Skip to main content
Vendor Discovery automatically surfaces third-party vendors that are referenced in your organization’s security artifacts — helping you find vendors you may not be tracking yet. It’s built on VISO TRUST’s subservicer extraction capability, which identifies sub-processors and service providers mentioned in uploaded documents.

How Vendors Are Discovered

Vendors appear in Vendor Discovery when they are extracted from artifacts uploaded to your Trust Profile. VISO TRUST’s AI analyzes these documents and identifies references to third-party organizations — pulling in vendors mentioned as sub-processors, subservicers, or technology partners. To get started with Vendor Discovery:
  1. Go to Trust → Knowledge base and upload your organization’s security artifacts (e.g., SOC 2 reports, DPAs, sub-processor disclosure statements)
  2. VISO TRUST analyzes these artifacts and identifies referenced third parties
  3. Discovered vendors appear in the Vendor Discovery table
Artifacts uploaded to your Trust Profile are not shared with anyone outside your VISO TRUST instance.

Browsing Discovered Vendors

Navigate to Third Parties → Vendor Discovery in the left sidebar to see your discovered vendor table. Use the filter at the top right to toggle between:
  • Pending (default) — vendors that don’t yet have a relationship in your directory
  • All — every discovered vendor, including those already added
Each row shows the vendor and a link to the artifact where they were detected.

Adding Relationships from Vendor Discovery

You can add relationships directly from the discovery table without going through the Add Relationship flow: Once added, relationships go through the standard creation flow — including instant assessment if enabled.

FAQ

How are vendors discovered? Vendors are extracted from subservicer data found in uploaded artifacts. VISO TRUST’s AI parses and matches entity names from your documents against known organization profiles. What counts as a “new” vendor? A vendor is new if there is no existing relationship for that organization in your directory. Can I undo a relationship after adding it from discovery? Yes — manage or delete the relationship through the standard relationship management flow.