§ Supplier Shield · TPRM

Enterprise vendor risk
management, solved.

Stop playing vendor risk whack-a-mole. Give compliance and risk teams centralised visibility, automated assessments, and audit-ready evidence, without the constant firefighting.

60%
of breaches involve 3rd parties
$4.88M
avg. breach cost in 2024
30 days
to first assessment cycle
SUPPLIER SHIELD · RISK OVERVIEWLIVE
VendorRiskGrade
Cloud ERP Vendor
LOW
A+
Payment Processor
MEDIUM
B+
IT Infrastructure
CRITICAL
D+
HR Software
LOW
A
Legal Data Processor
MEDIUM
B+
5 vendors · 1 critical finding ACTION REQUIRED
Trusted by global organisationsYou are in safe hands from day one.
UNICC
IAEA
Nestlé
Novartis
SAP
Airbus
Richemont
Swiss Confederation
Groupe Mutuel
Altis
Part of Acuna GRC: Supplier Shield is the TPRM module inside Acuna GRC — one operating system for risk, privacy, and compliance. Every supplier action is traceable in your governance system.
§ How it works

From vendor inventory to audit-ready in 5 steps.

01
Step 01
Map your vendor landscape

Import your supplier list and auto-tier by risk level, data access, and regulatory scope.

02
Step 02
Run targeted assessments

Send framework-aligned questionnaires (DORA, NIS2, GDPR) and collect evidence automatically.

03
Step 03
Score and prioritise risks

Get OSINT-enriched A-F grades and a prioritised remediation queue for your team.

04
Step 04
Track remediation

Assign action owners, set deadlines, and escalate critical findings before they become incidents.

05
Step 05
Report to board and auditors

Export audit-ready reports, heatmaps, and evidence packs in one click.

§ Why TPRM matters

Your Swiss knife for TPRM.

Protect yourself from third parties

32% of ransomware attacks stem from vulnerabilities introduced by third parties. Supplier Shield shows you at a glance who's compliant, who's at risk, and what action is needed.

Risks are evolving fast

DORA, NIS2, and GDPR are tightening their grip on supply chains. Supplier Shield keeps your vendor program ahead of regulatory changes so you're proactive, not reactive.

It's very costly not to comply

Non-compliance fines can reach €20M or 4% of global turnover. But the real cost is reputational. Supplier Shield keeps you always aligned with the latest standards.

§ Regulatory coverage

Built for European compliance.

Supplier Shield maps your vendor controls directly to the frameworks that matter, so your team stops mapping spreadsheets and starts proving compliance.

See compliance coverage
DORA
Financial ICT resilience
NIS2
Critical infrastructure
GDPR
Data protection
nDSG
Swiss privacy law
ISAE 3402
Service org. controls
ISO 27001
Information security
HIPAA
Healthcare data
SOX
Financial reporting
§ Platform benefits

We turn chaos into clarity.

Supplier Shield simplifies compliance and risk management so your team can focus on running the business, not chasing spreadsheets.

60%
less internal workload

Save time

Automate supplier outreach, questionnaire cycles, and evidence collection. Free your team from manual follow-up and endless email threads.

assessment throughput

Reduce costs

Avoid costly breaches and compliance failures. One platform replaces multiple point tools and consultant-heavy processes.

100%
audit-ready evidence

Protect your reputation

Stay audit-ready with immutable evidence trails. Build trust with clients, regulators, and board stakeholders.

§ Expertise meets simplicity

Built by practitioners, for practitioners.

Traditional questionnaires are slow and ineffective. Our team of certified experts speaks with cybersecurity, data privacy, and sustainability officers every day, and built Supplier Shield accordingly.

Swiss-basedPractitioner-ledEnterprise-gradeSOC 2 aligned
25+
Years combined experience
500+
Audits delivered
200+
Happy clients
28
In-house experts
§ FAQ

Common questions.

What is Supplier Shield?

Supplier Shield is the TPRM module inside Acuna GRC, your platform for managing third-party risks, ensuring compliance, and safeguarding your organisation from vendor-related exposures. One operating system for TPRM, risk, and compliance.

What is Third-Party Risk Management (TPRM)?

TPRM involves identifying, assessing, and mitigating risks associated with third-party vendors and service providers to protect your organisation's data, operations, and reputation. 60% of breaches today involve a third party.

Which regulations does Supplier Shield cover?

Supplier Shield maps directly to DORA, NIS2, GDPR, nDSG, ISAE, HIPAA, and SOX supplier controls, keeping your vendors aligned to the latest standards and your program auditor-ready.

How quickly can we start?

Onboarding is immediate. Most teams complete their first vendor inventory and tiering within two weeks, and run their first full assessment cycle within 30 days.

Can Supplier Shield work with our existing tools?

Yes. Supplier Shield integrates into your current workflows or runs standalone through Acuna GRC. We adapt to your operating model, not the other way around.

Do you offer managed services?

Yes, our Managed Services team can run assessments, evidence collection, and remediation follow-up on your behalf, giving you immediate capacity without adding internal headcount.

Get started

Less risks. More smiles.

Risks do not get better over time. Book a demo with our team and see exactly how Supplier Shield maps to your vendor program.

Get a demo Get in touch