Freedom251 › Risk Intelligence Software
ThirdSentry
What ThirdSentry is
ThirdSentry is a web platform for governance, risk, compliance, and third-party risk management at regulated companies. It combines internal compliance and vendor risk information in one data model, then compares vendor-assessed posture with live external exposure. When those signals differ, it can alert owners and create remediation tasks. Its AI assistant, Effy, drafts policies, reconciles vendor signals, and prepares questionnaire answers using cited evidence; a human approves changes. It supports SIG, CAIQ, and custom questionnaires, with answers tied to their sources. The integrations page lists more than 250 providers across cloud, identity, code, HR, ticketing, CRM, accounting, file storage, and security tools. Its API exposes vendors, controls, evidence, policies, assessments, and risks through REST, JSON, an OpenAPI spec, and webhooks. ThirdSentry describes server-side tenant isolation, append-only mutation logs, and encryption in transit and at rest. Plans have flat fees, unlimited users, and tiers based on framework expansion; pricing is available on request.
Who it suits
ThirdSentry is aimed at regulated companies, including those in fintech, insurance, healthcare SaaS, and regulated B2B SaaS. It may suit teams managing compliance frameworks, vendor risk, and security questionnaires.
What it does well
- Combines internal compliance and vendor risk data.
- Flags gaps between vendor assessments and external exposure.
- Questionnaire answers cite company evidence.
- Lists more than 250 integration providers.
- Plans include unlimited users.
What to know first
- No free plan is listed.
- Pricing is available on request.
- Launch is limited to 25 vendors.
- Effy changes require human approval.
Limits
The Launch plan covers one framework and up to 25 vendors. Foundation covers two frameworks with no vendor cap, while Professional and Enterprise add capabilities described for those tiers; all listed plans have unlimited users.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Launch | 1 framework (SOC 2, ISO 27001, or HIPAA) · Up to 25 vendors · Unlimited users | On request |
| Professional | Up to 5 frameworks · Vendor Dual-Signal Risk Intelligence · Posture Divergence Detection · Unlimited users | On request |
| Foundation | 2 frameworks · Full vendor program with no cap · Unlimited users | On request |
| Enterprise | Unlimited frameworks · Custom integrations · Dedicated CSM and audit support · Unlimited users | On request |
As thirdsentry.com lists them, read 7 Oct 2026. The maker's own page has the final word.
Getting started
- Open the ThirdSentry website
- Request pricing and select a framework-based plan
- Connect providers from the listed integration categories
- Import or collect evidence, vendors, controls, and assessments
- Configure policies, alerts, remediation tasks, and questionnaire workflows
- Use the web platform or its REST, JSON, OpenAPI, and webhook interfaces
Verdict
ThirdSentry brings compliance and vendor-risk work together with evidence-backed questionnaires and monitoring. Its fit depends on the frameworks, vendor program, and pricing tier a company needs.
Questions
Does ThirdSentry offer a free plan?
No. ThirdSentry is paid, and pricing is available on request.
How is pricing structured?
Plans use flat fees with unlimited users. The pricing tier is determined by framework expansion.
What does Launch include?
Launch includes one framework—SOC 2, ISO 27001, or HIPAA—and up to 25 vendors, with unlimited users.
What integrations are available?
The integrations page lists more than 250 providers across cloud, identity, code, HR, ticketing, CRM, accounting, file storage, and security tooling.
Which questionnaires can it answer?
Effy answers SIG, CAIQ, and custom questionnaires using company evidence, and each answer cites its source.
What security controls are stated?
ThirdSentry states that it enforces server-side tenant isolation, records mutations in an append-only AuditLog, and encrypts data with TLS 1.2 or later in transit and AES-256 at rest.
Facts from ThirdSentry's own pages
- AI assistant
- Effy drafts policies, reconciles vendor signals, and answers security questionnaires with cited evidence; a human approves changes. · thirdsentry.com, 7 Oct 2026
- AI hosting
- The security page says AI inference runs on AWS Bedrock via STS AssumeRole and embeddings use Titan v2. · thirdsentry.com, 7 Oct 2026
- API
- The API exposes vendors, controls, evidence, policies, assessments, and risks, with REST, JSON, an OpenAPI spec, and webhooks. · thirdsentry.com, 7 Oct 2026
- Integrations
- The integrations page lists 250+ providers across categories including cloud, identity, code, HR, ticketing, CRM, accounting, file storage, and security tooling. · thirdsentry.com, 7 Oct 2026
- Pricing and users
- The pricing page says plans use flat fees with unlimited users and that framework expansion determines the pricing tier. · thirdsentry.com, 7 Oct 2026
- Product
- ThirdSentry describes itself as an agentic GRC and third-party risk management platform for regulated companies. · thirdsentry.com, 7 Oct 2026
- Questionnaires
- The product answers SIG, CAIQ, and custom questionnaires from company evidence, with each answer citing its source. · thirdsentry.com, 7 Oct 2026
- Security controls
- ThirdSentry states it enforces server-side tenant isolation, logs mutations in an append-only AuditLog, and encrypts data in transit with TLS 1.2+ and at rest with AES-256. · thirdsentry.com, 7 Oct 2026
- Security review support
- ThirdSentry says it responds to standard security questionnaires within two business days. · thirdsentry.com, 7 Oct 2026
- Target customers
- The company says it is onboarding design partners across fintech, insurance, healthcare SaaS, and regulated B2B SaaS. · thirdsentry.com, 7 Oct 2026
- Unified risk data
- The platform combines internal compliance posture and vendor risk posture on one data model. · thirdsentry.com, 7 Oct 2026
- Vendor monitoring
- It compares vendor-assessed posture with live external exposure and routes mismatches into owner alerts and remediation tasks. · thirdsentry.com, 7 Oct 2026
Where ThirdSentry stands on Freedom251
- Risk Intelligence Software#15 of 23
- Third Party & Supplier Risk Management Software#15 of 23
- Third-Party Risk Management Software#25 of 31
- Policy Management Software#19 of 21