What you get

Six products, refreshed every month

No software to learn and no report that disappears into a drawer. These are the tangible products the Vendor & AI Control Tower keeps up to date for you — run by a dedicated team, filled with your vendors and contracts.

Example of the supplier register with contract status, documents and risk assessment per vendor
Product 1

Supplier register

One up-to-date overview of all your IT vendors and contracts. Not delivered once, but refreshed every month — so the register is correct on the day you need it.

  • Per vendor: contract owner, term, notice period and annual value
  • Document status: contract, data processing agreement, SLA and certifications (ISO 27001, SOC 2)
  • Criticality and replaceability per vendor, so you know where you are vulnerable
  • Duplicate and unused SaaS flagged as savings opportunities
  • Yours, not ours: exportable and transferable at any moment

How it works. At the start we set the baseline together; from then on we keep the register current every month — new contracts, changes, cancellations and price adjustments processed as soon as they are known. You don't get an empty system to fill yourself, but a maintained register.

The result. No longer dependent on knowledge in heads and inboxes. When your board, an auditor or a regulator asks "which vendors do we have and what have we agreed with them?", you have the answer within a minute instead of within a week.

Product 2

Renewal radar

The most expensive mistake in vendor management is a silent renewal at a higher rate. The radar makes sure every decision point is on the table well in time — with a recommendation attached.

  • All cancellation windows and silent renewals on one timeline per quarter
  • Alerts 90, 60 and 30 days before every deadline — straight to your inbox
  • Price indexations and announced price changes spotted and quantified
  • A recommendation per renewal: extend, renegotiate or terminate
  • In Control and Office we also run the renegotiation for you

How it works. The radar reads continuously from your register. As soon as a cancellation window comes into view, the contract appears on the timeline and the contract owner gets the first alert — well before the term lapses.

The result. Renewals become a choice again instead of a surprise: you negotiate calmly and on time, and that is exactly where the savings sit.

Example of the renewal radar with cancellation windows per quarter and the next deadline highlighted
Example of the AI inventory with purpose, risk class and status per AI system
Product 3

AI inventory

Your vendors are building AI into their software at high speed — often without you noticing. The AI inventory shows where AI runs, what it does and what risk it carries.

  • Every AI feature in your vendor software spotted and labelled
  • Risk classification aligned with the EU AI Act categories
  • AI file per vendor: purpose, data flows, DPIA status and vendor statement
  • New AI features in SaaS updates reported immediately — before they are switched on
  • Audit-ready for board, clients and regulators

How it works. We track your vendors’ release and update communications and test every change against your register. When a new AI feature appears, it enters the inventory with a risk classification — and, where relevant, an alert before activation, so you can decide before the data flows.

The result. AI is no longer something that happens to you via updates: you know what is in play before it switches on, and you can demonstrate to board, clients and regulators that you are in control.

Product 4

Risk profile

One score per vendor, built from four domains. You see at a glance which vendor needs attention — and why.

  • Sub-scores on contract, security, cost and AI — weighted into one overall score
  • Concrete improvement actions per vendor, with an owner and a deadline
  • Savings opportunities quantified: what does renegotiating or terminating yield?
  • Reassessed every quarter, so you see the trend
  • Audit-ready file with all evidence in one place

How it works. The profile draws data from the other products — register, renewal radar and AI inventory — and weighs it into a single score. We reassess every quarter, so you look at a movement rather than a snapshot.

The result. You steer on the vendors that genuinely matter instead of on whoever shouts loudest — and you can substantiate why, to your board, an auditor or a regulator.

Example of the risk profile with an overall score and sub-scores for contract, security, cost and AI
Example of the agent register with vendor, mandate and status per autonomous agent
Product 5 · from Control

Agent register

Vendors increasingly ship autonomous agents that perform tasks in your environment on their own. The agent register makes them visible and keeps them within their mandate.

  • Register of all third-party agents, with vendor and purpose
  • Mandate per agent: which data, which systems, which limits
  • Logging and monitoring agreements recorded per vendor
  • Detection and escalation when behaviour leaves the mandate
  • Kill-switch procedure agreed before anything goes wrong

How it works. When a vendor deploys an agent, we record it with mandate, access and monitoring agreements, and periodically test whether its actual behaviour stays within that mandate. "The agent did something" is always traceable to: this was allowed, this was logged, and this is how we intervene.

The result. Autonomous agents become a controlled part of your operation instead of an invisible risk — with a mandate, a log and a kill switch for every agent.

Product 6 · from Control

AI contract file

Most contracts were written before the AI wave. The AI contract file shows per vendor which clauses you do and do not have — and what happens about it.

  • Coverage overview per contract: data use, training, IP and liability
  • Missing clauses flagged, with a concrete AI addendum proposal
  • Exit and data return agreements checked
  • Negotiation status tracked per vendor
  • Your lawyer signs — we prepare everything

How it works. We run your existing contracts against a fixed set of AI criteria. Where agreements are missing, we deliver an addendum you bring in at the next renewal — via the renewal radar. That way you repair the portfolio at the natural moment, without reopening everything.

The result. Data use, model training, ownership and liability are in black and white. If something goes wrong with AI at a vendor, you know in advance where you stand instead of fighting it out afterwards.

Example of the AI contract file with coverage and status per clause
Example of the quarterly report with portfolio score, compliance and realised savings
Included in Control and Office

Quarterly report for your board

Every quarter we summarise everything in a report you can forward unchanged to your board, auditor or regulator: what was saved, which risks were reduced and what is on the agenda for the coming quarter.

  • Realised savings and avoided costs, quantified in euros
  • Risk score trend per vendor and for your whole portfolio
  • Status of all actions, renewals and AI signals
  • In Office extended to board reporting and EU AI Act accountability

The result. Not raw data, but the story you tell at the boardroom table — backed by the figures underneath, and a consistent picture of where you stand every quarter.

Which plan includes what?

Four products in every plan, six from Control

Supplier register, renewal radar, AI inventory and risk profile are included in every plan — Monitor keeps them up to date and signals. Control adds the hands: renegotiations, the agent register, the AI contract file and the quarterly report. Office turns it into your fully outsourced vendor & AI governance office. Prefer to see where you stand first? Start with the Baseline: AI & Vendor Scan.

See pricing

This overview, but with your vendors?

Within four weeks your register is live and the radar is running. Book a call or start with the free Risk Scan.