how critical the supplier is to you, then audit for privacy, information security, and AI against the applicable standard, and map the entire supply chain. You receive a single weighted assessment.
Determining criticality
Is this supplier critical to your organization? We determine that first.
01
Privacy and GDPR
Data Processing Agreement, sub-processors, retention periods, and reporting obligations.
02
Information security, against the standard
Audited against the applicable standard: ISO 27001, NEN 7510, SOC 2, or another standard, verified at the source.
03
Responsible AI
AI functions, data usage, training, and risk class under the EU AI Act.
04
Mapping the supply chain
Sub-processors and fourth parties in view, not just the direct supplier.
05
25.000+
protected users
330+
projects completed
15
specialists
20+
years of experience
Standards
Whatever standard your supplier uses
Suppliers work with various standards. We audit against the standard applicable to that supplier and verify the certificate at the source. The following are examples, not the full list.
What you receive
A report you can act on immediately
One clear assessment
No pile of raw scores, but a clear statement that allows you to make an immediate decision, weighed against how critical the supplier is to you.
Risks with remedies
Each risk ranked by severity, with a concrete solution alongside it.
Criticality and supply chain mapped
The supplier classified, and the sub-processors behind them in view.
Control that lasts
Not just one audit, but your entire supply chain in order
The audit is just the beginning. The result is logged in the ID Control GRC system, where every supplier is classified by criticality and the supply chain is visible. We set it up for you and provide ongoing advice.
- Suppliers classified by criticality
- Supply chain and sub-processors in view
- Audits, risks, and measures in one place
How it works
Certainty in four steps
1
Order and specify
You order the audit and specify the supplier and the service.
2
We determine and request
We determine the criticality and request the supporting evidence.
3
We audit
Audited against the applicable standard, at the source, including the supply chain.
4
You gain control
Report with assessment, directly in your GRC system.
Our package
Order directly or give us a call
Know exactly what you pay. The price is clearly listed in the shop. Unsure about the approach for multiple suppliers? Call us.
Supplier audit
We audit your supplier on privacy, information security, and responsible AI, each against the applicable standard. Includes criticality determination, supply chain mapping, and a report with an assessment.
€1,620
per audit · excl. VAT · volume discounts available
- Audited against the applicable standard (ISO 27001, NEN 7510, SOC 2, etc.)
- Criticality determined and supply chain in view
- Results directly in your GRC system
Prefer to discuss first? Call +31 888 SECURE (732873)
Get your supply chain in order
Order the supplier audit in the shop or call us directly. We determine the criticality, audit against the correct standard, map the supply chain, and maintain it in your GRC system.