Certa Third-Party Risk Management vs Deepinfo TPRM
Certa Third-Party Risk Management
certa.ai
Deepinfo TPRM
deepinfo.comSide by side
| Figure | Certa Third-Party Risk Management | Deepinfo TPRM |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| iOS | — | Yes |
| Android | — | Yes |
| API | Yes | Yes |
| Plans published | 0 | 1 |
| Spec score · Third Party & Supplier Risk Management Software | 7.7 (#4) | 7.5 (#5) |
| Spec score · Third-Party Risk Management Software | 7.6 (#9) | 7.5 (#10) |
| Compliance | Certa’s Trust Center lists GDPR, SOC 1 Type 2, SOC 2 Type 2, and ISO/IEC 27001:2022 compliance materials. | Maps third-party findings to PCI DSS 4.0 and 3.2, HIPAA, OWASP Top 10 (2021), CWE, CAPEC, and WASC. |
| Integrations | Certa states that it offers more than 130 integrations for connecting data providers and existing systems. | The TPRM page names OneTrust, ServiceNow, and Archer as GRC platforms for exporting risk scores and findings, and also mentions ticketing systems. |
| Pricing and trial | The TPRM page invites visitors to contact a Certa expert and does not state a price or trial offer. | Pricing is quoted to scope; there is no self-serve trial, while paid pilots are offered for 30 to 60 days. |
| Purpose | Certa TPRM uses AI and automation to manage third-party risks across the third-party lifecycle. | Continuously assesses cybersecurity risk from vendors, suppliers, and partners with access to an organization’s data, systems, or brand. |
| Questionnaires | Certa can autofill vendor questionnaires and use existing evidence to prefill information-security assessments. | Deepinfo says TPRM augments existing vendor risk programs and does not replace questionnaires or contracts. |
| Security | Certa says data is encrypted with AES 256-bit encryption in transit and at rest, and offers Bring Your Own Key encryption. | Deepinfo lists GDPR and KVKK as compliant; ISO 27001, ISO 27017, ISO 27018, SOC 2 Type II, HIPAA, and PCI DSS as in progress. |
Plans
In their own words
Certa Third-Party Risk Management
Certa Third-Party Risk Management is software for managing third-party risk across the relationship, using AI and automation to support ongoing assessment rather than relying only on periodic reviews. Its due diligence draws on internal and external data, while updated documents, data feeds, and internal systems can inform continuous assessment. The platform can autofill vendor questionnaires and prefill information-security assessments from existing evidence. Teams can build rules and workflows in natural language without coding or use the drag-and-drop Studio, templates, and preset risk factors to route work, flag events, and automate decisions. Certa lists more than 130 integrations, support for millions of records and entities, and more than 50 languages. Reporting includes live dashboards and exportable tables with drill-downs. Security measures listed include AES 256-bit encryption in transit and at rest, Bring Your Own Key encryption, role-based access controls, one-time passwords, privileged access management, and audit trails. The product is available on web and via API. Pricing is on request; the page invites prospects to contact an expert.
Deepinfo TPRM
Deepinfo TPRM has no write-up on Specifiction yet; its figures are above.