Problem
Organizations with many vendors cannot see data → access → purpose clearly.
Compliance · Hero API
Vendor Risk API
What it does: Map vendors to data, access, purpose, AI, security, and privacy — with explained scores.
Problem it solves: Organizations with many vendors cannot see data → access → purpose clearly.
Who it is for: Vendor risk managers · Security engineers · Procurement
Module
Solution
Map vendor risk dimensions into an explained score with evidence.
Use cases
Developer
- Scan vendor by name/domain
- Store evidence IDs
- Re-scan on schedule
Business
- Third-party risk reviews
- Onboarding gate
- Board risk packs
Overview
Discover third-party scripts and SaaS processors, then explain every major risk finding in a Vendor Risk Score.
Features
- Vendor discovery
- Explained Vendor Risk Score
- Dependency mapping
Benefits
- Explained findings
- Third-party sprawl visibility
Live example
Endpoint: /api/v1/compliance/vendor-risk — free public path available via Compliance X-Ray (real scan, not fabricated output).
curl -X POST https://hq.amberoneai.com/api/v1/compliance/vendor-risk \
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{"example":true}'Pricing
From $249/mo. Full plan matrix on /pricing — no invented discounts.
View pricingTrust
- Authentication: Bearer API key after signup
- Documentation: /docs
- Legal: Scores assist operational readiness — not a formal legal certification
- Status: See /marketplace/status for live probes
Next steps
FAQ
Is Vendor Risk a legal certification?
Scores and findings assist operational readiness. They are not a formal legal compliance determination, government certification, or legal advice.
How do I get an API key?
Create an account at /signup, choose a plan on /pricing, then generate keys in your dashboard.
Where is the documentation?
Start at /docs. Product-specific OpenAPI and README links are listed on each API page.