Build your program with the right partners.

ThirdSentry works with two kinds of partners: audit firms that examine compliance programs, and vCISO practices that run those programs for clients. Both work inside the same platform their clients use, so controls, policies, evidence, and vendor records are reviewed in place instead of being exported to spreadsheets and shared folders.

Yes. ThirdSentry is pre-GA and onboarding design partners, and we want to hear from audit firms and vCISO practices now. The platform already covers ten frameworks, internal GRC, and vendor risk on one data model. To start a conversation, use the contact link on this page and tell us which frameworks your clients are working toward.

An auditor signs in with the AUDITOR role, which is read-only across the platform and enforced on the server, not only in the interface. Auditors can view assessments, risks, policies, and evidence, leave reviewer comments, and submit reviews. They cannot create, edit, or delete records, and every change made by anyone is written to the audit log.

Yes. Each client organization is its own tenant, and every query in the platform is scoped to that organization. Policies, evidence, vendor records, and the knowledge base the AI assistant retrieves from all stay inside the client's tenant. For a partner working with several clients, one client's data does not appear in another client's workspace.

No. Pricing is a flat fee with unlimited users on every tier, so adding an auditor, a vCISO, or their team members does not add seat charges. AI features are included on every tier as well. The price changes with the number of frameworks a client runs, not with the number of people who log in.