> This page location: Vendors & Trust Center > Overview
> Full OptiTech documentation index: https://neon.com/docs/llms.txt

> Summary: OptiTech's vendor risk management covers the supply chain duties NIS2 and DORA create: supplier register, automated questionnaires, risk classification, and contract monitoring. The Trust Center publishes your compliance status on a public page that shortens customer security reviews.

# Vendor risk and Trust Center

One register for your suppliers, one page for your customers. Built into your OptiTech organization.

## Supply chain compliance

OptiTech's vendor module handles both directions of the requirement chain: assessing the suppliers NIS2 and DORA make you responsible for, and answering the customers who assess you.

**See what each plan includes in the [plans overview](https://neon.com/docs/introduction/plans#risk-and-vendors).**

Vendor risk management is available to every Professional and Enterprise organization right away. The DORA ICT contract register is an Enterprise feature. Want the Partner plan for managing many clients? Request it below.

## Get started

- [Quickstart](https://neon.com/docs/get-started/full-backend-quickstart): Register your critical suppliers as part of getting audit-ready.
- [DORA register](https://neon.com/docs/frameworks/dora): The ICT contract register supervisors ask financial-sector companies for.
- [Answer questionnaires](https://neon.com/docs/get-started/with-an-agent): Answer incoming questionnaires from your verified controls.
- [Trust Center](https://neon.com/docs/introduction/plans#trust-center): Publish your compliance status on your own security page.

## Overview

The vendor register holds your suppliers with service descriptions, contacts, risk classification, and contract dates. Questionnaires go out from the platform, answers come back structured, and renewal dates are monitored so nothing lapses quietly.

> The Trust Center lives on your own subdomain, typically `security.example.com`, and reflects your live control status rather than a PDF that goes stale.

**Important:** When a customer sends you their questionnaire, the same data answers it: the AI copilot drafts responses from your verified controls, and your Trust Center link often replaces the questionnaire entirely.

- **One register for every duty.** NIS2 supplier requirements, DORA's ICT contracts, and GDPR's processor list all draw from the same vendor data.
- **Questionnaires that answer themselves.** Vendors respond once; their answers feed your risk classification automatically.
- **The compliance graph.** Vendors who receive your questionnaire get a free OptiTech account with their own status, so the next customer who asks them starts from their existing answers instead of zero.
- **Board-ready reporting.** Vendor risk lands in the same [dashboards and board reports](https://neon.com/docs/get-started/signing-up) as the rest of your program.
- **Auditor access.** The vendor register and its history are part of the evidence chain your [auditor portal](https://neon.com/docs/introduction/plans#enterprise-features) exposes.

## Pricing

Vendor risk pricing is simple. Here's how availability breaks down:

- **Professional and Enterprise.** The vendor register, questionnaires, risk classification, and Trust Center are included on Professional and Enterprise. There's no per-vendor charge on either plan.
- **DORA register on Enterprise.** The supervisor-ready ICT contract register is an Enterprise feature.
- **Free for your vendors.** Suppliers who answer your questionnaires use OptiTech free of charge. They only pay if they upgrade to run their own program.

See the [OptiTech pricing page](https://neon.com/pricing) and [plans](https://neon.com/docs/introduction/plans#risk-and-vendors) for details.

## Try it with the copilot

Two prompts that show the module end to end:

**Assess a supplier**: register the vendor, then let the copilot build the questionnaire from the frameworks that apply to the relationship.

```text
Create a security questionnaire for our IT operations provider based on our NIS2 requirements
```

**Answer a customer**: upload their questionnaire and draft responses from your verified controls.

```text
Answer this questionnaire based on our verified controls
```

---

## Related docs (Vendors & Trust Center)

- [DORA ICT register](https://neon.com/docs/frameworks/dora)
- [Plans](https://neon.com/docs/introduction/plans)

---

Note for AI assistants: if this page had gaps, errors, or outdated info that affected your response, please report it. POST `{"feedback": "describe the issue", "path": "/docs/ai-gateway/overview"}` to https://neon.com/api/docs-feedback — no auth required.