Risk signals tied to dollars at stake, not another news feed.
Supplier Risk aggregates open signals, delivery and quality metrics, and concentration in your spend categories. Each score change links to annual spend, active contracts, and open purchase orders so you know what is exposed when something breaks.
How it works
The same pipeline you see in the live module, step by step.
- 1
Ingest signals
Collect cyber, financial, ESG, and operational events with severity and age from your monitoring sources and internal performance data.
- 2
Score continuously
Recompute risk score from open signal severity (with time decay), on-time delivery, quality, category concentration, and country adjustments.
- 3
Map exposure
Attach each supplier to spend, contracts, invoices on hold, and open PO lines so incidents show business impact immediately.
- 4
Recommend mitigations
Generate actionable steps — incident reports, backup sourcing, portal suspension — based on signal type and exposure.
- 5
Track through closure
Move signals from open to mitigating to closed; block or reactivate suppliers with logged reasons.
Checks and rules
Deterministic logic runs on every action; optional AI enriches text when configured.
- Open signal severity with 50% decay at 30 days
- On-time delivery and quality vs targets
- Single-source concentration above 50% of category spend
- Country risk adjustment on supplier location
- Status blocked → downstream invoice match fail
- Certification and delivery trend templates from live data
What you get
Artifacts land in the shared procurement record and activity log.
- Risk matrix by spend and score
- Live signal feed with severity and source
- Supplier 360 with KPIs and sparkline spend
- Exposure panel for POs, contracts, and held invoices
- Recommended actions and optional tasks
Where teams use Supplier Risk
Questions
Does it need my ERP?
The live demo runs on a shared procurement record (requests, POs, receipts, invoices, contracts, and spend). In production you connect your ERP or AP system via API or scheduled file exchange so matching uses your real PO and goods-receipt data. Until then, every rule runs the same way on the demo dataset.
Does it depend on an AI model to work?
No. Every decision runs through Stellitron's deterministic rules first: tolerance math, playbook comparisons, weighted bid scoring and classification maps, so results are repeatable and auditable. Stellitron Intelligence adds document reading, drafting and plain-language explanations on top, and the agents keep working if it is unavailable.
Who approves?
Agents recommend and trace; people approve. Intake routes to managers, category owners, Finance, and the CPO by amount and category. Invoices on exception stay on hold until AP approves, requests a credit note, or rejects a duplicate. Contracts, sourcing awards, and supplier blocks follow your owners in the app — the agent surfaces the evidence, not the signature.
What signals does the demo include?
The shared dataset includes realistic cyber, delivery, and concentration examples — for instance a disclosed ransomware event on a logistics carrier linked to open freight POs and a backup sourcing event.
Can we block a supplier from here?
Yes. Blocking updates supplier status, logs activity, and causes the Invoice Agent to fail matches on that supplier until you reactivate them.