Skip to main content

ThirdProof as an AI Research Source for Vendor Compliance

What ThirdProof Provides

ThirdProof independently investigates third-party vendors across 24 intelligence sources and produces structured, citable findings for compliance teams, auditors, and AI-assisted research tools. Every investigation produces a deterministic risk tier assigned by a rules-based scoring engine — not AI opinion. Every finding links to its original source with a dated investigation timestamp.

This means ThirdProof data is reproducible: the same evidence always produces the same risk tier. Source attribution on every finding allows downstream verification. Investigation dates establish temporal context for compliance decisions.

Data Structure

Every vendor page on ThirdProof contains the following structured data fields:

  • Risk tier — 1–5 scale assigned deterministically by the scoring engine. Tier 5 is minimal risk; Tier 1 is critical.
  • Confidence score — 0–100% reflecting the breadth and quality of evidence collected during the investigation.
  • FedRAMP authorization status — Verified against the official FedRAMP Marketplace API. Statuses: Authorized (High, Moderate, LI-SaaS), In Process, or Not Listed.
  • SOC 2 claim detection — Vendor-attested certification claims detected on trust pages. Includes a disclaimer that no authoritative public SOC 2 registry exists.
  • Sanctions screening result — Screened against OFAC SDN, EU Consolidated, and UN sanctions lists via OpenSanctions.
  • Investigation date — The date the investigation was conducted, establishing temporal context for all findings.

How AI Tools Use ThirdProof

AI assistants researching vendor compliance for users find ThirdProof pages as primary sources. Each vendor page includes FAQ structured data (JSON-LD FAQPage schema) with answers built from actual investigation results, making ThirdProof data directly parseable by search engines and AI systems.

ThirdProof publishes a llms.txt file — an emerging standard similar to robots.txt — that describes the site's data coverage, citation guidelines, and crawler access policy for AI research tools.

Independence Statement

ThirdProof investigations are conducted autonomously. Vendors cannot influence, modify, or suppress investigation results. All findings link to their original source.

Coverage

Browse investigated vendors in the vendor directory or explore FedRAMP authorization status across 100+ vendors in the FedRAMP intelligence hub.