Score one relationship in a few minutes. Criticality sets the weight, eight domains set the inherent exposure, and control evidence reduces it to a residual rating that decides how deep the due diligence goes.
Nothing is transmitted or stored. The calculation runs in your browser; close the tab and it is gone.
Criticality is about the service, not the supplier's size.
What the third party can actually show you, not what the contract promises.
Rate the exposure before any controls are considered. 1 is negligible, 4 is severe.
The scoring model is published so it can be challenged. Members receive the same model as a spreadsheet with portfolio roll-up, an evidence register and the mapping from residual rating to the KPI library.