Report library › Vendor and supply chain
Vendor and supply chain
Vendor security document review
A SOC 2 report or ISO 27001 certificate: period, opinion, exceptions, carve-outs.
300 credits · $30at list price
Free credits cover the preview; the full report costs what the pill says. Results are for review by a person, not decisions.
InackGuard · Vendor security document review · sample, fictional subject
DOCUMENT · PERIOD, OPINION, EXCEPTIONS
Alder Supply Co · attestation report
Report period12 months · ends 4 months ago
Auditor opinionUnqualified
Exceptions noted6 · 2 relevant to you
Complementary user controls9 listed
Subservice organisations2 · carved out
Sealed recordHashed, replayable
Two exceptions touch your data. Access review and change management exceptions; both remediated per management response. Quote on page 41.
[1] Quoted from page 41 of the report
Coverage: Full report readPDFJSONSealed record
Evidence chain intact
PRICE
300 credits · $30
DELIVERY
Seconds to minutes
OUTPUT
PDF, JSON and a sealed record
WAYS IN
App, API or file
What you get
Flags for stale, Type I only, qualified or missing criteria
Every point quoted from the document with its page
Questions to ask the vendor
A sealed record
Every finding citedSealed, replayable recordA person decides
EXCEPTIONS
ACCESS REVIEWSLate in Q2 · remediated
CHANGE APPROVAL2 of 25 sampled · remediated
BACKUPSNo exception
VENDOR MANAGEMENTNo exception
YOUR CONTROLS9 to implement
From the same sample. Every line in the real report carries its source and date.
What it checks
Searched together in one pass.
1Report type and period
2The auditor's opinion
3Exceptions and carve-outs
4Scope and criteria covered
How it works
STEP 1
Enter the subject
A name, an identifier or a file; or call the API.
STEP 2
We check and cite
Every source searched together; every finding cited with source and date.
STEP 3
Preview, then open
The preview shows the result and the counts; open the full report at the price you saw.
STEP 4
Keep the record
Sealed as collected, replayable later, exportable for an auditor.
Questions
Does it check the auditor?+
It records who issued the report; it does not assess the auditor.
Is my document kept?+
Document text is deleted after 30 days.
Is there a free preview?+
Yes. A preview shows the headline result and top findings before you pay to open the full report.
Is this a decision?+
No. Every report supports a person's decision and says so.
Can I keep the record?+
Yes. Every report has a sealed, replayable record you can export.
Good to know
English, text-based files
Not an audit
Results support a person's decision; they are not decisions and not for employment, housing, credit, lending or insurance eligibility.
Who it is for
Security and procurement reviewers
Compliance teams with vendor oversight
Startups buying cloud services
When to use it
During vendor onboarding
At annual review
Related vendor and supply chain reports
Run the Vendor security document review on your own subject.
Free preview, no card. The price is shown before it runs.
InackGuard