Use cases
/
Third-party risk management
Outside your walls, inside your risk framework
All third parties, held to your standards, from onboarding through every renewal.
What Narrative does
Your partners and vendors do the work. You set the standard. Narrative brings in each relationship through one intake, checks the evidence against your requirements, and keeps watching after onboarding. Diligence that doesn’t stop at the signature.
How it works
01
Connect the evidence
Bring intake responses, contracts, policies, supporting documents, and third-party activity together. Keep each assessment linked to its source.
02
Apply your standards
Narrative evaluates evidence against your diligence requirements, risk criteria, and obligations for each relationship.
03
Route the decisions
Send diligence tasks and exceptions to the right experts. Follow your approval and escalation procedures, with periodic reviews starting on schedule.
04
Preserve the record
Keep assessments, approvals, obligations, exceptions, and remediation evidence together. Reconstruct any review and trace how a relationship changed over time.
Where it applies
Bank Service Company Act
Covered service-provider relationships and regulatory notification.
Interagency Third-Party Risk Management Guidance
Diligence and oversight across the relationship lifecycle.
FFIEC IT Examination Handbook
Technology vendor controls, security, and resilience.
Gramm-Leach-Bliley Act (GLBA)
Customer information safeguards and service-provider oversight.