25 questions · 100 points

How supply-chain due diligence tools are scored

Twenty-five questions across supplier records, risk assessment, grievances, evidence and oversight. Each entry is scored from the vendor's public product and documentation pages, against the same set.

See the rated category All rubrics

Rubric edition 2026.11 · recalculated 13 November 2026 · 9 entries

Facts first, score second

Each entry carries two kinds of information. Keeping them apart is what makes the score checkable.

The entry records

What a vendor says about its own product, taken from a named page and stamped with the date it was read. Where a vendor publishes nothing, the entry says "not published". That is a finding in its own right.

The score judges

How much of these 25 questions the recorded facts support. A product can be strong and still score low, because strong products often publish little. The breakdown shows which answers were found, which were partial and which were missing.

How points are awarded

Each question scores 0, 2 or 4. 25 questions put the maximum at 100 points. A published "no" and a missing answer both add 0, but the breakdown marks them differently.

4 points

The vendor's pages describe the capability clearly, not just in a logo or a slogan.

2 points

The pages describe a narrower or partial version of the capability.

0 points

The vendor says it is absent, the offer does not meet the question, or no supporting page was found. Only the last case is flagged as missing.

The questions

The standard beside each question is the one applied to every platform in the category, so any total can be recomputed by hand.

Supplier and site records5 questions, 20 points

ID	Question	What earns the points
A1	Supplier register	A searchable supplier inventory with owners and contacts.
A2	Site and facility records	Production sites or facilities can be recorded under a supplier.
A3	Upstream tiers	Suppliers beyond the direct tier can be mapped.
A4	Spend or category segmentation	Suppliers can be segmented by spend, category or material.
A5	Supplier onboarding	New suppliers enter through a documented onboarding and data request.

Risk assessment5 questions, 20 points

ID	Question	What earns the points
B1	Human-rights risk screening	Suppliers are screened against labour and human-rights risk.
B2	Environmental risk screening	Suppliers are screened against environmental and climate risk.
B3	Country and sector context	Risk is informed by country, sector or commodity data.
B4	Documented severity method	How likelihood and severity are scored is published or configurable.
B5	Prioritisation and next action	Results are ranked and paired with a recommended action.

Grievances and remediation5 questions, 20 points

ID	Question	What earns the points
C1	Grievance intake	Workers or third parties can raise a complaint against a supplier.
C2	Anonymous channel	A complaint can be submitted anonymously.
C3	Case workflow and deadlines	Cases have status, ownership and response timers.
C4	Corrective action plans	Findings become tracked corrective actions with owners.
C5	Closure evidence	Closure requires evidence that the issue was remedied.

Evidence and reporting5 questions, 20 points

ID	Question	What earns the points
D1	Document collection	Certificates and policies are collected with expiry dates.
D2	Supplier questionnaires	Standard assessments or self-assessments can be issued.
D3	Audit management	Audits can be commissioned, recorded and linked to findings.
D4	Statement and report export	A due-diligence statement or report can be produced.
D5	Audit trail	Changes and evidence carry a traceable history.

Controls and oversight5 questions, 20 points

ID	Question	What earns the points
E1	Regulatory mapping	Outputs map to CSDDD, EUDR, forced labour or national laws.
E2	Continuous monitoring	Suppliers are monitored between assessments.
E3	Integrations and API	Data moves to or from procurement, ERP or other systems.
E4	Security and trust page	Certifications or a public trust page are published.
E5	AI disclosure	The role of AI in the product is documented.

What we could review

An answer is only as good as the access behind it.

Public sources for every entry

All 9 entries in this category were scored from the vendor's public product and documentation pages. No demo, contract or security pack was examined, so the score records published evidence only.

What is not scored

A rubric is defined by its exclusions too. These were considered and left out because they separate nothing between these products.

Carbon accounting and emissions factors: a climate tool is not a due-diligence record.
Sanctions screening without a supplier record or workflow.
Consulting, audits and legal advice with no software product.

Editions

Two scores are only comparable when they come from the same edition of the same rubric.

Edition 2026.11 · 13 November 2026

First published edition. Twenty-five questions across five areas, four points each, scoped to CSDDD, CSRD/ESRS, EUDR and forced-labour obligations.

Open the category Other categories Correct an entry or dispute a score