🔗 Vendor & Supply Chain

Healthcare Vendor & Supply Chain Risk

BAA compliance, medical device security, supply chain risk and GPO contract compliance

📋 Business Associate Agreement Dashboard
Track BAA status across all business associates handling PHI
View All BAAs in HIPAA Module →
Vendor BAA Status PHI Type Risk Level Days to Expiry Action
🔌 Connected Medical Device Security Inventory
Track FDA UDI, security patches, and network segmentation status for all connected medical devices. Reference: FDA 2023 Cybersecurity Guidance and HHS HC3 advisories.
Device Name Manufacturer FDA UDI Device Type Patch Status Network Segment MDS2 Risk Action
⛏️ Critical Supply Chain Risk Monitor
Monitor single-source dependencies and concentration risks across critical supply categories.
Category Critical Suppliers Single Source Geographic Risk Alt Supplier BCP Risk Level
Critical Supplier Detail
🤝 Group Purchasing Organisation (GPO) Compliance
Track contracted vendor utilisation and GPO contract compliance to maximise cost savings.
Premier Inc
GPO Name
Primary GPO
Category GPO Contracted Spend Actual Spend Compliance % Variance Status
📊 Estimated additional savings from 100% GPO compliance: $892,000/year
Non-Compliant Purchase Alert Log — Last 30 Days
Date Department Item Amount Reason Approved By
🤖 AI Vendor Risk Assessment
Upload vendor questionnaire responses, SOC 2 reports, or security assessments for AI risk scoring.
📄
Drop vendor documents here or click to browse
SOC 2 reports, security questionnaires, MDS2 forms, BAA templates — PDF, DOCX, XLSX accepted
AI Vendor Risk Assessment Results