◆ PartnerScope

PartnerScope · Tarife

Drittanbieter-KI-Risiko — ohne 40-seitigen Fragebogen

PartnerScope bewertet Ihre Anbieter über 13 Dimensionen — verhaltensbasiert, finanziell und KI-Compliance — mit automatisierten Tests, Dokumentenprüfung und KI-Red-Teaming. Direkt einsetzbare Reports im Einklang mit EU AI Act, GDPR, DORA und NIS2.

Tarife ansehen → Kostenlosen Snapshot testen
  • Umfang und Preis vor Zahlung bestätigt
  • EU-gehostet · GDPR-konform
  • Namentlich genannter Analyst bei jedem Pro-Report
Noch nicht bereit zu kaufen? Erhalten Sie einen 60-Sekunden-Risiko-Snapshot — 4 Fragen, kein Konto erforderlich.
Kostenlos testen →

Pricing

Three tiers. One methodology.

Starter checks the external technical surface of a supplier domain. Pro adds public-source research against your task and criteria, with a named analyst reviewing the recommendation. Enterprise is a portfolio engagement with scope agreed before payment.

Starter

€99
Single vendor · external technical snapshot · one-time

An external technical snapshot of one vendor domain — plus the questions to ask them next.

  • Automated checks on the vendor domain: DNS, TLS, HTTP security headers, Certificate Transparency log
  • Each check reported with time, object tested and its limits — a failed service is reported as "not checked", not as a finding
  • Open questions for the vendor, derived from what the checks could not see
  • No composite score or approval verdict; Pro adds a recommendation reviewed by a named analyst
Start Starter →

Sign in, add a company and order Starter from its page. Secure payment starts the checks; your technical PDF is delivered in the dashboard.

Pro

€299
One supplier · your task and criteria · analyst-reviewed

Serious vendor decisions — new contract, renewal, audit response.

  • Everything in Starter, plus:
  • Your brief: the supplier, work to be performed and priority criteria
  • Public-source research into the supplier against your brief, with source links and stated limitations
  • Named analyst review before delivery: checked findings, unresolved gaps, conditions and a written recommendation
  • Additional documentary checks — DPA, ISO 27001 / SOC 2 scope, Model or System Card, SBOM, BCP / IR plan — only when separately agreed and the documents are available
  • Sanctions, insolvency and ownership checks; EU AI Act applicability and obligations review — additional manual scope agreed before execution
  • AI red-team probes require a separately agreed, authorized and testable endpoint; otherwise not assessed
Start Pro → Book a 15-min demo →

Sign in, add your supplier and brief, then order Pro. A named analyst reviews the findings before PDF delivery. Target: 5 business days after scope confirmation. Additional checks require an agreed scope.

Enterprise

€4 900
per quarter · 15-vendor minimum · scoped engagement

15+ vendors, regulated industries, a portfolio reviewed every quarter.

  • Everything in Pro, applied across your vendor portfolio
  • Quarterly re-review of every vendor in scope; changes since last review called out
  • Dedicated analyst and a quarterly executive briefing
  • Continuous monitoring, SSO and GRC integrations are scoped and priced per contract — not off the shelf
  • Additional vendors €199 / vendor / quarter
Book Enterprise call →

Scope, onboarding and integrations are agreed in the contract before any invoice.

Warum PartnerScope

Entwickelt für den EU-Risiko-Stack.

EU

Entwickelt für den EU-Stack.

EU AI Act, GDPR Art. 28, DORA Art. 28–30, NIS2. Jeder Befund mit Verweis auf Verordnung und Anhang.

✓

Auditierbare Nachweise.

Jeder Befund nennt Quelle, Datum, Prüfgegenstand und Prüfstatus. Unbekanntes bleibt unbekannt — es wird nie bewertet.

★

Unabhängig und namentlich.

Jeder Pro-Report ist von einem namentlich genannten Analysten signiert. 15 Tage Anbieter-Anhörungsrecht.

Free snapshot · 60 seconds · no account

Get a 60-second AI-risk snapshot

Answer 4 questions about a vendor you're evaluating. We score it against three AI-specific dimensions (data provenance, model transparency, regulatory readiness) and email you a preview alongside your upgrade path.

  1. 1
    Data Provenance
    The vendor can fully document training data sources for their AI models.
    1 — No lineage — cannot say where data came from. 5 — Complete lineage with licences and consent basis.
  2. 2
    Model Transparency
    The vendor publishes a Model Card or System Card for each model in production.
    1 — None published. 5 — Comprehensive, updated with every release.
  3. 3
    Model Versioning
    Model versions are tracked and clients are notified of material changes.
    1 — No versioning. 5 — SemVer + changelog + client notice.
  4. 4
    EU AI Act Readiness
    The vendor has completed EU AI Act Annex III self-assessment (and registered, if applicable).
    1 — Not started. 5 — Registered, documentation ready.
GDPR: EU-hosted, 90-day lead retention, privacy.

Frequently asked

Questions buyers ask before signing the PO

How is this different from our existing GRC tool?

We are a data source, not a replacement. Reports are delivered as PDF; structured JSON is available on request. Direct GRC integrations (ServiceNow, Archer, OneTrust, SAP Ariba) are scoped per Enterprise contract, not available off the shelf.

Do vendors have to pay?

No. The buyer pays; vendors are asked for documents and answers at no cost.

Who runs the red-team?

Our analyst, using a catalogue aligned to OWASP LLM Top 10 (2025), MITRE ATLAS and NIST AI RMF — and only where the vendor exposes a testable endpoint under agreed rules of engagement. Otherwise the report says "not tested".

GDPR / EU hosting?

Yes. Data is stored in Germany (Hetzner, Falkenstein). DPAs signed with every customer. Sub-processors are listed at partnerscope.eu/legal/sub-processors.

Refunds?

Nothing is charged before scope is confirmed. If we cannot deliver the agreed scope, undelivered work is refunded pro-rata.

Can we self-serve?

Not yet. Starter and Pro start with a short request form; we confirm scope within one business day and send a Stripe payment link. Enterprise requires a scoping call (portfolio sizing, SSO, integrations).

Bereit zu starten?

Fragen Sie einen Starter-Snapshot an — oder sprechen Sie mit uns über Pro und Enterprise.

Neugierig, wie wir Anbieter bewerten? Bewertungsmethodik ansehen →

Tarife ansehen → Kontakt aufnehmen