Trust

Methodology

Everything here is either verified public data or clearly-framed buyer education. We do not fabricate credentials, statistics, case counts, ratings, or reviews, and we never claim a standards-body citation is a compliance guarantee.

Standards & framework reference data

The named standards and frameworks referenced across this site (NIST SP 800-161, ISO/IEC 27036, the Shared Assessments SIG questionnaire and VRMMM, the EU's DORA) are real, independently-issued standards. Each guide cites the issuing body directly, with source URLs recorded. Standards-body mentions are informational context only - this index does not certify, audit, or guarantee that any organization or vendor satisfies a standard.

Vendor reference data

The 39 vendors in the reference layer are real, publicly-documented TPRM advisory firms, procurement due-diligence consultancies, and TPRM/methodology software platforms. Each record was researched and then independently re-verified via web search before publication, with source URLs recorded. Only firms with a genuinely verifiable third-party risk management or procurement due-diligence practice are included; we do not invent or list unverifiable claims. We never state or imply that a listed vendor holds a specific certification or accreditation unless a cited source explicitly says so, and this site does not itself certify, verify, or endorse any listed vendor.

Search demand

Guide priority and the demand figures shown on category pages come from Ahrefs keyword data for the United States. Where we did not pull a reliable figure for a term, we show no number rather than guess one.

Buyer guides

Each guide is buyer education: what a TPRM advisory or due-diligence engagement covers, what to verify, what to ask in an RFP, and the red flags. Every guide passed an adversarial fact-check pass whose job was to remove any invented statistic, unverifiable certification, fake standard, or implication of a compliance guarantee. Standards and frameworks are named only where they genuinely exist and are current. Verify any framework-alignment claim directly with the issuing body.

What we will not do

• No fabricated credentials, accreditations, case counts, or vendor counts.
• No fake reviews, ratings, testimonials, or fabricated "verified" claims. A paid Verified listing (see Get listed) means KG manually confirmed the business's identity and the accuracy of its own listing facts, nothing more. It is not a customer review, a star rating, a quality score, or an endorsement of the vendor's work.
• No Review or AggregateRating structured data, because no real moderated customer reviews exist here.
• No claim that any vendor is suitable for your organization, or that any program satisfies a standard or regulator. That is your call, verified directly with the issuing body and qualified professionals.

Freshness and corrections

Data is current as of 2026-07-14. Spotted an error in a vendor profile or a guide? Email hello@procurementproof.com and we will correct or remove it.