> For the complete documentation index, see [llms.txt](https://docs.sprinto.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.sprinto.com/data-library/vendors/glossary.md). # Glossary This glossary defines important terms used throughout the **Vendors** section in Sprinto. It is designed to help you quickly understand key features, statuses, and fields that appear across the vendor management workflow. *** ### Glossary

Term	Definition
Vendor	A third-party entity or service provider with access to your organisation’s data, systems, or infrastructure.
Vendor Library	A curated list of preloaded vendors available in Sprinto, including metadata such as website, category, and risk level.
Vendor Discovery	A feature that identifies third-party services accessed by staff via connected SSO platforms like Google Workspace or Okta.
Vendor Admin	The internal Sprinto user responsible for managing compliance tasks related to a specific vendor.
Risk Scoring	The process of assigning a risk level to a vendor based on data sensitivity, access level, and operational importance.
Due Diligence	A compliance task to evaluate a vendor’s security posture by reviewing supporting documents and/or questionnaire responses.
Sprinto AI	An automated analysis engine that reviews vendor security documents (e.g., SOC 2, ISO) and generates findings.
Security Questionnaire	A structured set of questions sent to vendors to evaluate their security controls and practices.
Monitoring Tab	A dashboard view displaying vendors with open compliance tasks, such as incomplete due diligence or overdue assessments.
Breach Monitoring	A feature that tracks public data breach disclosures related to your vendors and displays them in the dashboard.
Custom Fields	Additional metadata fields created by your organisation to store vendor-specific information (e.g., region, renewal date).
Archived Vendor	A vendor that has been removed from active monitoring and assessment but remains stored for record-keeping.
Configuration Tab	A settings interface where you define risk scoring logic, enable AI review, and manage shared document types.
Assessment Cycle	A periodic review of all vendors to confirm their risk status and compliance posture, typically reviewed by senior management.
Shared Documents	Document types (e.g., SOC 2 Report, Privacy Policy) expected to be collected from each vendor as part of due diligence.

--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.sprinto.com/data-library/vendors/glossary.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.