Supply Chain Risk Management Software

See the choke point before the line goes down.

CorpRisk is supply chain risk management software that maps concentration and sub-tier dependencies, monitors geopolitical disruption across every trade lane, scores every supplier across six risk domains, and writes each decision into SAP Ariba, Coupa, or your ERP. Procurement teams re-source before a disruption, not after.

Suppliers mapped
1,284
tier-1 + sub-tier
Single-source parts
62
flagged for dual-sourcing
Lanes monitored
47
real-time disruption
Avg composite
74.2
per supplier
Six risk domains, one map

What supply chain risk management software should score

Geopolitical and concentration risk are weighted for the supply chain. Carbon credit uplift adds up to +20 for verified retirements.

GEO

Geopolitical & trade-lane risk

PortWatch and Vottre lane data on tariffs, export controls, border closures, sanctions corridors, and country risk ratings. Model what a Strait of Hormuz or Red Sea disruption does to every Bill of Materials before it hits your line.

CON

Concentration & sub-tier mapping

Herfindahl index, single-site percentage, sub-tier dependency, and a 4-tier geographic map. Find the single-source choke point — tier-1 or four levels down — before a line goes down.

FIN

Financial distress

Altman Z-score, debt burden, current ratio, and filed financials sourced from Equifax, D&B, and bureau data. Catch supplier distress before it becomes a supply disruption.

COM

Compliance & sanctions

UBO chains, OFAC, EU, UK, UN, and DFAT sanctions, PEPs, and adverse media via World-Check and Sayari. Resolve screening cases before a border or a contract closes.

CYB

Cyber risk

External attack surface, CVE, TLS/DNS posture, SOC 2 status, and breach databases via ThreatLens. A compromised sub-tier supplier is a supply-chain breach.

ESG

ESG & carbon

E/S/G scorecards, Scope 1/2/3, and Product Carbon Footprint in kgCO₂e. Verified carbon credit retirements uplift the composite score by up to +20.

How it works

From a mapped network to decisions your ERP can act on

Supply chain risk software is only useful when it changes a decision. Every capability below ends in an action your procurement or compliance team can take.

4-tier concentration map

Visualise single-source and single-site dependencies across four sub-tier levels. Colour a node red the moment its concentration index crosses your threshold, and see which products are downstream of it.

Trade-lane disruption monitoring

PortWatch vessel data, tariff schedule changes, and export-control lists feed the geopolitical score in real time. When a lane degrades, every supplier and product on that lane is re-scored automatically.

Composite score, configurable weights

One 0–100 score per supplier, weighted per tenant. Lean harder on geopolitical for long lead-time categories, on concentration for single-source parts, on financial for cash-critical suppliers.

Onboarding gates & policy thresholds

Set risk thresholds that block onboarding, trigger a compliance review, or require a second approver. Policy lives next to the score, not in a separate spreadsheet that nobody reads.

Contract renewal calendar with risk overlay

See every renewal on one timeline with the supplier's risk trend beside it. Renegotiate or re-source the elevated ones before the auto-renew clause fires.

Tamper-evident audit trail

Every score change, policy edit, and screening decision is append-only and exportable for DORA, APRA CPS 230, and SOC 2. Hand it to your auditor as one file.

Fits your stack

Integration Hub, not a rip-and-replace

Bidirectional connectors keep your ERP and CLM as the source of truth. CorpRisk adds a risk layer alongside.

SAP Ariba

SAP Business Network OData + cXML. Pull supplier master, purchase orders, and sourcing events. Push composite risk scores back as custom fields on the vendor record so sourcing sees the same risk as procurement.

Coupa

REST JSON + webhooks. Real-time PO, contract, and invoice sync. Block requisitions automatically when a supplier crosses your risk threshold — before the PO is raised.

Generic OpenAPI 3.1

Oracle, Workday, Ivalua, Jaggaer, Icertis, and DocuSign CLM. OAuth 2.0 client-credentials so your ERP stays the system of record and CorpRisk adds the risk layer alongside it.

Two tenants, one platform

Built for procurement, compliance, and suppliers

Buyer tenant

Procurement, category & compliance teams

Map concentration across four sub-tier levels, monitor geopolitical disruption on every trade lane, gate onboarding on policy, and push decisions to Ariba and Coupa. One workspace for procurement, category and compliance teams, with access matched to each person's job.

Buyer sign in →
Supplier tenant

Your portable dossier

Upload once. Every subscribing buyer sees your live score, badges, and questionnaire answers. Dispute anything you disagree with. Carbon credit retirements lift your score in front of the whole market.

Supplier sign in →
✓ SOC 2 Type II✓ ISO 27001✓ APRA CPS 230✓ DORA exportIRAP · in progressUAE PDPL DPA

Regional data residency across Australia, the Middle East and the United States. Your data stays in the region you choose.

FAQ

Supply chain risk management software, answered

What is supply chain risk management software?+

Supply chain risk management software continuously maps your supplier network — tier-1 down to sub-tier dependencies — and scores every node across the risk dimensions that can break a supply chain: geopolitical and trade-lane disruption, concentration and single-source choke points, financial distress, sanctions exposure, cyber posture, and ESG. CorpRisk turns those scores into decisions by writing them back into SAP Ariba or Coupa so that onboarding, contracting, and sourcing tools act on risk automatically.

How does CorpRisk map concentration and sub-tier risk?+

CorpRisk computes a Herfindahl concentration index per category, surfaces single-site and single-source percentages, and renders a 4-tier geographic map of sub-tier dependencies. When a node's concentration crosses your policy threshold it's flagged, and every downstream product is listed so you can re-source or dual-source before a disruption.

How does geopolitical risk monitoring work?+

PortWatch vessel data, tariff schedule changes, export-control lists, and country risk ratings feed the geopolitical score in real time. CorpRisk models the impact of a lane closure or tariff shift on every Bill of Materials and re-scores every supplier and product on the affected lane automatically.

Does it integrate with SAP Ariba and Coupa?+

Yes. CorpRisk ships bidirectional connectors for SAP Ariba (Business Network OData + cXML) and Coupa (REST JSON + webhooks), plus a generic OpenAPI 3.1 connector for Oracle, Workday, Ivalua, Jaggaer, Icertis, and DocuSign CLM. Your ERP stays the system of record; CorpRisk adds the risk layer alongside it.

Where does my data live?+

You choose the region your data lives in — Australia, the Middle East or the United States — and it stays there. That regional pinning is what APRA CPS 230, DORA and UAE PDPL reviews ask about.

Ready when you are

See supply chain risk software on your own supplier list

A 30-minute working session with your procurement or compliance lead. We ingest a sample of your suppliers, map concentration and trade-lane exposure live, and walk your team through the writes back to Ariba or Coupa.

Book a working session →
Enterprise pricing scoped to active supplier count, connectors, and residency region. Discussed under NDA.