Use Case · XGRC Compliance Hub

Vendor compliance you can see, not just assume.

XGRC® enables organisations to onboard, vet, and monitor suppliers and contractors through a structured process. Every vendor document, expiry date, and risk score is tracked in one place, so third-party compliance status is always known.

Book a demo
The problem

Unmonitored vendors create risk that surfaces at the worst time.

When vendor documents are tracked by email and expiry dates are missed, a non-compliant contractor can be on site — or in your supply chain — long before anyone notices.

Vendor documents tracked by email with no central repository

Certificates and insurance lapse without anyone noticing

Vetting applied inconsistently depending on who onboards the vendor

No real-time view of which vendors are actually compliant today

The XGRC Compliance Hub approach

A structured, repeatable vendor management process.

01

Onboard vendors through a structured registration process

02

Vet vendors consistently against defined risk criteria

03

Set compliance requirements by vendor category

04

Track document expiry with automated renewal reminders

05

Score and monitor vendor risk on an ongoing basis

06

Report on compliance status across the full vendor base

How it works

Built for procurement and compliance teams.

  • Structured vendor onboarding and vetting workflows
  • Central document repository per vendor
  • Automated expiry tracking and renewal alerts
  • Configurable risk scoring by vendor category
  • Real-time dashboards on vendor compliance status

One live view of every vendor

XGRC Compliance Hub gives suppliers and contractors a portal to upload and maintain their own documentation, while internal teams validate submissions, track expiry dates, and monitor risk scores in real time — across the entire vendor base.

From manual to Compliance Hub

The same vendor process, without the manual chasing.

Manual approach
  • Documents tracked by email
  • Expiry dates missed until an incident happens
  • Inconsistent vetting standards
  • No consolidated compliance view
Compliance Hub approach
  • Portal-based document management
  • Automated expiry tracking and alerts
  • Consistent, risk-based vetting
  • Real-time compliance dashboards across all vendors
Free resource

Vendor Management Checklist

  • Onboarding and registration
  • Due diligence and vetting
  • Contractual and compliance requirements
  • Document and expiry management
  • Ongoing monitoring and risk scoring
  • Performance management
PDF · Third-party risk aligned · v1.0
Standards and frameworks

Manage vendors against the standards that matter.

  • ISO 9001
  • ISO 27001
  • ISO 37301
  • ISO 37001
  • Third-Party Risk
  • Supplier Compliance
  • Contractor Compliance
Scope of application

One platform across every third-party relationship.

  • Supplier onboarding and vetting
  • Contractor compliance management
  • Third-party risk scoring
  • Ongoing document and expiry management
Related

Explore the connected platform.

Solution

XGRC® Compliance Hub

Supplier & Third-Party Compliance

Explore XGRC® Compliance Hub → Use Case

Compliance Management

XGRC Compliance Hub enables organisations to manage supplier, contractor, and customer compliance through a structured portal. External parties upload and maintain their own documentation while internal teams validate, approve, and monitor compliance status in real time.

View use case → Use Case

Internal Controls

XGRC® is internal controls software that lets organisations design, implement, test, and assure controls in a structured way. Every control is linked to the risk it mitigates and the assurance provider testing it, so control effectiveness is demonstrable at any time.

View use case → Regulatory

POPIA Compliance

XGRC® gives Information Officers a structured way to manage POPIA obligations — processing conditions, data subject rights, and security compromise reporting to the Information Regulator — on one auditable platform.

View use case →
Frequently asked

Common questions.

What is vendor management software?

Vendor management software onboards, vets and monitors suppliers and contractors in one place, tracking documents, expiry dates and risk scores so third-party compliance status is known at any moment rather than assumed.

Does XGRC® flag expiring vendor certificates automatically?

Yes. Document expiry is tracked with automated renewal reminders, so a lapsed insurance certificate or expired vendor certification is flagged before it becomes a compliance gap.

Can vendor risk scoring differ by category?

Yes. Risk criteria and vetting requirements are configurable by vendor category, so a high-risk contractor and a low-risk supplier are not assessed against the same checklist.

Which standards does vendor management align to?

Vendor management aligns to ISO 9001, ISO 27001 and ISO 37301, alongside third-party risk and supplier and contractor compliance practice more broadly.

See vendor management as a structured, transparent process.

Book a demo to see how XGRC Compliance Hub turns vendor onboarding, vetting, and monitoring into one connected, auditable workflow.

Book a demo