Over the past quarter, we introduced major enhancements across our Third-Party Risk Management (TPRM) platform designed to streamline operations, accelerate risk remediation, and deliver deeper portfolio visibility.

By expanding our AI capabilities—including automated issue recommendations and multi-document auto-answering—we are significantly reducing manual burden for risk teams while increasing assessment speed and accuracy.

Robust updates to workflows, integrations, and questionnaire collaboration make it easier to automate complex processes across your tech stack and seamlessly engage internal and external stakeholders.

Finally, new centralized management centers (such as the Finding Center), threat intelligence-enriched scoring drill-downs, and customizable dashboards provide clearer insights into third- and fourth-party exposures, empowering your organization to make faster, data-driven security decisions with confidence.

Check it all out below!

---

AI CAPABILITIES

Major Updates

1. AI-Recommended Issues: Automatically surface recommended issues based on assessment findings, helping teams focus remediation efforts faster.

2. AI Extraction of Custom Fields from Intake Documents: Automatically extract both standard and custom third-party information from submitted intake documents, reducing manual data entry.

3. Multi-Document Questionnaire Auto-Answer: Use multiple source documents simultaneously to automatically answer questionnaires with broader evidence coverage

Minor Updates

1. Copy AI Summary: Quickly reuse AI-generated summaries in reports, communications, or downstream workflows.

WORKFLOWS

Major Updates

1. Dynamic Custom Fields in Workflow Update Third Party node: Automate updates to custom third-party attributes using dynamic workflow data, enabling more flexible orchestration.

2. Workflow Execution Insights: Gain visibility into workflow runs, outcomes, and execution status to simplify monitoring and troubleshooting.

3. HTTP Request Workflow Node: Connect SAFE workflows with external systems and APIs to automate cross-platform processes.

Minor Updates

1. Next Review Date Support in Workflows: Automate reassessment and follow-up activities based on upcoming third-party review dates.

2. Workflow Table View: Review workflows in a structured table with additional operational information for easier administration.

3. Create Tags from Workflow Update Third Party Node: Dynamically create tags as part of workflow automation.

4. Questionnaire Status Change Workflow Trigger: Automatically launch workflows when questionnaire status changes.

5. Multiple Recipients in Workflow Emails: Send workflow emails to multiple recipients and dynamically populate To, CC, and BCC fields.

6. Workflow Auto-Save: Automatically save workflow changes when editing nodes, reducing the risk of lost configuration.

7. Workflow Import Validation: Identify unmapped or invalid configuration when importing workflows, reducing setup errors.

8. Update and Retrieve Tags in Workflow Nodes: Use third-party tags more consistently across workflow read and update operations.

QUESTIONNAIRE

Major Updates

1. Evidence Document Categorization: Automatically organize uploaded documents into broader evidence categories for easier assessment and review.

2. Default Notifications for Vendor Submissions: Automatically notify relevant users when vendors submit information, reducing the risk of missed assessment activity.

3. Questionnaire Analytics: Analyze questionnaire responses across vendors and identify common control gaps, trends, and areas of concern.

4. Vendor Questionnaire Collaboration: Allow vendors to invite additional collaborators to complete questionnaires, supporting complex assessments involving multiple stakeholders.

5. Share Questionnaire Link Without Email: Generate and share questionnaire links through your preferred communication channel without requiring SAFE-generated emails.

6. Bulk Question Severity Updates: Update severity across multiple questionnaire questions at once, simplifying questionnaire configuration and governance.

Minor Updates

1. Enhanced Parent-Child Logic for Multi-Select Questions: Create more sophisticated conditional questionnaires based on multiple selected responses.

2. Guideline Reset: Quickly restore questionnaire guidelines when configuration needs to be reverted.

3. Additional Questionnaire Filters: Filter questionnaire responses by evidence availability, rationale, and severity to accelerate review.

4. Questionnaire Rationale in Exports: Preserve reviewer and respondent rationale when exporting questionnaire results.

5. Vendor Submission Nudge: Prompt vendors when a questionnaire is fully completed but has not yet been submitted.

6. Assessment Due Date in Email Templates: Include assessment due dates dynamically in TPRM communications and reminders.

7. Improved Assessment Pending-State Messaging: Better understand why an assessment is pending and what needs to happen next.

8. TXT File Support in Document Uploads: Include plain-text files as assessment source material and evidence.

CONTRACTS

Minor Updates

1. Contract Status: Not Provided: Distinguish third parties where a contract has not been provided from other contract states.

2. Manual Contract End Date Override: Correct or manually provide contract end dates when automated contract analysis does not have the required information.

FOURTH PARTY

Minor Updates

1. Fourth-Party Concentration Percentage: Identify concentration risk by seeing what percentage of your third parties depend on a particular fourth party.

2. Fourth-Party Export: Export fourth-party information for reporting, analysis, or downstream processing.

3. Third-Party Filters for Fourth-Party Analytics: Analyze fourth-party dependencies for specific third-party segments rather than the entire portfolio.

INTEGRATIONS

Minor Updates

1. ServiceNow Connector Support for Australia: Use SAFE's ServiceNow integrations within Australian ServiceNow environments.

2. Enhanced ServiceNow RITM Integration: Improve synchronization and workflow handling between SAFE and ServiceNow Requested Items.

ISSUES

Major Updates

1. Vendor Issue Notifications: Keep stakeholders informed when vendors update issues, add comments, or provide attachments.

2. Bulk Issue Actions: Manage and assign multiple issues at once, reducing repetitive administrative work during remediation.

3. Multiple Issues & Issue Document Support: Coordinate remediation across multiple related issues and attach supporting documents within an issue.

Minor Updates

1. Issue Drawer View: Review issue details without leaving the current working context.

DIGITAL FOOTPRINT

Major Updates

1. Asset Attribution Reasoning: See why digital assets are associated with a third party, improving confidence in outside-in assessments and reducing attribution ambiguity.

2. Local Exception Management for Assets: Exclude or manage incorrectly attributed assets at the third-party level for more accurate risk assessments.

FINDING

Major Updates

1. Finding Center: Review and manage findings across all third parties from a centralized inventory, improving prioritization and remediation.

SCORING

Major Updates

1. Finding Score drill-down with threat intelligence enrichment: Understand exactly what drives a finding score, including underlying signals and CVE threat intelligence, for more transparent risk decisions.

2. See What Changed for Third-Party Scores: Quickly understand what changed between assessments and what contributed to changes in third-party risk scores.

DASHBOARDS

Major Updates

1. Custom Fields in Dashboard Widgets: Build dashboards and reporting views using organization-specific third-party attributes.

2. Exposure Score & Out-of-the-Box Exposure Dashboard: Monitor third-party exposure through a ready-to-use dashboard designed to highlight portfolio-level risk.

Minor Updates

1. Exposure Score Tooltip: Help users interpret Exposure Scores directly within the product.

REPORTING

Minor Updates

1. Filtered or Full Digital Footprint Export: Export either the complete digital footprint or only the data relevant to your current filters.

2. Third-Party Digital Footprint Download: Download digital footprint information for further investigation, evidence collection, or reporting.

3. SAFE Vendor URL in Exports: Navigate directly from exported data back to the relevant third-party record in SAFE.

4. Downloads for Questionnaires, Fourth Parties, and Breach Events: Export important third-party assessment and monitoring data for offline analysis and reporting.

5. Organization-Level Breach Event Filters: Filter breach events across the organization to focus investigations on relevant third parties.

6. Reporting Format Enhancements: Generate cleaner, more consistent reports with improved formatting and presentation.

7. Prominent Third-Party Report Download: Access third-party risk reports more quickly from the primary organization risk view.

8. Improved Overdue Review Metrics: Exclude rejected and offboarded third parties from overdue-review counts for more accurate reporting.

INVENTORY

Major Updates

1. Saved Filters: Save frequently used TPRM filters for faster access to recurring portfolio views and workflows.

Minor Updates

1. Group Third Parties by Exposure Level: Quickly segment the third-party inventory by exposure level for easier prioritization.

2. Optional Domain and Contact Email in AI-Managed Mode: Onboard and assess third parties even when domain or contact information is not yet available.

3. Enhanced Third-Party Disposition Rationale: Capture richer disposition decisions using formatted text and up to 5,000 characters of rationale.

4. Bulk Archive Newly Discovered Third Parties: Archive multiple irrelevant or unwanted discoveries at once.

5. Capture Loss Inputs During Onboarding: Collect financial impact and loss-related inputs earlier in the third-party lifecycle.

6. Bulk Organization Tag Updates: Apply tag changes across multiple organizations simultaneously.

PLATFORM

Major Updates

1. Admin-Configurable API Credential Expiry: Enforce organization-specific expiry limits for SAFE user API credentials to align with security policies.

Minor Updates

1. Increased Multi-Select Custom Field Limit: Configure up to 75 options in multi-select custom fields for more complex classification requirements.

2. Status and Stage Configuration Visibility: View available third-party statuses and lifecycle stages from settings.

Did this article help?

Let us know by leaving a star rating at the top of this article.