Scytale adds AI-powered third-party risk management to Vendors module

Scytale has launched AI-powered third-party risk management capabilities inside its Vendors module, extending vendor oversight from a periodic review exercise into a continuously updated risk intelligence engine. The company said the tools automate vendor discovery, risk scoring and evidence collection across compliance frameworks.

The release connects to the wider Scytale platform, including cross-framework control mapping for SOC 2, ISO 27001, GDPR, HIPAA and SOX ITGC, and the company’s customizable Trust Center. Vendor evidence gathered in the module feeds control requirements across those frameworks, so third-party oversight contributes to audit readiness rather than running alongside it.

Scytale cited Verizon’s 2026 Data Breach Investigations Report, which found 48 percent of breaches involved a third party, up 60 percent year over year. The company said growing vendor ecosystems and the arrival of AI tooling in the supply chain leave point-in-time questionnaires and static spreadsheets unable to keep pace.