Skip to main content
The Vendor Directory is VISO TRUST’s catalog of known third-party organizations. It contains pre-populated company profiles that help VISO TRUST build more accurate instant assessments, faster and with less manual input.

​
What the directory contains

Each directory entry includes:
  • Company name, website, and primary domain(s)
  • Industry classification
  • Headquarters location and company size
  • Known compliance certifications (SOC 2, ISO 27001, etc.)
VISO TRUST uses this information to pre-populate vendor profiles when you create a relationship and to seed instant assessments with publicly available intelligence.

​
Searching the directory

The directory is accessible when you Add a Relationship. Type the vendor’s name into the search field and VISO TRUST suggests matches from the directory. When you select a vendor from the directory:
  • VISO TRUST automatically populates company details in the relationship
  • VISO TRUST can immediately offer to predict relationship context based on the vendor’s profile
  • Instant assessment runs with richer starting data than an unknown vendor

​
When a vendor isn’t in the directory

If you search and don’t find the vendor, click Create new third-party organization at the bottom of the search results. Enter the vendor’s name and website URL.
Providing a website URL for vendors not in the directory is important. Without a URL, VISO TRUST has limited ability to conduct a public research assessment and the risk analysis will be less predictive.
Once you create a new vendor entry, VISO TRUST begins building a profile for that organization using publicly available information.

​
Public artifacts and certifications

When VISO TRUST finds publicly available evidence for a vendor (security pages, compliance badges, trust portals, public audit summaries), it uses that evidence to derive initial control coverage:
  • Publicly available artifacts (full documents VISO TRUST can access): counted as present controls with full confidence
  • Compliance certifications (certification badges claimed on the vendor’s website): counted as partial coverage, with lower assurance than a validated report
To get full credit and higher confidence, request the actual certification document (e.g., the SOC 2 report) from the vendor.
You can control whether publicly claimed compliance certifications influence residual risk scoring. Go to Settings to manage this preference.