What the vendor can reach
Systems, data types, user roles, admin privileges, integrations, shared accounts, remote access, and customer-facing dependencies.
Vendor Review
Know which third parties can create security, privacy, or operational exposure.
AgileCT helps leadership decide whether a software tool, IT provider, processor, or outsourced service has enough proof to be approved, renewed, or escalated.
What We Review
What proof exists
Security summaries, audit reports, insurance, privacy terms, breach process, downstream providers, backup posture, and incident notification commitments.
What happens if it fails
Operational dependency, revenue impact, privacy exposure, contractual obligations, customer commitments, and realistic recovery options.
What Changes The Price
Vendor count
Data sensitivity
Criticality
Evidence follow-up
Final pricing depends on vendor count, data sensitivity, vendor criticality, evidence availability, renewal timing, required stakeholder interviews, and whether follow-up questions or approval conditions need tracking.
Check which package fits
Share the vendor type, data access, renewal timing, and evidence you already have so we can size the review.
Assessment Output
Turn vendor uncertainty into a reviewable decision.
Risk tier for each vendor based on access, data sensitivity, dependency, geography, evidence quality, and business criticality.
Questions to ask the vendor when evidence is missing, stale, vague, or inconsistent with the role they play in your environment.
Approval recommendation: proceed, proceed with conditions, require fixes, defer, or escalate for leadership review.
Follow-up tracker for owner, due date, requested proof, alternative safeguards, renewal timing, and next review date.
When It Helps
New software purchase
Assess a tool before it gets access to customer data, finance data, identity, email, or production systems.
IT provider review
Understand remote access, admin responsibility, backup support, logging, escalation, and incident notification gaps.
Privacy processor check
Review vendors that handle personal information, cross-border storage, subprocessors, or customer-facing data flows.
Renewal or consolidation
Compare vendors before renewal, reduce duplicate tools, and document why a high-risk vendor remains approved.
Packages
Single Vendor Review
$1,500-$3,500
Assess one high-impact vendor and produce a risk summary, evidence gaps, questions, and approval recommendation.
Vendor Review Sprint
$4,500-$9,500
Review a priority vendor set, tier risk, identify missing proof, and build a follow-up plan for owners and renewals.
Quarterly Vendor Review
Scoped
Maintain a recurring review rhythm for critical vendors, stale evidence, exceptions, renewal windows, and new third-party approvals.
Next Step