Geneva is a platform that transforms scattered security evidence—such as incidents, contracts, and public records—into customized third‑party risk management (TPRM) questionnaires. It lets teams send, discuss, and track responses as a structured business interaction, automatically escalating overdue or high‑risk items to the appropriate stakeholders. The solution supports domain‑based onboarding and incident‑driven follow‑ups, helping compliance, security, and procurement teams conduct smarter due‑diligence at scale.
Funding
Funding not disclosed
Founders
Product
Problem
Organizations conducting third‑party risk assessments often rely on generic questionnaires and fragmented email or chat threads, leading to missed evidence, inefficient follow‑ups, and delayed escalation of critical issues.
Solution
Geneva provides a platform that converts available security evidence—such as incident records, contract clauses, public data, and third‑party records—into customized TPRM questionnaires tailored to each partner’s context. Users start by entering a partner’s domain, receive evidence‑driven questions with rationales, and can send, discuss, and track responses within a single workflow. The system records owners, status, and action plans, and automatically escalates overdue or high‑risk items to the appropriate stakeholders, ensuring timely resolution. By centralizing the entire due‑diligence interaction, Geneva reduces reliance on scattered emails and generic checklists, improving the accuracy and speed of risk reviews.
Target Audience
Primary users are security, compliance, procurement, legal, and risk teams that manage third‑party risk assessments and need a structured, evidence‑based questionnaire workflow.
Features
- Automated generation of context‑specific security questions from contracts, incidents, and public records
- Integrated discussion thread that captures clarification, evidence uploads, and decision history
- Workflow engine that tracks answer status, action plans, and escalates stalled or high‑risk items to designated owners
- Support for parent‑subsidiary relationships, geography, product scope, and relationship type to route questions to the right teams
- Secure, neutral data handling with confidentiality guarantees and audit‑ready records
- API access for enterprise customers to connect Geneva with existing security, procurement, or compliance tools