Skip to main content
Vendor Management
4 min readUpdated 2026-02-15

Vendor Profiles

How to create and manage vendor profiles in Klarvo — tracking AI vendors, their products, contact information, and compliance documentation in a centralized registry.

Vendor Profiles

Most SMEs use AI built by third-party vendors. Klarvo's vendor registry provides a centralized place to track every AI vendor, their products, documentation, and compliance status.

What a Vendor Profile Contains

FieldDescription
Vendor NameLegal entity name
WebsiteVendor's website URL
Primary ContactName and email of your main contact
CountryVendor's headquarters location
DescriptionWhat they provide (brief)
Linked AI SystemsAll your AI systems using this vendor
ContractsAgreement documents and renewal dates
AttestationsEU AI Act-related statements
Security EvidenceSOC 2, ISO 27001, etc.
Due Diligence StatusChecklist completion percentage

Creating a Vendor Profile

Method 1: During AI System Wizard

When adding a new AI system (Step 2), you can create a vendor on the fly:

  • Click Add New Vendor
  • Enter basic information
  • The vendor is created and linked to the system
  • Method 2: From the Vendor Registry

  • Navigate to Vendors in the sidebar
  • Click Add Vendor
  • Fill in the complete profile
  • Save
  • Viewing Vendor Details

    Click any vendor in the registry to see:

  • Overview: Basic information and description
  • Linked Systems: All AI systems using this vendor with their classifications
  • Contracts: Agreement documents with start/end dates
  • Due Diligence: Checklist status and completion percentage
  • Attestations: EU AI Act-related vendor statements
  • Evidence: All documentation linked to this vendor
  • Activity: Recent changes and updates
  • Vendor Risk Indicators

    Klarvo surfaces vendor-level risk signals:

  • Multiple high-risk systems: If several high-risk systems use the same vendor, that vendor is a concentration risk
  • Missing documentation: Vendors without contracts, security evidence, or attestations
  • Expiring contracts: Renewal dates approaching without updated documentation
  • Stale due diligence: Checklists not reviewed within 12 months
  • Best Practices

    📋 Create vendors early: Don't wait until audit time — register vendors when you add AI systems
    🔗 Link all systems: Ensure every vendor-based AI system is connected to its vendor profile
    📅 Track renewal dates: Set contract end dates to receive renewal reminders
    📄 Request documentation proactively: Ask vendors for AI Act-relevant documentation at procurement
    🔄 Review annually: Vendor profiles should be reviewed at least annually