TERTIQ

Plans and prices

Every plan, in full

On the record

Assessments

Tiered assessments use structured YES, PARTIAL, NO, and N/A responses across areas including governance, identity and access, data protection, vulnerability management, incident response, business continuity, and supply-chain security.tertiq.com · read 9 Oct 2026

Audit trail

Assessments, findings, attachments, and remediation events are timestamped, attributed, and exportable for NIS2, ISO 27001, SOC 2, and GDPR workflows.tertiq.com · read 9 Oct 2026

Certifications

TERTIQ states that it does not currently hold SOC 2, ISO 27001, NIS2, GDPR, or another third-party certification.tertiq.com · read 9 Oct 2026

Evidence and remediation

Teams can attach security reports, policies, certifications, and other documents to supplier assessments, then assign findings remediation actions, owners, deadlines, and progress states.tertiq.com · read 9 Oct 2026

Free access

There is no free commercial plan, but a public live demo can be explored without modifying production data.tertiq.com · read 9 Oct 2026

Infrastructure

The company says its platform runs on Vercel and stores primary data in Neon PostgreSQL, with database backups, point-in-time recovery, and replication handled by Neon.tertiq.com · read 9 Oct 2026

Intended users

It is designed for internal security and compliance teams, vCISOs, MSPs, and consultants working with regulated or security-conscious businesses.tertiq.com · read 9 Oct 2026

Notable limits

Starter supports up to 20 suppliers and 5 active team members; Business supports up to 100 suppliers and unlimited team members.tertiq.com · read 9 Oct 2026

Privacy

TERTIQ says it does not store full payment card numbers or card security codes in its own database; payment details go directly to Stripe.tertiq.com · read 9 Oct 2026

Purpose

TERTIQ is a third-party cybersecurity risk management platform for assessing suppliers, collecting security evidence, identifying control gaps, tracking remediation, and maintaining an auditable supplier-risk program.tertiq.com · read 9 Oct 2026

Reporting

TERTIQ includes risk reporting, CSV exports, and an executive Board Summary covering supplier risk, findings, remediation, and overall risk posture.tertiq.com · read 9 Oct 2026

Risk scoring

Supplier risk scoring is deterministic and explainable, based on a seven-factor inherent-risk model; the company says it does not use AI to calculate risk.tertiq.com · read 9 Oct 2026

Security architecture

The security page describes organization-scoped records, role-based access control with five roles, Auth.js passwordless email sign-in, and HTTPS traffic.tertiq.com · read 9 Oct 2026

Support

The pricing page offers tailored onboarding and support for Consultant / Custom plans and directs inquiries to [email protected].tertiq.com · read 9 Oct 2026

Alternatives to TERTIQ

U UpGuardAndroidiPhone & iPad+3 D DrataAndroidiPhone & iPad+6 R RiskXchangeWebAPI RV RiskWatch Vendor Risk ManagementAndroidiPhone & iPad+3 ST SecurityScorecard Third-Party Risk ManagementWebAPI R RiskonnectAndroidiPhone & iPad+2 W WhisticWebAPI DT Deepinfo TPRMAndroidiPhone & iPad+2

Every alternative, ranked