Assessment templates
Start with built-in NIS2 supplier risk, ISO 27001, GDPR Article 28 full and lite, and concentration-risk questionnaires. Customise them or create your own.
Product features
Supplier risk work, connected from assessment to report
Collect consistent evidence, record findings and keep follow-up visible in one lightweight system designed for recurring supplier oversight.
Supplier questionnaires
Send suppliers a response link with no portal account required. Track status and due dates while keeping each completed assessment attached to its supplier.
Findings
A finding records a control gap or weak response, its severity, recommended action, status and contribution to risk. It turns assessment evidence into follow-up work.
Inherent and residual risk
Inherent risk is the exposure before controls are considered. Residual risk is what remains after controls and remediation. Supplira keeps both visible over time.
Reminders and follow-up
Set due dates, send automatic reminders and see overdue assessments so recurring oversight does not depend on personal spreadsheets and calendar notes.
Audit history
Maintain account activity and assessment history to support internal review and demonstrate that supplier risk decisions were followed up.
Executive reporting
Generate a management-ready report covering current posture, suppliers with the highest residual risk, finding themes, overdue work and recommended actions.
Internal classification
Classify business criticality, data access, system access and legal posture before sending a questionnaire, helping teams prioritise effort by exposure.
Exports and oversight
Use the dashboard to see programme status and, on applicable plans, export data for further review and reporting.