ITLawCo
Boutique AI, data and technology governance practice
- records
- 1
- team
- 2-10
- founded
- n/a
Third-party risk programs: vendor due diligence, contract risk assessment, and ongoing monitoring that stands up in procurement review.
309 verified providers at one or more levels for vendor & third-party risk. Default sort is highest verification level first; ties broken by most-recent record.
Deepest earned coverage in United States (33), United Kingdom (22), and Canada (17). Ranking is plan-blind: verification level, contributing record count, and recency are the only signals used. A free-plan L5 provider always outranks a paid-plan L1.
Boutique AI, data and technology governance practice
HIPAA One, healthcare TPRM, and HITRUST support
PwC Germany's dedicated cyber assurance entity
Warwickshire digital forensics lab and Council-listed PCI QSAC.
Ikebukuro boutique QSA and pentest firm
Otemachi-based QSA arm of Nomura Research Institute
Dublin-based QSA behind the SecureTrust and Sysnet platforms.
Telenor Group's Norwegian cybersecurity services arm
Offensive-security firm running PCI DSS v4.0 gap assessments mapped to POPIA and ISO 27001.
Big-4 Norwegian cyber risk advisory practice
PCI ASV-certified scanning plus end-to-end PCI DSS readiness, gap analysis and remediation.
Specialist services for pharma, biotech, and medical device companies
Vienna-based risk assurance and cyber practice
Boutique Luxembourg information security advisory and pentest firm.
Queensland cyber advisor with a health-practice HIPAA line
Data-centric security consulting with a healthcare/HIPAA practice
Clinical-research CRO with dual GDPR/HIPAA data-protection practice
Life-sciences-only privacy and data-protection consultancy with in-house DPOs
Argentine MSSP dedicated to the healthcare sector.
Argentine Grant Thornton member firm with cybersecurity and compliance advisory.
Cybersecurity platform and services
Markets with at least five cross-referenced (L2+) Vendor & third-party risk builders. Each links to the verified shortlist for that country.
A class of system, not a tool. Filtering on this capability returns providers who have claimed (L1) or had verified (L2+) work in this area.
Combine with characteristic filters in the index header, sector, country, regulatory regime, engagement model. Trustgent supports intersections.
One email a month: what's actually being delivered, verified outcomes, rate benchmarks, AI-analysed builds, category shifts. No vendor PR.
By subscribing you agree to our privacy notice. Unsubscribe in one click at any time.