Frequently Asked Questions

We allow unlimited user accounts. There are no per-user or per-seat fees.

Yes, VendorRisk does allow for SSO authentication. We have tested with SSO providers such as ADFS, Azure, Okta, PingOne and OneLogin.

Yes, you can enable MFA for your site. If enabled, each user can use Google Authenticator as an additional security measure.

VendorRisk should work on all current versions of the major browsers, such as Google Chrome, Firefox, Safari and Microsoft Edge. The only other requirements are that the browser has JavaScript enabled and can accept cookies.

Yes, we use responsive design to ensure that you can sign in and access your VendorRisk information from smartphones and tablets. The site will automatically detect that you're on a mobile device and adjust the user interface accordingly.

We provide the ability to export to Excel, and your developers can use our API to programmatically pull data from your VendorRisk site.

We allow unlimited document uploads and storage space. Each document can be up to 100 MB in size. For security purposes, file types are limited to well-known formats such as Word, Excel, PDF and ZIP.

VendorRisk uses the SendGrid service to send emails from the application, and we follow all their best practices and recommendations to ensure that your company's mail server will correctly handle emails sent from VendorRisk. If you do have issues receiving email, we can work with your IT department and SendGrid to help troubleshoot the problem.

Yes, all modules support at least 5 custom fields. The Vendors module supports up to 50 fields and the Contracts module up to 40. The fields can be: textbox (single-line), textbox (multi-line), date field, yes/no radio buttons, or dropdown items.

Yes, VendorRisk is only available as a web-based hosted application developed, maintained and hosted by us. It cannot be installed within your company's internal network.

Our hosting infrastructure resides in the US-East-2 region of Amazon Web Services.

Yes, Amazon allows registered users to access SOC reports via its Artifact service. We can also provide copies of those.

We run weekly vulnerability scans with Intruder, and we conduct manual, AI-driven security analysis of our source code. We also use Trust Guard's daily website scan to alert us to potential security concerns. The results from the latest scan are public.

Yes, all requests to your VendorRisk site require TLS encryption to prevent eavesdropping and tampering. All emails sent through VendorRisk use TLS encryption.

Passwords are encrypted in the database and never sent over email. VendorRisk personnel cannot see user passwords.

By default, passwords must be at least 6 characters long. However, your site admin can implement the following:

• Required number of characters, lower-case letters, upper-case letters, digits and symbols
• Cannot contain user's first name or last name
• Cannot use common passwords like "password", "123456", etc.
• Must be changed every 30 days, 60 days, 3 months or 6 months
• Cannot use a password used in the past year

Yes, after 10 unsuccessful login attempts, the user is locked out. The lock lifts after two hours, or sooner if your site administrator or VendorRisk personnel unlocks the account.

Yes, all files moved to Amazon's servers are marked as private and can only be accessed by signing in to your VendorRisk site first. Documents are encrypted "at rest" at Amazon. They are only decrypted when transferred to VendorRisk and displayed or downloaded to the user's computer.

All your uploaded documents are backed up to a separate Amazon S3 region (West Coast US), and the database is backed up several times a day to local and remote locations. Your site administrator can also turn on weekly backups: every Sunday we export your site's information to Excel files, and the files uploaded that week are packaged into a ZIP file. Site administrators can download both from your VendorRisk site.

Tech support is provided for free. We are accessible via a toll-free number, email and a web-based support form located inside your VendorRisk site.

Of course, we love to hear feedback. When a suggestion is made, we determine if we feel it makes sense. If it does, then we'll add it to our development list. If it doesn't, then we'll tell you why we don't feel it's appropriate at this time.

We do not offer on-site training sessions. If you have questions about any aspect of the software, you can request a web-based training session. We do not charge for web-based training.

Yes, unlike many SaaS providers that have a generic Terms of Service, we have a formal contract that is signed by both parties prior to an invoice being sent. This gives your legal team the ability to review the contract and suggest tweaks or changes.

Yes, Skeey Interactive guarantees that the Service will be available at least 99.5% of each month. Uptime status will be based on Pingdom's public report. In the event that the Service fails to meet this expectation in a given month, the customer will be given an additional month of Service usage at no charge, which will be added to their current subscription's expiration date.

No. About a month prior to your subscription expiration, we will generate an invoice and send it to your account owner. If you are a satisfied customer and want to continue with your current plan, then you can pay the invoice and your subscription will be extended. If you decide to upgrade/downgrade your plan by adding or removing modules from your subscription, then you can let us know and we'll send a revised contract with the updated pricing.

Yes. Because VendorRisk is pre-paid and there are no refunds, you typically wouldn't cancel in the middle of your subscription — rather, you would just let us know you don't plan on renewing when we send the following year's invoice. If you do cancel, then we'll work with you to return all uploaded documents and a Microsoft Excel copy of your data. Cancellations will be processed within a business day.

VendorRisk is only offered as an annual subscription paid in advance.

We do not offer refunds once you have pre-paid for the annual subscription.

Yes, we offer a 30-day trial after we've had the introductory phone call and at least one web-based demo with your company. During the trial, you have full access to everything VendorRisk offers, so you can decide if the product is for you and what modules your company would likely require.

VendorRisk modules are available on an à la carte basis, so your annual fee will only go up (or down) if you change the modules your company wants to use.