Company Relationships

Company relationships can be defined either locally in the Company Information or automatically through Vendor Discovery and fourth party identification.

Defined locally in the Company Information:

• Continuous Monitoring
• Security Posture Management

Defined automatically through Vendor Discovery and fourth party identification:

• Vendor Discovery
• Fourth Party Identification

Relationship Types

Vendor

A supplier of goods or services.

Slug Name: vendor

Strategic Partner

A business partnership that’s formalized through contracts, but falls short of a legal partnership, agency, or affiliate types of relationship.

Slug Name: strategic_partner

Fourth Party

A service provider that is a vendor for a company’s third parties.

Slug Name: fourth_party

Subsidiary

A company that is within the hierarchy of an organization, as depicted in a ratings tree.

A subsidiary in the Bitsight platform (My Subsidiary) does not represent a legal subsidiary.

Slug Name: subsidiary

Benchmark

A company that supplies goods or services that are similar to your organization.

Slug Name: benchmark

Customer

A company that purchases goods or services from your company.

Consultant

A company that provides expert advice to your company professionally.

Other

Other types of company relationships.

Slug Name: other

Unassigned

No relationship has been defined.

Slug: null

Identification Methods

Bitsight

The relationships for these companies were automatically detected and identified by Bitsight, through either:

• Vendor Discovery
• Fourth Party Identification

Company Managed

The relationships for these companies were identified by an admin within your organization.

See permissions.

None

No relationships were identified for these companies.

Connection Certainty Levels

Certainty levels indicate how certain we are of the company relationship. Certainty is evaluated based on the data. Learn how fourth party and vendor data are collected.

Confirmed

Based on the data, the service provider is confirmed to be providing services to your third parties.

Suspected

Based on the data, the service provider is suspected to be providing services to your third parties.

Not Applicable

The relationship was identified by your organization as a service provider. Your organization is certain that the service provider is providing services to your third parties.