How is my score calculated?

Each 'no' counts as one risky answer. Zero to three risky answers is green, four to seven is amber, eight or more is red. The score is a rough guide, not a certification.

What counts as a good third-party risk process?

One place for every document, expiry dates you can see without opening files, automatic reminders, an audit trail and a way to share evidence off email. If those five are in place you are already ahead of most teams.

Do I need this if I only have a handful of suppliers?

Yes. Small supplier lists are where things quietly slip. A ten-supplier list run manually usually looks up-to-date but is not. Even a light system stops the surprises.

Is my data shared or stored?

No. The quiz runs entirely in your browser. No answers leave your device.

What do I do if I score red?

Start with a single register of your suppliers and their documents, capture expiry dates for anything with a renewal cycle and move sharing off email attachments. Credbase does all three.

Free tool

Third-party risk quick-check

Ten quick questions. Two minutes. A plain-English red, amber or green score for how organised your supplier process really is.

Who this is for

Ops, procurement or compliance leads sizing up their current process
Founders wondering if manual tracking is finally holding them back
Consultants running a quick maturity check for a client

Problem it solves

You know the supplier register is patchy but you cannot quite tell how bad. Ten yes-or-no questions give you an honest band and the single next step that closes the biggest gap.

Quick-check

0/10 answered

1.Do you have one place where every supplier document lives?
2.Do you know every certificate's expiry date without opening the file?
3.Do you get automatic reminders before documents expire?
4.Can suppliers upload without creating an account?
5.Would you have an audit trail if a client asked who uploaded what and when?
6.Do you share evidence packs with clients through a secure link, not email attachments?
7.Can you revoke access to a shared pack in one click?
8.Do you control who on your team can see or edit which suppliers?
9.Is your supplier record accurate right now, without a manual clean-up?
10.Do new suppliers get onboarded through a repeatable process, not ad-hoc emails?

How it works

Step 1
Answer yes or no
Ten questions on your current process, no in-between.
Step 2
Get a colour band
Green, amber or red, with a short summary of what it means.
Step 3
Act on the top gap
The band tells you where to focus first. Credbase can close most of the gaps for you.

Questions and answers

Where this tool stops

A red/amber/green score is a snapshot. Risk changes every week.

Ten questions once won't tell you when an insurance policy expired last Tuesday, or when a subcontractor slipped out of compliance.

Credbase keeps that score live across your whole supplier base, updated the moment a document expires, is replaced or is missing.

Get a live risk view in Credbase Back to all tools

This tool is a plain-English guide for teams handling third-party paperwork. It is not legal, insurance or compliance advice. Confirm specifics with the counterparty or your own adviser before you rely on any output.

Third-party risk quick-check

Who this is for and what it solves