Module · Risk Score

See which suppliers pose a risk, and why

Risk Score checks your suppliers against sanctions lists, company registers and country risk. The result is a risk score from 0 to 100, where higher means greater risk. The check runs again every night, and you are notified of a new hit or when the risk level changes.

Book a demo How the score is calculated
  • Score from 0 to 100
  • Your own environment, in Sweden by default
  • Checked again every night
  • Sanctions lists and registers included
How the score is calculated

Six factors are weighed in, and you decide how much

The supplier gets a score from 0 to 100. The higher the score, the higher the risk. You change how much each factor weighs in the settings.

25weight

Cyber exposure

Weaknesses visible from the outside on the supplier's web addresses and servers. The data comes from the Cyber risk – Basic module.

0weight

Register status

Whether the company is registered, has F-tax (Swedish business tax status) and VAT registration. A company deregistered or being wound up is flagged as an invalid counterparty.

35weight

Sanctions

Sanctions lists from the EU, UN, US and UK, and the US list of companies excluded from federal contracts. A certain or confirmed sanctions hit always means Critical.

15weight

Country risk

The risk of corruption and weak governance in the country where the supplier is based, according to Transparency International and the World Bank.

10weight

Adverse media

Negative news and media coverage about the supplier. Available in the Value tier, with your own ComplyAdvantage account.

Add-on
15weight

Assessment compliance

How well the supplier meets the requirements in your assessments. The data comes from the Vendor assessment module.

Risk levels

Four risk levels, with thresholds you decide

The score places the supplier in one of four risk levels: Low, Medium, High or Critical.

  1. Low
  2. Medium
  3. High
  4. Critical

Sanctions hit: always Critical, however the weights are set.

  • You decide the weights. Decide what should count most for you, for example sanctions or cyber exposure.
  • You decide the thresholds. Set where the line goes between Low, Medium, High and Critical.
  • The score rests on data. The score is based on the factors where there is data. If there is too little data, no score is shown rather than a guess. If a source returns nothing, you decide how that affects the score.
How the Risk Score is computed: the six dimensions with their weights and sources, and the risk levels with their thresholds: Low 0–24, Medium 25–49, High 50–74 and Critical 75–100.

Screenshots from a demo environment with made-up suppliers.

The score step by step

How the data becomes a score

The ring shows how the score is built, with one part per factor. On the supplier's page you see which factor drives the risk up. Scroll through the steps, or click one.

Sources

Checks against open sources included, more can be added

Every customer gets its own separate environment with its own database, in Sweden by default. Hosting can be adapted to your requirements. The environment fetches the data from the open sources below on its own.

Sanctions lists

  • EU the EU's consolidated sanctions list
  • UN the UN Security Council sanctions list
  • OFAC SDN the United States sanctions list
  • UK OFSI the United Kingdom sanctions list
  • SAM.gov companies excluded from US federal contracts

Company registers

  • Bolagsverket Sweden's companies register: whether the company is registered, deregistered or being wound up
  • Swedish Tax Agency F-tax, VAT and employer registration
  • VIES the EU's check of VAT numbers
  • GLEIF global company ID (LEI) and the company's parent companies

Country risk

  • Transparency International index of corruption (CPI)
  • World Bank measures of how well the country is governed (WGI)

Website

  • Google Web Risk whether the company's website is on Google's lists of dangerous sites

Basic

Included

Open sources

Sanctions lists, company registers, country risk and a website check. Included in the module at no extra charge.

  • Sanctions lists from the EU, UN, US and UK
  • Company registers in Sweden, the EU and worldwide
  • Corruption and governance indices and Google's website check

Value

Add-on

Your ComplyAdvantage account

With your own agreement and account at ComplyAdvantage, you get more sources directly in Risk Score.

  • More sanctions lists, from all over the world
  • Regulatory actions and warning lists
  • Adverse media in news and other media

Premium

Being introduced

Creditsafe

With your own agreement and account at Creditsafe, you get credit reports directly in Risk Score.

  • Credit rating and group structure
  • Directors, signatories and beneficial owners can be checked against the sanctions lists
The Risk Score module
4,000 SEK/month

48,000 SEK/year

The core platform, which every customer has, comes on top of the module price: 4,100 SEK/month (49,200 SEK/year). The price covers 25 active organisations, and more can be added. The Basic sources are included in the price. Risk Score is also part of the Vendor Risk bundle (15,100 SEK/month, together with Vendor assessment and Signatures) and of Complete. List price, SEK excl. VAT.

Price your licence
Screening

Checked again every night, and you decide on every hit

The check runs in your own environment. Possible hits land in a queue where your staff confirm or dismiss them, and every decision is saved.

  1. 1

    Step 1

    Consent

    Once you have recorded the supplier's consent, for example with a signed document, the check can start right away.

  2. 2

    Step 2

    Collection

    Your environment fetches data from the lists and registers above.

  3. 3

    Step 3

    Comparison

    The supplier's name and its parent companies, according to the global GLEIF register, are compared with the sanctions and exclusion lists.

  4. 4

    Step 4

    Review queue

    Possible hits wait in the queue until someone with the right permission has looked at them. An uncertain hit means Critical only once it is confirmed.

  5. 5

    Step 5

    Decision and history

    Confirm or dismiss the hit. Decisions are kept in a history you can show afterwards.

  6. 6

    Step 6

    Checked every night

    Every night your active suppliers are checked again. You are notified of a new hit or when the risk level changes.

Risk Score on the supplier's page: the score 34 of 100 at the Medium risk level, with bars for the six factors.

Risk Score on the supplier's page: score, risk level and the six factors. Screenshots from a demo environment with made-up suppliers.

Data protection from the start

Consent first

By default no supplier is checked until its consent is recorded. You can also require a document that proves it.

Personal identity numbers protected

For a sole trader the registration number is a personal identity number. It is never sent to any source, and the sanctions check uses the name.

Hits stay with you

The supplier never sees the hits or your review in the vendor portal.

SAP and business systems

Get the risk score in your own business system

Keep managing your supplier register in SAP or your business system, and let it fetch the risk score through a documented interface (API).

From your system

Part of the core platform

  • Suppliers are created and updated from your supplier register
  • Suppliers blocked in your register are deactivated here, and their history is kept

To your system

Results from the modules you have

  • Risk score per supplier, with Risk Score
  • Assessment status, with Vendor assessment
  • Cyber findings, with Cyber risk – Basic
  • Security reports, with Cyber risk – Basic

Secure connection

  • Own key for each connection, opening only what you have chosen
  • Approved addresses – you decide where the connection may be used from
  • Overload protection always included
  • Technical description for whoever builds the connection, right in the platform

Risk management, for your own risks

Being introduced

Risk Score automatically gives a score based on external sources and your assessments. Risk management is your own risk register: you assess the risks in your business and at your suppliers, decide on actions and follow them up.

Read about Risk management

See how you take control of your suppliers

In 30 minutes we show how you send questions to a supplier, review the answers and sign the decision. Then we work out a price that fits you.

Book a demo See pricing