Use cases

/

Third-party risk management

Outside your walls, inside your risk framework

All third parties, held to your standards, from onboarding through every renewal.

What Narrative does

Your partners and vendors do the work. You set the standard. Narrative brings in each relationship through one intake, checks the evidence against your requirements, and keeps watching after onboarding. Diligence that doesn’t stop at the signature.

L1 · Operations

Reviews

Narrative brings partner and vendor documents, policies, disclosures, and supporting records into one review. Diligence tasks go to the right experts, with the requirements and evidence in front of them.

Each exception shows the gap and why it matters. Onboarding, renewals, and offboarding follow your process, with prior assessments available for the next review.

L2 · Compliance

Monitoring

L3 · Governance

Oversight

L1 · Operations

Reviews

Narrative brings partner and vendor documents, policies, disclosures, and supporting records into one review. Diligence tasks go to the right experts, with the requirements and evidence in front of them.

Narrative brings partner and vendor documents, policies, disclosures, and supporting records into one review. Diligence tasks go to the right experts, with the requirements and evidence in front of them.

Each exception shows the gap and why it matters. Onboarding, renewals, and offboarding follow your process, with prior assessments available for the next review.

Each exception shows the gap and why it matters. Onboarding, renewals, and offboarding follow your process, with prior assessments available for the next review.

L2 · Compliance

Monitoring

Narrative watches third-party activity, documents, and supporting evidence for changes that affect the relationship. New evidence updates the review and routes exceptions to the right reviewer.

Narrative watches third-party activity, documents, and supporting evidence for changes that affect the relationship. New evidence updates the review and routes exceptions to the right reviewer.

Your team sees what changed, which requirement it affects, and what needs remediation, without waiting for the next renewal.

Your team sees what changed, which requirement it affects, and what needs remediation, without waiting for the next renewal.

L3 · Governance

Oversight

See which third-party relationships carry unresolved risk or unmet obligations. Narrative brings assessments, monitoring exceptions, and open issues together with the services and business activities they affect.

See which third-party relationships carry unresolved risk or unmet obligations. Narrative brings assessments, monitoring exceptions, and open issues together with the services and business activities they affect.

Assign accountable owners, track corrective action, and verify the evidence before closing an issue. Management and examiners can trace each relationship’s current risk to the decisions and actions behind it.

Assign accountable owners, track corrective action, and verify the evidence before closing an issue. Management and examiners can trace each relationship’s current risk to the decisions and actions behind it.

How it works

01

Connect the evidence

Bring intake responses, contracts, policies, supporting documents, and third-party activity together. Keep each assessment linked to its source.

02

Apply your standards

Narrative evaluates evidence against your diligence requirements, risk criteria, and obligations for each relationship.

03

Route the decisions

Send diligence tasks and exceptions to the right experts. Follow your approval and escalation procedures, with periodic reviews starting on schedule.

04

Preserve the record

Keep assessments, approvals, obligations, exceptions, and remediation evidence together. Reconstruct any review and trace how a relationship changed over time.

Where it applies

Bank Service Company Act

Covered service-provider relationships and regulatory notification.

Interagency Third-Party Risk Management Guidance

Diligence and oversight across the relationship lifecycle.

FFIEC IT Examination Handbook

Technology vendor controls, security, and resilience.

Gramm-Leach-Bliley Act (GLBA)

Customer information safeguards and service-provider oversight.

Bring your experts’ judgment to the whole business

Bring your experts’ judgment to the whole business

Copyright © 2026 Hexay, Inc. All rights reserved.

Copyright © 2026 Hexay, Inc. All rights reserved.