Use the Vendor Access Review dashboard to manage third-party vendors and conduct periodic access and risk assessments. This view helps you stay on top of vendor-related risks, track review progress, and maintain audit readiness.

From this dashboard, you can:

View all active and archived vendors
Assess vendor risk levels and review status
Customize visible columns and layout to suit your workflow
Apply filters to narrow down by owner, risk, department, tags, and more
Track review schedules, due dates, and assignees
Export vendor data for reporting or documentation purposes

Key Table Elements

Here are some helpful features visible in the vendor table:

Search bar: Quickly locate vendors by name or domain.
Vendor cards: Show logo, display name, and domain for quick recognition.
Inline indicators:
- Risk level tags (e.g., High, Medium, Low)
- Review status (e.g., In progress, Scheduled)
- Due dates and assigned owners
Batch actions: Use the checkboxes to apply actions across multiple vendors.
Export icon: Download your vendor list for offline tracking or sharing.

How to complete your Vendor Reviews

Start with the “Vendor Access List” download from the Data Room.
Manually add in any roles that aren’t available via integrations (i.e. Github).
Manually add in any systems/users/roles in scope that aren’t in the platform.

Available Columns

You can customize your Vendor Access Review view by enabling, disabling, or reordering columns. Simply navigate to the Columns tab to:

Toggle fields on or off
Drag and drop columns to rearrange their order
Optionally save your view for future use

Available columns include:

Risk score
Departments
Categories
Vendor owner
Review
Schedule owner
Review assignees
Review due date
Last reviewed
Contract start date
Contract end date
Tags
Documents
Next assessment date
Created at

To adjust your view, navigate to the “Columns” tab, toggle the relevant fields on or off, and optionally save the view.

Available Filters

Filters help narrow down the view based on specific attributes. The following filters are available:

Risk score
Departments
Categories
Vendor owner
Review
Schedule owner
Review assignees
Review due date
Last reviewed
Contract start date
Contract end date
Tags
Documents present
Created at
Open tasks present

You can access filters by selecting the “Filters” tab and expanding each field to define filter criteria.

How to export Vendor Access List

Once in Secureframe head to Data Room in your left navigation menu
Click Export Data in the top right corner
select Vendor Access List from and then click Export

Frequently Asked Questions (FAQ)

In our list of vendors I have both Atlassian and JIRA. I want to remove Jira (because that is a product of the Atlassian company.) If I archive Jira from the list of vendors, does this have any impact on the integrations we have with Jira?

Archiving a vendor that has a related integration will not archive the connection. The vendors and the integrations are considered separate in the platform.
You will be able to safely remove the Jira vendor, while keeping the Jira connection.

I used to be able to export the vendor access tab, I don't see how to do that now?

This particular export is located in our Data Room.
Once you are in the Data Room, click Export data in the top right. In the modal, make sure Vendor Access List is selected, then click Export. Once the export is completed, you'll find the CSV within the Exports folder, under the date of the export. (Ex, Exports > 2025-01-06)
For more information on the Data Room, click here.

Is there a way to handle annual vendor reviews in Bulk?