- Read
- Decide
- Act
Hold vendors to your own policies, too.
Frameworks are only half of the review. Load your own policies, such as data retention, access review or AI use, and ProcureCortex checks every vendor’s documents against them clause by clause.
How it works.
Policy Checks in three steps. Click a step, or let it play.
Policies
Your own rules, grouped into families.
| Family | Rules | Applies to |
|---|---|---|
| Third-Party Security Standard | 18 | Not attached |
| Data Privacy Rules | 12 | Not attached |
| AI use | 6 | Not attached |
Policies arrive as documents or rules and are grouped into families.
Your rules, side by side with theirs.
A reviewer sees your requirement and the vendor’s clause next to each other, so the conversation with the vendor starts from the exact sentence that falls short.
- 1Policy familiesGroup related rules, such as everything about personal data, and apply them together.
- 2Custom questionsAsk a question of the vendor’s documents and get the answer with its source.
- 3VersionedEvery assessment records which version of your policy it used.
Breach notification window of 72 hours exceeds the contractual 24 hours
Northstar policy · Third-Party Security Standard §11Your Third-Party Security Standard requires notice within 24 hours. The MSA commits to 72 hours.
“Supplier will notify Customer of a Security Incident within seventy-two (72) hours of becoming aware of it.”
MSA_Atlas_Logistics_signed.pdf p. 14How it is managed.
What your team controls, what ProcureCortex does, and what stays on the record.
Your team sets
Your policies, uploaded as documents or written as rules, grouped into families and attached to tiers.
ProcureCortex does
Checks your policies in the same assessment as the frameworks in scope, rule by rule.
The record keeps
Each rule’s result: met, partly met or missing, with the vendor clause that decided it.
Where it fits in the platform.
Every capability reads from and writes to the same assessment.
Built for the teams making the decision.
What each team does with Policy Checks.
Questions about Policy Checks
Short answers to what buyers ask before a demo. Anything else, ask us directly.
Yes. Upload them and ProcureCortex turns their requirements into rules you can review and edit.
Yes. One assessment checks the frameworks in scope and your own policies in the same pass.
See it on your own vendor documents.
Open a demo workspace with a sample vendor, its documents and its findings. Or bring your own vendor to a 30-minute call.