For banks, insurers and large companies
When a vendor forgets to tell you, will you know?
You will if someone else is reading its pages every day. That is the service.
Your vendors are bound to notify you of changes. We are the independent second source for when they don’t, and the dated proof that you were watching.
The service
Four things, every day.
Run for you, with a named contact.
Every vendor you name.
Not only the ones we watch today. We add a new vendor within 5 business days.
Read every day.
Each sub-processor list, data agreement and trust page, with a dated, timestamped copy of every reading.
Where your team works.
Changes by email, in Microsoft Teams, or as a file your risk system imports.
A report for your auditor.
Each month: what every vendor promised, what changed, and when we saw it.
We already read 186 vendors’ pages. See the public record.
What the rules expect
Regulators expect you to keep watching.
Using a vendor doesn't move the responsibility off your firm.
US banks
The 2023 interagency guidance lists a vendor's use of subcontractors, and where they are, among the things to monitor.
EU financial entities
DORA, applying since 17 January 2025, requires a register of ICT contracts, including the subcontractors behind critical or important functions.
Read more, quoted from the official texts:
Start here
A free vendor-change audit.
Free, and it asks nothing of you but a list.
Send us your vendor list, or your sub-processor page.
Within a week, we check each vendor's published pages.
You get which ones changed in the last 90 days, with dated proof.
Common questions.
- Does this replace our vendor-risk platform?
- No. It sits beside it. Your platform holds assessments and workflows; Xither reads what each vendor publishes, every day, and keeps dated copies.
- Do you score or rate vendors?
- No. We quote what a vendor's own pages say, with the page and the date we read it. Judging it stays with your team.
- What does it cost?
- It depends on how many vendors you name. Tell us, and we'll quote a price. The audit is free either way.