ThirdSentry

What it does

AI assistant

Effy drafts policies, reconciles vendor signals, and answers security questionnaires with cited evidence; a human approves changes.checked 7 Oct 2026

AI hosting

The security page says AI inference runs on AWS Bedrock via STS AssumeRole and embeddings use Titan v2.checked 7 Oct 2026

API

The API exposes vendors, controls, evidence, policies, assessments, and risks, with REST, JSON, an OpenAPI spec, and webhooks.checked 7 Oct 2026

Integrations

The integrations page lists 250+ providers across categories including cloud, identity, code, HR, ticketing, CRM, accounting, file storage, and security tooling.checked 7 Oct 2026

Pricing and users

The pricing page says plans use flat fees with unlimited users and that framework expansion determines the pricing tier.checked 7 Oct 2026

Product

ThirdSentry describes itself as an agentic GRC and third-party risk management platform for regulated companies.checked 7 Oct 2026

Questionnaires

The product answers SIG, CAIQ, and custom questionnaires from company evidence, with each answer citing its source.checked 7 Oct 2026

Security controls

ThirdSentry states it enforces server-side tenant isolation, logs mutations in an append-only AuditLog, and encrypts data in transit with TLS 1.2+ and at rest with AES-256.checked 7 Oct 2026

Security review support

ThirdSentry says it responds to standard security questionnaires within two business days.checked 7 Oct 2026

Target customers

The company says it is onboarding design partners across fintech, insurance, healthcare SaaS, and regulated B2B SaaS.checked 7 Oct 2026

Unified risk data

The platform combines internal compliance posture and vendor risk posture on one data model.checked 7 Oct 2026

Vendor monitoring

It compares vendor-assessed posture with live external exposure and routes mismatches into owner alerts and remediation tasks.checked 7 Oct 2026