# XGRC® XGRC® Compliance Hub

_Supplier & Third-Party Compliance_

**Your supply chain's compliance posture, visible in real time.**

Structured onboarding, vetting, and ongoing compliance management for suppliers, contractors, and third parties — with automated document expiry tracking, risk scoring, and compliance dashboards that give you a live view of your entire supply chain.

## What it is

Compliance Hub is an available solution within XGRC® Software that supports supplier, contractor and third-party compliance workflows, including onboarding, vetting, document collection, evidence management and ongoing assurance.

## Overview

XGRC® Compliance Hub provides a structured portal for supplier and contractor onboarding, document verification, and ongoing compliance monitoring — with automated expiry alerts, risk-based scoring, and real-time dashboards that replace email-based compliance management.

## When organisations use it

Organisations typically adopt Compliance Hub when supplier and contractor documents are managed through email with no owner for expiry dates, onboarding takes weeks of manual verification, and a site incident reveals a contractor's safety certification lapsed months earlier unnoticed.

## What it is not

Compliance Hub is not a standalone procurement system or ERP replacement. It supports compliance workflows around supplier, contractor and third-party governance within XGRC® Software — working alongside your existing procurement processes, not replacing them.

## Challenges it addresses

- **Certificates expire without warning** — Supplier documents managed through email. Nobody owns the expiry calendar. A non-compliant contractor arrives on site.
- **Onboarding takes weeks** — Manual verification, back-and-forth emails, documents in different formats. High-risk contractors cleared faster than low-risk ones because nobody applied the same standard.
- **No real-time supply chain view** — You cannot answer the question "which of our active contractors are currently compliant?" without running a spreadsheet exercise.
- **Incidents reveal undiscovered gaps** — A site incident exposes a contractor whose safety certification lapsed three months ago. Nobody noticed.

## Modules

- **Onboarding:** Supplier Registration Portal, Document Upload & Verification, Vetting Workflows, Approval & Rejection Management
- **Ongoing Compliance:** Document Expiry Tracking, Automated Renewal Alerts, Compliance Status Dashboards, Audit-Ready Evidence Store
- **Risk Management:** Supplier Risk Scoring, Risk-Based Monitoring Frequency, Non-Compliance Escalation, Performance Ratings
- **Reporting:** Compliance Summary Reports, Expiry Calendars, Supplier Performance Analytics, Regulatory Disclosure Support

## Standards & frameworks

- ISO 9001
- ISO 45001
- POPIA
- B-BBEE

## Frequently asked questions

### Does Compliance Hub replace our procurement system?

No. Compliance Hub manages compliance workflows — onboarding, vetting, document expiry, risk scoring — alongside your existing procurement system, not instead of it.

### Can Compliance Hub score supplier risk automatically?

Yes. Suppliers are risk-scored with monitoring frequency adjusted accordingly, so high-risk contractors get closer attention automatically.

### What happens when a supplier document is about to expire?

Compliance Hub tracks document expiry automatically and triggers renewal alerts before certificates lapse, rather than discovering the gap after an incident.

### Which standards does Compliance Hub align to?

Compliance Hub supports ISO 9001, ISO 45001, POPIA and B-BBEE compliance requirements for supplier and third-party management.

## Related solutions

- [SHEQX®](https://xgrcsoftware.com/sheqx)
- [XLOGIC®](https://xgrcsoftware.com/xlogic)
- [MSX®](https://xgrcsoftware.com/msx)

---

Source: https://xgrcsoftware.com/compliance-hub