One vendor, many relationships
Give every service its own workspace, risk tier, evidence set, and business context.
Start every vendor relationship the right way.
Add each vendor and the services you use, set the right level of oversight, and know exactly what to request before the first assessment.
VENDOR RECORD / 024Wayne EnterprisesINTAKE01
01CUSTOMER OPERATIONSCustomer platformPersonal data / business criticalOVERSIGHTTier 1
02GROWTHMarketing analyticsInternal data / replaceableOVERSIGHTTier 3
RELATIONSHIP CONTEXT
REQUIRED EVIDENCE03 / CUSTOMER PLATFORM
- 01Security questionnaire
- 02Independent audit report
- 03Business continuity plan
Oversight that fits the relationship.
Relationship tiering
Apply four clear tiers based on the data, access, criticality, and dependency behind each service.
Tier-based requirements
Recommend the right questionnaires, documents, and approvals for the risk presented.
Contacts in place
Connect vendor and internal owners to the services and actions they are responsible for.
One process. Every layer connected.
Scroll to open the workflow, follow each stage, and see how context stays attached from start to finish.
- 01
Add the vendor
Record the vendor and each service your business relies on.
- 02
Describe the relationship
Capture what the service handles, reaches, and supports.
- 03
Know what to request
Merqab sets the tier and recommends the evidence to collect.
Not every vendor deserves the same scrutiny.
- Your team spends its time on the relationships that could hurt the most.
- Two services from one vendor are never confused.
- Every assessment starts with the right scope.