Compyl Vendor Risk Management
Compyl Vendor Risk Management supports vendor reviews from initial intake through ongoing monitoring.
What Compyl Vendor Risk Management is
Compyl Vendor Risk Management supports vendor reviews from initial intake through ongoing monitoring. Customizable intake forms and approval workflows gather information before contract signature. Teams can use SIG, SIG Lite, prebuilt templates, or category-specific custom questionnaires for assessments. Standard scoring models flag vendors with higher-risk security postures, while scheduled reassessments and posture alerts help identify changes between reviews. Vendor records link to contracts, assets, and controls, and risk can be mapped to framework controls. Compyl says it supports 125+ integrations, including AWS, Azure, Okta, GitHub, CrowdStrike, Jira, ServiceNow, Workday, Salesforce, and NetSuite. The service is available through web and API; Compyl describes customer environments hosted on Azure Web Apps and a REST API using HTTPS-secured calls. Compyl says it maintains an independently audited SOC 2 Type II and encrypts data at rest with AES-256 and in transit with TLS. Vendor Risk Management is included in Growth and Enterprise annual subscriptions, quoted individually. The pricing page offers a demo and itemized quote; no free trial is stated.
Good
- Custom intake forms and approval workflows.
- Supports SIG, SIG Lite, templates, and custom questionnaires.
- Scheduled reassessments and alerts surface emerging risks.
- Vendor records link to contracts, assets, and controls.
- Compyl states it supports 125+ integrations.
Watch out
- No free plan or free trial is listed.
- Pricing is quoted individually.
- Vendor Risk Management is listed in Growth and Enterprise, not Core.
Who it suits
The product is aimed at security teams, compliance officers, risk managers, procurement teams, and executives managing vendor risk.
Verdict
Compyl covers vendor intake, assessment, linked records, and continuous monitoring. Organizations should note that the feature is included in Growth and Enterprise, with individually quoted annual pricing.
Plans and prices
From Compyl Vendor Risk Management's own pricing page, checked 4 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Core | — | Vendor Risk Management listed in Growth, not Core · Annual subscription; individually quoted |
| Enterprise | — | Includes everything in Growth; advanced integrations and API access · Annual subscription; individually quoted |
| Growth | — | Includes Vendor Risk Management and Third-Party Insights · Annual subscription; individually quoted |
The facts
Each one read from Compyl Vendor Risk Management's own pages, with the date it was checked.
What it does
- Assessments
- The product supports SIG, SIG Lite, prebuilt templates, and custom questionnaires by vendor category.checked 4 Oct 2026
- Connected records
- Vendor records link to contracts, assets, and controls, with risk mapped to framework controls.checked 4 Oct 2026
- Hosting and API
- Compyl says it hosts customer environments on Azure Web Apps and uses a REST API microservices architecture with HTTPS-secured calls.checked 4 Oct 2026
- Intake
- Customizable intake forms and approval workflows collect vendor information before contract signature.checked 4 Oct 2026
- Integrations
- Compyl states it supports 125+ integrations, including AWS, Azure, Okta, GitHub, CrowdStrike, Jira, ServiceNow, Workday, Salesforce, and NetSuite.checked 4 Oct 2026
- Intended users
- The vendor risk page identifies security teams, compliance officers, risk managers, procurement, and executives as intended users.checked 4 Oct 2026
- Monitoring
- Scheduled reassessments and posture alerts help identify emerging vendor risks between assessments.checked 4 Oct 2026
- Pricing
- Compyl describes pricing as an annual subscription quoted individually; Vendor Risk Management is included in Growth and Enterprise.checked 4 Oct 2026
- Purpose
- Compyl manages the vendor lifecycle with intake, due diligence, assessments, risk scoring, connected records, and continuous monitoring.checked 4 Oct 2026
- Scoring
- Standard scoring models flag high-risk vendors based on their security posture.checked 4 Oct 2026
- Security
- Compyl says it maintains an independently audited SOC 2 Type II and encrypts data at rest with AES-256 and in transit with TLS.checked 4 Oct 2026
- Support
- Compyl lists dedicated onboarding and support for Core, and named customer success managers with priority support SLAs for Enterprise.checked 4 Oct 2026
The company
- Founded
- 2020checked 28 Sep 2026
Money
- Trial or demo
- The pricing page offers a demo and itemized quote; it does not state a free trial.checked 4 Oct 2026
Alternatives to Compyl Vendor Risk Management
- 1
Strike Graph
Free planWebAPI6.9From $21,500 a year - 2
Secureframe
WebAPI6.2From $7,500 a year - 3
Vanta
WebAPI5.8 - 4
Anecdotes
WebAPI5.6 - 5
Scytale
WebAPISelf-hosted5.6 - 6
Thoropass
WebAPI5.6