What you get

Five products, refreshed every month

No software to learn and no report that disappears into a drawer. These are the tangible products the Vendor & AI Control Tower keeps up to date for you — run by a dedicated team, filled with your vendors and contracts.

Screenshot from the platform (Dutch interface): the supplier register showing category, business impact, risk tier, data location, AI use, annual value and status per vendor
Product 1

Supplier register

One up-to-date overview of all your IT vendors and contracts. Not delivered once, but refreshed every month — so the register is correct on the day you need it.

  • Per vendor: contract owner, term, notice period and annual value
  • Document status: contract, data processing agreement, SLA and certifications (ISO 27001, SOC 2)
  • Criticality and replaceability per vendor, so you know where you are vulnerable
  • Duplicate and unused SaaS flagged as savings opportunities
  • Yours, not ours: exportable and transferable at any moment

How it works. At the start we set the baseline together; from then on we keep the register current every month — new contracts, changes, cancellations and price adjustments processed as soon as they are known. You don't get an empty system to fill yourself, but a maintained register.

The result. No longer dependent on knowledge in heads and inboxes. When your board, an auditor or a regulator asks "which vendors do we have and what have we agreed with them?", you have the answer within a minute instead of within a week.

Product 2

Renewal radar

The most expensive mistake in vendor management is a silent renewal at a higher rate. The radar makes sure every decision point is on the table well in time — with a recommendation attached.

  • All cancellation windows and silent renewals on one timeline, grouped by urgency: within 30 days, 31–90, 91–180 and later
  • Every obligation starts its own workflow at the lead time that fits it — a notice deadline earlier than an SLA report — with a message to the contract owner
  • Price indexations and announced price changes spotted and quantified
  • A recommendation per renewal: extend, renegotiate or terminate
  • From Control up we also run the renegotiation for you

How it works. The radar reads continuously from your register. As soon as a cancellation window comes into view, the contract appears on the timeline and the contract owner gets the first alert — well before the term lapses.

The result. Renewals become a choice again instead of a surprise: you negotiate calmly and on time, and that is exactly where the savings sit.

Screenshot from the platform (Dutch interface): the renewal radar showing cancellation deadlines within thirty days, the safe start date, annual value and workflow status
Screenshot from the platform (Dutch interface): assessments per vendor, including the AI Act risk class, the data processing agreement check and the usage analysis
Product 3

AI inventory

Your vendors are building AI into their software at high speed — often without you noticing. The AI inventory shows where AI runs, what it does and what risk it carries.

  • AI functionality in your vendor software mapped: what it does, which data it touches and which role you hold
  • Risk classification aligned with the EU AI Act categories
  • AI file per vendor: purpose, data flows, DPIA status and vendor statement
  • We track your vendors’ release and product announcements and report what surfaces in them
  • Audit-ready for board, clients and regulators

How it works. Each month we go through your vendors’ release and product announcements and hold them against your register. When an AI feature surfaces, it enters the inventory with a risk classification and a recommendation. What a vendor does not announce, we cannot see either — which is why we ask for it explicitly at the annual review and record the answer.

The result. AI stops being a blind spot in your vendor landscape. You know per vendor what is running, who is responsible for what, and where a gap remains — and you can demonstrate it to board, clients and regulators.

Product 4

Risk profile

Two scores per vendor: the risk the service carries by its nature, and what remains once your agreements and evidence are weighed in. You see at a glance which vendor needs attention — and why.

  • Seven weighted factors: business impact, personal data, access to your environment, financial size, location and supply chain, AI in the service, and replaceability
  • Concrete improvement actions per vendor, with an owner and a deadline · from Control
  • Savings opportunities quantified: what does renegotiating or terminating yield? · from Control
  • Every vendor in a risk tier with a fixed reassessment interval: yearly for critical vendors, up to every three years for light ones · from Control
  • Audit-ready file with all evidence in one place

How it works. The profile draws data from the other products — register, renewal radar and AI inventory — and weighs it into a single score. We reassess every quarter, so you look at a movement rather than a snapshot.

The result. You steer on the vendors that genuinely matter instead of on whoever shouts loudest — and you can substantiate why, to your board, an auditor or a regulator.

Screenshot from the platform (Dutch interface): the vendor risk report showing inherent risk, residual risk, tier and next reassessment date per vendor
Screenshot from the platform (Dutch interface): the contract file with the cancellation deadline, term, price clause, savings potential and the running workflow
Product 5 · from Control

AI contract file

Most contracts were written before the AI wave. The AI contract file shows per vendor which clauses you do and do not have — and what happens about it.

  • Coverage overview per contract: data use, training, IP and liability
  • Missing clauses flagged, with a concrete AI addendum proposal
  • Exit and data return agreements checked
  • Negotiation status tracked per vendor
  • Your lawyer signs — we prepare everything

How it works. We run your existing contracts against a fixed set of AI criteria. Where agreements are missing, we deliver an addendum you bring in at the next renewal — via the renewal radar. That way you repair the portfolio at the natural moment, without reopening everything.

The result. Data use, model training, ownership and liability are in black and white. If something goes wrong with AI at a vendor, you know in advance where you stand instead of fighting it out afterwards.

Included from Control up

Quarterly report for your board

Every quarter we summarise everything in a report you can forward unchanged to your board, auditor or regulator: what was saved, which risks were reduced and what is on the agenda for the coming quarter.

  • Realised savings and avoided costs, quantified in euros
  • Risk score trend per vendor and for your whole portfolio
  • Status of all actions, renewals and AI signals
  • In Assurance extended to board reporting and EU AI Act accountability

The result. Not raw data, but the story you tell at the boardroom table — backed by the figures underneath, and a consistent picture of where you stand every quarter.

Screenshot from the platform (Dutch interface): the quarterly report listing the decisions needed next quarter
Which plan includes what?

Four products in every plan, five from Control

Vendor register, renewal radar, AI inventory and the calculated risk score are included at every level — Visibility keeps them up to date and raises the flags. Control adds the hands: renegotiation at renewals, price letters tested against the clause, the clause check per contract and the quarterly report. Assurance adds the formal reassessment behind the score, the AI contract file and the evidence an auditor or a major client asks of you. Nearly everyone starts with the Baseline: AI & Vendor Scan.

See pricing

Language: the platform’s navigation, workflows, task forms and outgoing e-mail are available in English; a number of screens are still Dutch and are being translated. Reporting and meetings can be in English.

This overview, but with your vendors?

Within four weeks your register is live and the radar is running. Book a call or start with the free Risk Scan.