Profile

The Third Party Profile provides a centralized view of the information collected about a vendor. This information is used by Narad to understand the vendor's risk profile and determine the controls and assessment requirements that apply to them.

The profile is organized into several sections.

Basic Details

Capture the vendor's core information, including:

• Company Legal Name

• Website

• Vendor Status

• Classification

• Business Dependency

• Service Type

• Data Sensitivity

These details provide the foundation for understanding the vendor and its relationship with your organization.

Data Handling & AI

This section captures how the vendor interacts with your organization's data and technology environment, including:

• Data Handling Mode — How the vendor handles your data.

• Access Level — The level of access provided to the vendor.

• AI Usage — Whether the vendor uses AI to process your data.

• Hosting Model — How and where the vendor's service is hosted.

• Secrets Handling — Whether the vendor handles credentials or other secrets.

This information can be used to determine the security controls that are relevant to the vendor.

Administrative Details

Capture information needed to manage the vendor relationship, such as:

• Contact Name

• Contact Email

• Contract Start Date

• Contract Renewal Date

• Review Frequency

• Business POC

• Additional Information

Keeping these details updated helps teams manage vendor reviews and maintain important business contacts.

Keep Informed

Add users who should receive communications or stay informed about activity related to the third party.

This can help ensure the appropriate stakeholders are included in vendor-related communication.

Retire Third Party

When a vendor relationship is no longer active, you can Retire the third party.

Once retired, the third-party record becomes read-only, helping preserve the historical record while preventing further changes to the vendor profile.