Why Northwind Financial chose TrustVendor
Northwind Financial’s compliance team was building a SOC 2 program and needed to demonstrate vendor risk management as a control. Their existing process — email threads, saved PDFs, and spreadsheet tracking — was hard to defend in an audit. Auditors wanted to see evidence of how each vendor claim was verified, not just that claims were recorded.
How it deployed
TrustVendor replaced the spreadsheet with a system where every vendor claim is linked to its source document. The compliance team configured alerts for evidence decay and set up the Jira integration to create tickets when certifications approached expiry.
Results
Northwind passed their SOC 2 Type II audit with the vendor risk control marked as having strong evidence. The auditors were satisfied by the hash-verified artifact links. The total time spent preparing vendor risk evidence for the audit was 20 minutes — pulling a report from TrustVendor.