Skip to content
SPECIFICTION
Get listed

TERTIQ

tertiq.com

From €79/mo Web
Visit tertiq.com
Spec score 7.1 #19 of 31 in Third-Party Risk Management Software

Spec sheet

Purpose
TERTIQ is a third-party cybersecurity risk management platform for assessing suppliers, collecting security evidence, identifying control gaps, tracking remediation, and maintaining an auditable supplier-risk program.Read 9 Oct 2026 · tertiq.com
Intended users
It is designed for internal security and compliance teams, vCISOs, MSPs, and consultants working with regulated or security-conscious businesses.Read 9 Oct 2026 · tertiq.com
Privacy
TERTIQ says it does not store full payment card numbers or card security codes in its own database; payment details go directly to Stripe.Read 9 Oct 2026 · tertiq.com
Support
The pricing page offers tailored onboarding and support for Consultant / Custom plans and directs inquiries to [email protected].Read 9 Oct 2026 · tertiq.com
Assessments
Tiered assessments use structured YES, PARTIAL, NO, and N/A responses across areas including governance, identity and access, data protection, vulnerability management, incident response, business continuity, and supply-chain security.Read 9 Oct 2026 · tertiq.com
Audit trail
Assessments, findings, attachments, and remediation events are timestamped, attributed, and exportable for NIS2, ISO 27001, SOC 2, and GDPR workflows.Read 9 Oct 2026 · tertiq.com
Certifications
TERTIQ states that it does not currently hold SOC 2, ISO 27001, NIS2, GDPR, or another third-party certification.Read 9 Oct 2026 · tertiq.com
Evidence and remediation
Teams can attach security reports, policies, certifications, and other documents to supplier assessments, then assign findings remediation actions, owners, deadlines, and progress states.Read 9 Oct 2026 · tertiq.com
Free access
There is no free commercial plan, but a public live demo can be explored without modifying production data.Read 9 Oct 2026 · tertiq.com
Infrastructure
The company says its platform runs on Vercel and stores primary data in Neon PostgreSQL, with database backups, point-in-time recovery, and replication handled by Neon.Read 9 Oct 2026 · tertiq.com
Notable limits
Starter supports up to 20 suppliers and 5 active team members; Business supports up to 100 suppliers and unlimited team members.Read 9 Oct 2026 · tertiq.com
Reporting
TERTIQ includes risk reporting, CSV exports, and an executive Board Summary covering supplier risk, findings, remediation, and overall risk posture.Read 9 Oct 2026 · tertiq.com
Risk scoring
Supplier risk scoring is deterministic and explainable, based on a seven-factor inherent-risk model; the company says it does not use AI to calculate risk.Read 9 Oct 2026 · tertiq.com
Security architecture
The security page describes organization-scoped records, role-based access control with five roles, Auth.js passwordless email sign-in, and HTTPS traffic.Read 9 Oct 2026 · tertiq.com

Plans and prices

Starter €79 a month €79/month Up to 20 suppliers · Up to 5 team members · Supplier risk scoring · Tiered assessments · Evidence vault and review workflow · Findings and remediation tracking · Periodic reviews · Reports and CSV exports Read 9 Oct 2026 · tertiq.com
Business €199 a month €199/month Up to 100 suppliers · Unlimited team members · Everything in Starter · Board summary reporting · Full assessments and control coverage · Advanced finding categorization · Executive-ready risk dashboards Read 9 Oct 2026 · tertiq.com
Consultant / Custom Priced on request Contact sales Custom supplier capacity · Custom deployment options · Tailored onboarding and support · Capacity scoped to engagement model Read 9 Oct 2026 · tertiq.com

Every TERTIQ plan and price →

Where Specifiction places it

Alternatives to TERTIQAll alternatives →