Learn more about FusionAIrre, a TPRA Incubator, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > FusionAIrre Third Party Assurance Incubator Member CONTACT INFORMATION Stephanie Greer CEO & Founder Stephanie@FusionAIrre.ai +1 (919) 271-4341 FusionAIrre.a i Tom Garrubba Cofounder & Chief Commercial Officer Tom@FusionAIrre.ai +1 (412) 720-4248 FusionAIrre.ai Trust has become a business requirement. Organizations face growing pressure to respond to customer security questionnaires, due diligence requests, and other external assurance demands quickly, accurately, and at scale. FusionAIrre's Ape-X Assurance brings the people, knowledge, evidence, and workflows required to respond together in one governed platform. Using agentic AI, reusable evidence-backed responses, intelligent SME routing, approvals, and enterprise orchestration, Ape-X Assurance helps organizations reduce manual coordination, accelerate response times, and deliver consistent, defensible assurance. Show More TOP PRODUCT FUNCTIONALITY CATEGORIES Ape-X Assurance provides a governed workspace for managing External-Party Assurance from request through response, including: AI-assisted questionnaire response Centralized assurance knowledge and evidence Intelligent SME routing and collaboration Review and approval workflows Reusable, evidence-backed responses Response governance and traceability Multilingual response capabilities Assurance dashboards and visibility Show More RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES Delta Dental of NJ and Connecticut PR Newswire: FusionAIrre & Delta Dental of NJ and Connecticut June 18, 2026 Scheider Downs PR Newswire: FusionAIrre & Schneider Downs June 4, 2026 ADDITIONAL OPPORTUNITIES Previous Next

Learn more about Continuity Strength, a TPRA Incubator Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Continuity Strength Risk Ratings/Intelligence Incubator Member CONTACT INFORMATION info@ContinuityStrength.com Continuity Strength helps TPRM practitioners and vendor managers strengthen third-party resilience with greater speed, consistency, and confidence. Built by risk and continuity professionals, the platform brings together critical elements of vendor oversight - assessment, monitoring, and continuity readiness - into one streamlined experience. Rather than adding another layer of process, Continuity Strength enables resource-constrained teams to move beyond compliance checklists toward measurable resilience. Through structured evaluations, actionable insights, and standardized reporting, organizations gain clear visibility across their vendor networks and the assurance that both they and their partners can withstand disruption. TOP PRODUCT FUNCTIONALITY CATEGORIES Third-Party Assessment: Supports structured evaluation of vendor resilience and operational preparedness. Ongoing Oversight: Delivers continuous visibility into evolving third-party risk across portfolios. Continuity Readiness: Helps vendors demonstrate the ability to recover and maintain operations under stress. Cyber Resilience Insight: Offers visibility into external risk indicators to strengthen vendor assurance. Resilience Scoring: Quantifies and compares resilience across vendors and business networks. Portfolio Intelligence: Consolidates vendor data into executive-level and regulatory-ready reporting. Improvement Guidance: Highlights practical steps to address vulnerabilities and strengthen posture. Plan Lifecycle Management: Keeps continuity documentation current and aligned with organizational needs. Practitioner Enablement: Expands the reach and impact of internal or advisory TPRM teams. Compliance Alignment: Provides defensible evidence to support audit, regulatory, and insurance requirements. RESOURCES FROM THIS VENDOR MEMBER Vendor Management Capacity Calculator VENDOR MEMBER RESOURCE | January 21, 2026 Vendor Risk Management Survey Results - 2025 VENDOR MEMBER RESOURCE | January 8, 2026 State of Vendor Risk Management 2025 - Survey Preview VENDOR MEMBER RESOURCE | January 5, 2026 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn more about Lema, a TPRA Advocate Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Lema TPRM Platform Advocate Member CONTACT INFORMATION Eddie Dovzhik CEO contact@lema.ai The Risk Engineering Platform Checklists don’t catch risks. Lema transforms third-party risk teams from compliance auditors into Risk Engineers – uncovering the material risks that everything else misses. . Powered by an AI Agent trained to think like an elite vulnerability researcher, Lema automatically analyzes vendor artifacts, gathers publicly available intelligence, and monitors the interface between you and the vendor. With Lema, Risk Engineers reveal the risks that genuinely threaten your business – and deliver the exact steps to shut them down. TOP PRODUCT FUNCTIONALITY CATEGORIES Agentic Risk Engineering: A powerful AI, trained by expert vulnerability researchers that correlates artifacts, public intel, and relationship signals to surface the risks that genuinely threaten your business – and delivers the exact steps to shut them down. Forensic AI Assessment: Automates the analysis of vendor reports and documents to reveal what’s hidden in ALL submitted artifacts. Open-Source Recon: Automates the collection and analysis of publicly available vendor information to surface what you should know - including what vendors prefer you didn’t. Blast Radius Monitoring: Monitors the interface between you and the vendor - revealing how they’re actually used inside your organization, tracking access to critical assets, data, procurement activity, and scope drift. RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn more about Fabrik, a TPRA Incubator Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Fabrik TPRM Platform Incubator Member CONTACT INFORMATION Henry Stanley CPO henry@thetrustfabrik.com Fabrik's Data Connectivity Platform makes third-party risk assessments faster by enabling real-time access to vendor security documents and monitoring data directly inside their existing TPRM platforms. This removes the need for time-consuming manual document collection and review, saving effort for both vendors and TPRM teams. Fabrik helps TPRM teams by giving them instant access to up-to-date vendor security documentation directly within their existing workflows, eliminating manual document collection and review cycles, maintaining continuous visibility into vendor security postures, and ensuring proper authorization and data access controls between platforms. Show More TOP PRODUCT FUNCTIONALITY CATEGORIES RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn more about Locktivity, a TPRA Incubator Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Locktivity TPRM Platform Incubator Member CONTACT INFORMATION info@locktivity.com (415) 234-0245 Locktivity isn't just using AI to make things faster, it's changing the way teams work for better outcomes with less effort. Locktivity is a purpose built platform to enable small GRC and security teams to shift third party risk management left. Locktivity combines the power of human expertise, AI insights, and automation to embed your policies into existing workflows. Move from checking compliance boxes, writing reports and chasing information to orchestrating and monitoring with ease. TOP PRODUCT FUNCTIONALITY CATEGORIES Inventory management Impact-driven risk assessments Right-sized due diligence AI-supported vendor assessments Automated audit reports Real-time visibility into your risk footprint OAuth token and integration monitoring Continuous monitoring RESOURCES FROM THIS VENDOR MEMBER Third Party Risk Management Maturity Model VENDOR MEMBER RESOURCE | August 28, 2024 Managing third party AI use and privacy risks VENDOR MEMBER RESOURCE | June 20, 2024 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn more about Shift Security, a TPRA Incubator Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Shift Security TPRM Platform Incubator Member CONTACT INFORMATION sales@shift.security https://www.shift.security/#demo Shift Security provides enterprises with a deep, real-time view into third-party risk and access, including AI tools and autonomous agents. By continuously monitoring third parties across their entire lifecycle, we empower organizations to proactively make security decisions, reduce risk, defend against complex supply chain attacks, and drive business resilience. Powered by an AI-driven platform, Shift combines continuous risk assessments with real-time behavior monitoring that delivers scalable, actionable insights that actively minimize your third-party blast radius. Shift Security serves modern enterprises in a wide range of industries and has earned the trust and recognition of leading security executives. TOP PRODUCT FUNCTIONALITY CATEGORIES Control AI Risk Exposure: Uncover shadow AI and hidden integrations, map their asset access, monitor for behavioral drift, and actively minimize the blast radius. Continuous TPRM and Questionnaire Automation: Automate vendor reviews with AI-powered evidence collection, risk flagging, and renewal comparisons. Comprehensive Vendor Risk Scoring and Actionable Risk Mitigation: Instantly pinpoint exposure, isolate risk, and trigger automated, auditable containment actions. Third-Party Access Monitoring and Blast Radius Control: continuously track third-party behavior inside your network to instantly detect changes and stop active threats. Extended Supply Chain Risk Management: map dependencies down to the nth vendor, and isolate compromised connections and AI agents before threats can cascade. External Attack Surface Assessment: map the external attack surface, continuously discovering exposed assets and vulnerabilities across your entire vendor ecosystem to eliminate outside-in blind spots. Accelerate Audit Readiness via Automated Compliance Regulations: eliminate the manual grind of compliance by automatically mapping your third-party access controls, vendor risks, and AI deployments to global standards. Targeted Threat Intel for Your Entire Ecosystem: targeted threat intelligence that directly maps to your specific supply chain and third-party ecosystem. We alert you the moment a vulnerability is actively exploited in one of your vendors, software packages, or AI agents, allowing you to neutralize the risk and adjust access permissions before a breach can occur. Eliminate Third-Party BlindSpots: uncover shadow AI and shadow IT across your entire organization, shining a light on unauthorized tools, rogue integrations, and hidden vendors to permanently eliminate security blind spots. Reclaim Your Budget & Eliminate Waste: identify duplicate licenses and uncover hidden operational waste from offboarded vendors who retain lingering access. Show More RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn more about Tenchi Security, a TPRA , through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Tenchi Security TPRM Platform Advocate Member CONTACT INFORMATION https://www.tenchisecurity.com/en/contact-us Assess Third-Party Security from the Inside Out Tenchi Security is redefining Third-Party Cyber Risk Management with Zanshin, the only TPCRM solution assessing third-party security from the inside out. Zanshin links external attack surface monitoring with automated, continuous, scalable, and non-intrusive assessments of cloud infrastructure (IaaS, PaaS, SaaS) and security controls across your entire ecosystem. Show More TOP PRODUCT FUNCTIONALITY CATEGORIES Continuous Inside-Out Security Assessments Continuously evaluates third-party cloud environments, endpoint security tools, and identity providers through read-only API integrations, identifying vulnerabilities, misconfigurations, excessive privileges, exposed secrets, MFA gaps, and other security issues. Outside-In Attack Surface Monitoring Monitors internet-exposed assets such as domains, certificates, DNS records, open ports, exposed services, leaked credentials, and public vulnerabilities. Relationship-Specific Risk Scoring Calculates risk scores tailored to each vendor relationship, considering both technical findings and business context rather than assigning a generic vendor score. Security Questionnaire Management Automates the creation, distribution, collection, review, and tracking of vendor security questionnaires, reducing manual effort during assessments. Compliance Assessment & Reporting Maps findings to security frameworks and regulations (such as CIS Controls, ISO 27001, NIST, SOC 2, PCI DSS, etc.) and generates compliance reports. Show More RESOURCES FROM THIS VENDOR MEMBER Alice in Supply Chains – the monthly podcast by Tenchi Security VENDOR MEMBER RESOURCE | July 17, 2026 Load More EVENTS FROM THIS VENDOR MEMBER Tenchi Conference 2026 In-Person Conference November 4, 2026 NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn more about Vendor Centric, a TPRA Consultant Catalyst, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Vendor Centric TPRM Services Consultant Catalyst CONTACT INFORMATION General Inquiries: Tom Rogers Founder & CEO trogers@vendorcentric.com Partnership Inquiries: Justin Leader Head of Partnerships jleader@vendorcentric.com Vendor Centric is a vendor and third-party risk management consultancy, specializing in helping organizations maintain modern, scalable and value creating operations. We are senior practitioners who work side by side with your team, bringing practical experience and straightforward guidance. Our approach is modern and AI-ready, but always grounded in what works in the real world, helping you improve performance, reduce risk, and build a third-party management operation that can scale as you grow. TOP PRODUCT FUNCTIONALITY CATEGORIES TPRM Strategy & Design (New programs) TPRM Operational Assessments Policy Development Process Improvement Technology Transformation Change Management Training & Enablement Governance & Compliance Control Assessments Audit Readiness RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn about  Heather Kadavy, CERP, CBVM, CFSSP,  AVP Third Party Risk Management & Information Security Officer for  Union Bank and Trust Company, and TPRA's WNTPRM October 2022 Leader Spotlight. < See All < Previous Next >  Heather Kadavy, CERP, CBVM, CFSSP  AVP Third Party Risk Management & Information Security Officer  Union Bank and Trust Company Biography Heather Kadavy worked at Union Bank and Trust Company for nearly 34 years with a career focus on Operational Risk Management. As her Bank’s Board of Directors designee, she has managed and evolved several major programs including Third Party Risk Management, Information Security, Physical Security, Safety, Business Recovery, Model Risk Management, and Enterprise Risk Management. She developed and implemented training programs for thousands of employees, had oversight of over a thousand third party relationships, due diligence reviews and contract management activities. Heather has been married for over 20 years to her husband, Patrick, and has a daughter and son both attending the University of Nebraska-Lincoln. In her spare time, Heather enjoys spending time with friends and family, volunteering, doing puzzles, and baking. She is an avid Vikings football and Lakers basketball fan. Leadership Challenges Heather persevered through a previously male dominated industry (e.g., Finance, Physical Security, Information Security, IT, Cyber Security, Business Recovery, and Third Party Risk Management) by addressing complex operational risk areas within an enterprise risk management framework by building one-on-one collaborative relationships with business owners and serving as their expert resource. When it comes to complex topics, Heather found that business unit priorities were typically sales and client-centric support-focused goals. Operational risk management frameworks, documentation, and practices were not part of individual training programs and were often silos with one individual. As an Operational Risk Management translator, educator, and collaborative partner, Heather found a niche that equated to success which allowed her to bypass old silo practices and allow for not only 'train the trainer,' but 'train their successors,' spreading the alignment and understanding of risk management vocabulary, framework, and practices which allowed for continual improvement. Key Takeaways Heather’s favorite part about TPRM is the collaboration that comes when working with teams and seeing the “ah ha” light come on when parties new to TPRM see the enterprise risk view of a third party relationship. Fun Fact Heather loves writing poetry and sends out a new poem each Christmas to over 500 friends and family members. Leadership Characteristics Relator-Responsibility-Restorative-Achiever-Activator Relator – Values one-on-one relationships and authenticity and contributes something unique to relationships. Responsibility – Has a deep sense of purpose and therefore loyalty and dedication and psychological ownership in success. Restorative – Multitasks and trouble shoots problems theoretically or on the fly; are ok that we are never done we are always transforming. Achiever – Self motivated with her own innate intensity. Activator – An action-oriented catalyst to move and improve. Leadership Challenges Heather persevered through a previously male dominated industry (e.g., Finance, Physical Security, Information Security, IT, Cyber Security, Business Recovery, and Third Party Risk Management) by addressing complex operational risk areas within an enterprise risk management framework by building one-on-one collaborative relationships with business owners and serving as their expert resource. When it comes to complex topics, Heather found that business unit priorities were typically sales and client-centric support-focused goals. Operational risk management frameworks, documentation, and practices were not part of individual training programs and were often silos with one individual. As an Operational Risk Management translator, educator, and collaborative partner, Heather found a niche that equated to success which allowed her to bypass old silo practices and allow for not only 'train the trainer,' but 'train their successors,' spreading the alignment and understanding of risk management vocabulary, framework, and practices which allowed for continual improvement. Key Take-a-ways "As Third Party Risk Practitioners, our approach to relationship-building and collaboration outweigh systems and platforms when assisting the first line of defense in understanding the “why” and “how” with their role in overall risk management," Heather noted. Heather’s favorite part about TPRM is the collaboration that comes when working with teams and seeing the “ah ha” light come on when parties new to TPRM see the enterprise risk view of a third party relationship. Fun Fact Heather loves writing poetry and sends out a new poem each Christmas to over 500 friends and family members.

FOR IMMEDIATE RELEASE Supply Wisdom Named 2022 Innovator Award Winner Wednesday, April 20, 2022 Sandeep Suresh (right), Managing Director for Supply Wisdom, accepts the 2022 Innovator Award from Julie Gaiaschi (left), CEO & Co-founder of the Third Party Risk Association (TPRA) at TPRA's 2022 In-Person Conference in Austin, TX. Sandeep Suresh (right), Managing Director for Supply Wisdom, accepts the 2022 Innovator Award from Julie Gaiaschi (left), CEO & Co-founder of the Third Party Risk Association (TPRA) at TPRA's 2022 In-Person Conference in Austin, TX. 1/1 Sandeep Suresh (right), Managing Director for Supply Wisdom, accepts the 2022 Innovator Award from Julie Gaiaschi (left), CEO & Co-founder of the Third Party Risk Association (TPRA) at TPRA's 2022 In-Person Conference in Austin, TX. Supply Wisdom Named TPRA 2022 TPRM Service Provider Innovator Award Winner AUSTIN, TEXAS — APRIL 20, 2022 — Today at Third Party Risk Association’s (TPRA) 2022 TPRM Conference, “The Art of Third Party Risk” in Austin, Texas, TPRA announced Supply Wisdom as the 2022 winner for their TPRM Service Provider Innovator Award . “This validates our investment in the solution,” said Sandeep Suresh, Head of Operations & Technology at Supply Wisdom. “It’s been a five-year journey and we’re looking forward to exciting times ahead.” TPRA had 14 total Service Provider nominations for this award, with four organizations on their short list just days before the final announcement. Though the selection process was difficult with so many outstanding Service Providers, the TPRA Board of Directors named Supply Wisdom the overall winner. About Supply Wisdom Supply Wisdom provides real-time, full-spectrum risk intelligence software. They were awarded a patent by USPO for their unique and innovative risk management methods and systems that transform dispirit risk data into actual risk intelligence. Their ultimate goal is it make supply chains more secure, prevent disruptions, and ensure operational resilience. They also foster a collaborative culture by partnering with the Practitioner community at large, as well as other association Service Providers and Regulators. They work through various frameworks within institutions, and they uplift others in their community by investing in their people and other charities. About the Award One of the objectives of the Third Party Risk Association (TPRA) is to promote the value that Third Party Risk Management (TPRM) Service Providers add with regard to advancing the TPRM industry as a whole. In support of this objective, the TPRA created the TPRM Service Provider Innovator Award to recognize all the work TPRM Service Providers put into delivering innovative, efficient, and effective tools and techniques for Practitioners to leverage to assess, mitigate, and manage the risk of third parties. Any TPRM Service Provider organization may apply for this award, regardless of membership with the TPRA. This award recognizes a TPRM Service Provider organization that offers a product and/or service to the TPRM Practitioner community at large to assist with identifying, assessing, monitoring, and/or mitigating third party risk, actively advances the industry through pioneering and/or innovating TPRM solutions/services, regularly collaborates with Practitioners, Regulators, and/or other Service Providers in the creation, implementation, and/or delivery of their innovative products/services, and advocates for and exemplifies social responsibility and philanthropy. ### The Third Party Risk Association was created out of a necessity to build a community of like-minded third party risk professionals to allow for the sharing of best practices, exchanging of ideas, and influencing of an industry. This organization is a 501(c)(6) not-for-profit. MEDIA CONTACT Meghan Schrader Meghan.schrader@tprassociation.org www.tprassociation.org FOR MORE INFORMATION https://www.tprassociation.org/innovator-award Previous Next

Learn more about PromptArmor, a TPRA Advocate Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > PromptArmor Risk Ratings/Intelligence Advocate Member CONTACT INFORMATION Shankar Krishnan Director shankar@promptarmor.com (908) 397-0919‬ PromptArmor enables TPRM teams to assess and continuously monitor the risk from AI in vendors. Their risk assessments let teams dive deeper into a vendor's AI risk with actionable control recommendations, vendor-specific questions, and mappings to top AI security frameworks. They're trusted by top organizations from the Fortune 100 to the AM Law 100, including top 10 global law firms. TOP PRODUCT FUNCTIONALITY CATEGORIES Continuous Monitoring of AI in Vendors Risk Intelligence of AI in Vendors Risk Ratings of AI in Vendors Threat Intelligence for AI Risk Quantification of AI Mapping to Top Frameworks (e.g. OWASP LLM Top 10) RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn more about Certa, a TPRA Principal Partner Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Certa TPRM Platform Principal Member CONTACT INFORMATION Collin Townsend Head of Account Management collin.townsend@getcerta.com Certa is the leading Third Party Risk Management (TPRM) solution. With its comprehensive Third Party Operating System (Third Party OS), Certa lets you manage risk across all third party types, all risk domains, all in one OS. Certa leverages AI across the third party lifecycle—automating onboarding, risk analysis, compliance, and monitoring. Its no-code workflows, AI-driven decisioning, and real-time data integrations help you adapt to evolving regulations and business needs. With full spectrum risk coverage, Certa delivers due diligence 80% faster, driving smarter and more efficient third party management for global enterprises. TOP PRODUCT FUNCTIONALITY CATEGORIES Certa TPRM: Onboarding, Due Diligence, Performance Management, Infosec, Privacy, Fraud, PEPs & Sanctions, Adverse Media, Geopolitical, + more Certa Ethics & Compliance: ABAC, KYC/AML, KYB, Forced Labor, UFLPA, + more Certa ESG: Sustainable supply chain RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next