ProcessUnity Global Risk Exchange

ProcessUnity provides third-party risk management (TPRM) software solutions designed to help organizations assess, monitor, and manage risks associated with their vendors and business partners. The company operates two primary commercial products: the ProcessUnity TPRM Platform and the Global Risk Exchange.

The TPRM Platform is a workflow-based application hosted on Microsoft Azure that enables organizations to conduct vendor risk assessments, manage compliance requirements, and maintain oversight of third-party relationships. The platform includes role-based access controls, supports multiple authentication methods including single sign-on and multi-factor authentication, and provides customizable workflows for risk management processes.

The Global Risk Exchange is a shared assessment platform hosted on Amazon Web Services that allows organizations to access pre-completed vendor security assessments. The exchange includes self-attested questionnaire responses, validation results from auditing firms, continuous outside-in scanning data, and threat intelligence signals. This approach reduces redundant assessment efforts across multiple customer organizations.

ProcessUnity maintains SOC 2 Type 2 and ISO 27001:2022 certifications, undergoes annual independent penetration testing, and has obtained a Legal Entity Identifier for DORA compliance. The company encrypts data in transit using TLS 1.2 or better and at rest using AES-256 encryption. Customer data processing is limited to business contact information including names, business email addresses, optional phone numbers, and IP addresses. The company performs hourly backups of production databases and maintains an incident response program with documented playbooks.