# Third-Party Intelligence Center for AI Screening

> The Third-Party Intelligence Center from Swiss GRC screens an entire third-party register with AI and escalates to deep due diligence only where a signal warrants it. It is for organisations that need documented, auditable third-party risk decisions.

- URL: https://swissgrc.com/en/third-party-intelligence/
- Publisher: SwissGRC®
- Published: 2026-06-16
- Last updated: 2026-10-07

## Key facts

- The Third-Party Intelligence Center from Swiss GRC screens the entire third-party register and escalates to deep due diligence only where a signal warrants it.
- Screening runs in three tiers: Quick Scan (sanctions, PEP and adverse media, 30 seconds to 3 minutes), Standard (twelve risk categories, about 3 minutes) and Deep Dive (network and fourth parties, about 10 to 15 minutes).
- Dedicated cyber security screening and fully configurable custom modes are available when the scope is already set.
- Screening draws on sources including OpenSanctions, OFAC, GLEIF, SHAB, Zefix, Bundesanzeiger, GDELT, SecurityScorecard and BitSight.
- Every finding is sourced, scored and auditable, with a reasoning chain and an exportable dossier.
- Portfolio analytics cover risk ranking, jurisdiction concentration, shared parent companies and beneficial owners, and hidden fourth-party dependencies, and a board report and an AI Advisor are included.

Third-Party Intelligence AI-powered screening, by Swiss GRC

# Screen everyone. Investigate what matters.

The Third-Party Intelligence Center screens your entire register and escalates to deep due diligence only where a signal warrants it. Full coverage, defensible decisions, no blind spots.

Contact us See it in action

Portfolio screening, liven = 20

Screened

0 / 20

Critical signals

0

Coverage

0%

Median scan

~40s

Screening across authoritative open and commercial sources

OpenSanctionsOFACGLEIFSHABGDELTBundesanzeigerSecurityScorecardBitSight

Trusted by leading organisations

The third-party risk gap

You can't deep-dive *everyone*. So which ones do you?

Most programmes screen a fraction of their third parties in depth and accept the rest on trust. The exposure that surfaces in an audit is almost always in the part nobody examined.

Screening harder across the board does not scale. What scales is directing scrutiny to where the risk actually sits, and evidencing the decision.

Where scrutiny actually goes

Third parties in your register

hundreds

Reviewed to a meaningful standard

a fraction

Subjected to deep due diligence

a handful

Exposure that actually hits you

unknown

The gap between what you can check and what you should check is where residual risk concentrates.

Interactive demonstration

## Which one would you miss?

Six third parties. Each looks clean from its master data. Pick the two you would investigate in depth, then screen all six.

Selected **0 / 2** for an in-depth review

Waiting for your selection

All companies shown are fictional examples based on typical screening patterns. Any resemblance to real companies is coincidental.

The verdict

6

screened automatically

2

critical signals surfaced

0

missed, with or without you

Run this on your own register

The screening engine

## One name in, one verdict out

Every third party runs through a tiered screening. The AI escalates to in-depth due diligence only on a material signal, and every finding is sourced, scored and auditable.

Tier 1

Quick Scan

Sanctions, PEP and adverse media, on every third party.

30 sec to 3 min.

on a signal

Tier 2

Standard

Twelve risk categories, the full OSINT profile.

~3 min.

if serious

Tier 3

Deep Dive

The network and fourth parties. Maximum depth.

~10 to 15 min.

Plus dedicated cyber security and fully configurable custom modes, when the scope is already set.

![Screening verdict for DuLac Capital Ltd](https://swissgrc.com/wp-content/uploads/2026/06/IMG_SCAN.png)

The verdict

### A verdict that holds up

DuLac Capital looks like an ordinary Swiss wealth manager. A Quick Scan caught a sanctions hit and escalated to a Deep Dive on its own, before an analyst opened the file.

- Sanctioned, risk score 100, fifteen findings, three of them critical
- Authoritative sanctions match, kept separate from the scored evidence
- Every finding sourced, with a full reasoning chain and an exportable dossier

Always on

## It never waits to be told

Screening that depends on someone remembering to run it is just a good intention. The Center fires on its own, at every moment that matters, on data that traces back to its origin.

At onboarding

### Before the relationship is real

Screened the moment it enters your register, not after the contract is signed.

Recurring

### On a cadence set by tier

Your most critical third parties are watched most closely, the rest at a sensible rhythm.

Ad hoc

### The moment a name hits the news

When you need to know now whether you are exposed, you run it and you know.

Every finding traces back to an authoritative source

Sanctions & PEP

OFACOpenSanctions

Registers & entities

GLEIFSHABZefixBundesanzeiger

Media & cyber

GDELTSecurityScorecardBitSight

Portfolio analytics

## From a list to a map

A list tells you who you depend on, not where you are exposed. Every screening feeds the portfolio analytics, where the patterns no single file reveals become visible.

Portfolio ranking

### Every third party, ranked by risk

An ordered view of the entire register. Priorities are explicit, not buried in row fourteen of a spreadsheet.

- Twenty third parties screened, full coverage
- Two at the maximum risk score
- Sorted by weighted score, drillable down to the evidence

![Portfolio risk ranking across twenty third parties](https://swissgrc.com/wp-content/uploads/2026/06/IMG_PORTFOLIO.png)

![Geographic concentration, Switzerland at 60 percent](https://swissgrc.com/wp-content/uploads/2026/06/IMG_CONCENTRATION.png)

Concentration

### A dependency no single file reveals

Each supplier file looked clean on its own. The risk only appears once all screenings flow together.

- Sixty percent of the portfolio in one jurisdiction
- Measured against a threshold of thirty percent
- Flagged automatically, before it becomes a finding

Network

### The connections between third parties

A single point of failure often carries several different names. The Center maps them as a network you can actually see.

- Shared parent companies and beneficial owners
- Shared infrastructure, locations and airports
- Hidden fourth-party dependencies surfaced

![Network graph of shared entities across third parties](https://swissgrc.com/wp-content/uploads/2026/06/IMG_NETWORK.png)

Reporting and oversight

## Built for the boardroom

Analysts need depth. Boards need a position. The Center serves both from the same data, and informs you before it occurs to you to ask.

![Board reporting executive dashboard](https://swissgrc.com/wp-content/uploads/2026/06/IMG_BOARD.png)

Risk Reporting

### A single page the board will read

How many third parties are critical, where the risk is trending and which names need a decision this quarter. The detail stays one click away.

- Critical third parties and risk trend at a glance
- The few names that need a decision now
- Full coverage, with the detail one click away

AI Advisor

### An analyst who briefs you first

The AI Advisor does not wait for questions. It opens your morning with what changed overnight, and shows its work.

- Queries the live portfolio and names its sources
- Surfaces new critical flags and overdue reviews
- It advises. You decide.

![AI Advisor, proactive morning briefing](https://swissgrc.com/wp-content/uploads/2026/06/IMG_ADVISOR.png)

What actually changes

## Ask a better question

Same building blocks: sanctions, OSINT, cyber ratings, concentration. What changes is the question you can finally answer.

Before

Have I screened everyone thoroughly enough?

No realistic answer, and none you can fully evidence.

Now

Have I looked closely exactly where it mattered, and can I prove why?

Answered by design, with every step traceable and on the record.

Get started

## See it on your own data

Send us a sample of your register. We will run the Intelligence Center on your own third parties and walk you through screening, portfolio analytics and the board view.

- Personal, tailored to your third-party register
- From a thirty-cent Quick Scan to a full portfolio map
- Answers from experts, not a sales pitch

Prefer to talk directly? [Book a Discovery Call](https://swissgrc.com/discoverycall) or [sales@swissgrc.com](mailto:sales@swissgrc.com)

Request a demo

We will get back to you within one business day.

## Frequently asked questions

### What is the Third-Party Intelligence Center?

It is an AI-powered screening tool from Swiss GRC that checks every third party in a register and escalates to in-depth due diligence only on a material signal. Each finding is sourced, scored and auditable.

### How does tiered third-party screening work?

Tier 1, the Quick Scan, checks sanctions, PEP and adverse media for every third party. On a signal, Tier 2 (Standard) covers twelve risk categories, and if the signal is serious, Tier 3 (Deep Dive) examines the network and fourth parties.

### When are third parties screened?

Screening runs at onboarding, on a recurring cadence set by tier, and ad hoc when a name appears in the news. The most critical third parties are monitored most closely.

### Which data sources does the screening use?

Sanctions and PEP checks use OFAC and OpenSanctions. Registers and entities come from GLEIF, SHAB, Zefix and Bundesanzeiger, and media and cyber signals come from GDELT, SecurityScorecard and BitSight.

### How can I test the Intelligence Center on my own third parties?

Send Swiss GRC a sample of your register and request a demo. Swiss GRC runs the Center on your third parties and walks through screening, portfolio analytics and the board view, and states it replies within one business day.
