# Vendor Risk Pulse Risk Pulse provides a unified view of a vendor’s security posture by analysing continuously monitored signals across compliance, security, AI governance, and operational indicators. The feature aggregates multiple datapoints and evaluates them to generate a **Risk Pulse score**, which represents the vendor’s current risk posture. Security and compliance teams can use Risk Pulse to evaluate vendor security practices, regulatory alignment, and governance posture before onboarding vendors or during ongoing monitoring. *** ## Features Risk Pulse provides the following capabilities. **Unified vendor risk view**\ Combines multiple datapoints across security, compliance, and AI governance to present a consolidated vendor risk profile. **Risk Pulse score**\ Generates a vendor risk score based on weighted evaluation of security, compliance, and operational signals. **Compliance visibility**\ Displays vendor posture across recognised compliance frameworks and certifications. **AI governance insights**\ Evaluates vendor AI governance practices and transparency signals. **Evidence-backed datapoints**\ Displays references or supporting documentation where available. *** ## Use cases Risk Pulse supports several vendor risk management workflows.

Use case	Description
Vendor onboarding	Evaluate a vendor’s security posture before approving the vendor for organisational use.
Vendor due diligence	Review vendor compliance posture and governance indicators during vendor risk reviews.
Security assessments	Support internal security and compliance teams when evaluating vendor security practices and regulatory alignment.
Continuous vendor monitoring	Monitor vendor security posture over time using updated datapoints and signals.

*** ## Risk Pulse categories and parameters Risk Pulse evaluates vendor posture across several categories. Each category contains parameters that contribute to the vendor risk analysis.

Category	Parameters
Overview	Name, Category, Description, Website, Risk score
Model architecture	Model provider, Model type or version, Use of proprietary models, Use of open-source models, Fine-tuned models, Training data composition disclosure, Customer data used for training, Model limitations documented, RLHF methods used, Model input and output logging practices
Data governance	Data retention period, Data storage location, Encryption at rest, Encryption in transit, Data deletion controls, Subprocessor list publication, Data residency guarantees, Data sharing with upstream providers, Data poisoning mitigation
Security controls	Prompt injection protection, Adversarial robustness testing, Red-team testing, Third-party audits, Penetration testing, Safety guardrails, Incident response programme
Compliance and certifications	SOC 2 Type II compliance, ISO 27001 compliance, ISO 27701 compliance, GDPR compliance, CCPA or CPRA compliance, HIPAA compliance, ISO 42001 compliance, EU AI Act compliance, Data Processing Agreement (DPA)

These parameters help Sprinto analyse vendor security posture and calculate the **Risk Pulse score**. *** ## Analyse vendor risk using Risk Pulse You can analyse vendor risk posture using the Risk Pulse tab in the vendor profile. ### Steps 1. Log in to the Sprinto dashboard. 2. Navigate to **Data Library**. 3. Select **Vendors**. 4. Open the **All vendors** tab.

5. Select the vendor you want to analyse. 6. In the vendor profile, select the **Risk pulse** tab. 7. If vendor data is not available, select **Fetch vendor details**.

Sprinto analyses vendor signals and retrieves relevant datapoints. After the analysis completes, the **Risk pulse** tab displays the vendor’s risk posture and supporting signals.

*** ## Summary Risk Pulse helps organisations analyse vendor security posture using continuously monitored signals across compliance, security, and AI governance domains. By consolidating multiple datapoints into a unified **Risk Pulse score**, the feature enables security teams to: * evaluate vendor risk more effectively * support vendor onboarding decisions * strengthen vendor risk management processes * monitor vendor posture over time