VendorVault

VendorVault is a web app (with optional lightweight desktop agent) that continuously monitors and scores healthcare vendors and connected partners for cyber risk, focused on the realities of hospitals: BAAs, SOC 2 reports, HITRUST artifacts, security questionnaires, and evidence collection. It centralizes vendor security docs, tracks expirations, flags missing controls, and maps vendor access paths to critical systems (EHR, PACS, billing). An AI layer summarizes long audit reports, extracts key control gaps, and generates follow-up questions—without pretending to replace a security team. The product is designed for small-to-mid healthcare orgs that can’t afford a full GRC suite but still face ransomware-driven third-party risk. It integrates with common ticketing and identity tools to keep vendor offboarding and access reviews from becoming a spreadsheet nightmare.