BRUNNER
“Two hundred suppliers, zero overview — that was our starting point. A year later every vendor has a score, a contract and a next review date. Procurement even thanks us now.”
Jonas ReberHead of Compliance
Home · Solutions · Audit & Vendor Flow
Audit & Vendor Flow
Audit Management Software — turn audits into a routine instead of a scramble.
Audits · Evidence · Vendors · ContractsWhat the Audit & Vendor Flow does
Audits you look forward to
Plan the scope, assign evidence tasks and run third-party assessments from one checklist. Vendors answer through a guided portal, contracts stay versioned, and every open item is chased automatically.
What’s included
Internal audits and vendor checks, fully covered
Audit planning & scopes
Recurring audit programmes with scopes, cycles and responsibilities defined once.
Evidence collection
Owners upload proof against each control; missing evidence is escalated automatically.
Vendor register
Every processor and sub-processor in one register, linked to its processing activities.
Supplier self-assessments
Vendors answer security questionnaires in a guided portal — scored the moment they submit.
Processor contracts
Track DPAs, SCCs and transfer assessments per vendor, with renewal dates that remind you first.
Findings & follow-ups
Turn audit findings into tracked actions with owners and due dates — nothing evaporates.
How a vendor check runs
From new supplier to signed-off in four steps
1Register
Add the vendor once; the platform pulls the right questionnaire for its risk class.
2Assess
The vendor answers in the portal while you track progress live.
3Contract
Attach the DPA, record transfers, and set the review rhythm.
4Repeat
Annual re-assessments start themselves — with last year’s answers pre-filled.
Frequently asked
No. Vendors receive a secure link to a guided questionnaire — no login, no training, no cost for them.
Yes. Bring your existing catalogues or start from our consultant-maintained templates, then adapt freely.
Each vendor entry records transfer mechanisms, SCC versions and transfer assessments — flagged automatically when rules change.
Keep exploring
Privacy FlowRecords, notices & rights Risk FlowAssessments & mitigation AI FlowAI inventory & AI Act duties