Supplier Shield
Supplier Shield is the TPRM module of Acuna GRC, an AI-native Swiss-built GRC platform serving European-regulated financial, healthcare, manufacturing, and public-sector organizations with vendor risk management, adaptive questionnaires, and audit-ready evidence across 50+ regulatory frameworks.
- Company typePrivate
- Founded2019
- HeadquartersMorges, Switzerland
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Supplier Shield does
Supplier Shield is the third-party risk management (TPRM) module of Acuna GRC, an AI-native governance, risk, and compliance (GRC) platform built by Swiss company Acuna SA, headquartered in Morges, Switzerland. The platform provides vendor lifecycle management, OSINT-based continuous monitoring, adaptive questionnaires, A-F risk grading, and audit-ready evidence mapped to 50+ European and US regulatory frameworks including DORA Article 28, NIS2 supply-chain requirements, GDPR, nDSG, ISO 27001/22301/31000, FINMA, BaFin, and ISAE 3402. It serves European-regulated financial institutions, healthcare organizations, manufacturers, and public-sector entities — with named customers including UNICC, Gavi, The Global Fund, Gold Standard, Group R, CPEG, and the République et canton de Genève.
Acuna GRC is an 8-module platform built on a single data layer with the Aiko AI assistant integrated across all modules: Supplier Shield (TPRM), Data Privacy, Framework Compliance, Internal Audit, Enterprise Risk and Business Continuity (both forthcoming), Aiko AI Agents, and Trust Center/Breach Scanner. Revenue is generated through (1) modular platform subscriptions starting at CHF 5,388/year with unlimited users and no per-seat fees, (2) senior practitioner advisory and managed services delivered by sister entity Abilene Advisors, and (3) professional training through Abilene Academy (Switzerland's only PECB Titanium Partner, with 2,500+ professionals trained across 120+ countries). Go-to-market combines direct consultative sales (demo requests, 24-hour reply), self-serve PLG via published pricing, and a content-led funnel (The Breach Wire, The Loss Ledger, State of Vendor Risk, Sushi Talks podcast, Daily Brief newsletter). The company is privately held by founders and management with no disclosed external investors, funding rounds, or revenue figures.
Supplier Shield firmographics
Firmographics- Name
- Supplier Shield
- Legal name
- Acuna SA
- Website
- https://suppliershield.com
- Company type
- Private
- Founded year
- 2019
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Supplier Shield is the TPRM module of Acuna GRC, an AI-native Swiss-built GRC platform serving European-regulated financial, healthcare, manufacturing, and public-sector organizations with vendor risk management, adaptive questionnaires, and audit-ready evidence across 50+ regulatory frameworks.
- Ownership category
- akta.pro rank
Supplier Shield industry classification
Industry- Product category
- Third-Party Risk Management Software
- akta.pro primary industry
- Third-Party/Vendor Risk Management (TPRM/VRM) (HDADAIAE)
- akta.pro secondary industries
- Third-Party Risk, Vendor Due Diligence & Supply Chain Compliance (BPAEAPAG), Third-Party/Vendor Risk & Due Diligence (BPAHAFAG), Third-Party/Vendor Risk Management (TPRM) & Due Diligence (BPAKADAH), Compliance, Risk & Supplier Due Diligence (KYC/ESG/Sanctions) (BPAAAJAK)
Keywords
Where Supplier Shield is headquartered
LocationHeadquarters
- HQ city
- Morges
- HQ country
- Switzerland
- HQ region
- Europe
Offices2 records
Markets served
Supplier Shield business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Platform Subscription: Acuna Professional subscription model with modular platform. Entry price includes Compliance Frameworks module; TPRM (Supplier Shield), Data Privacy, Internal Audit available as add-ons. No per-user fees, unlimited users included.
- Advisory Services: Senior practitioner advisory: TPRM programme design, DORA/NIS2/ISO 27001 readiness assessments, vendor due diligence, interim CISO/DPO engagements. Fixed-fee or subscription.
- Managed Services: Swiss-based practitioners certified in European regulatory frameworks (FINMA, BaFin, DORA, NIS2) manage TPRM programs for customers.
- Academy Training: Abilene Academy provides ISO 27001, ISO 22301, ISO 31000, ISO 27005 training courses. Switzerland's only PECB Titanium Partner.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Acuna Professional entry-level subscription |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels9 records
Supplier Shield product offering
Product offeringCore offering
Supplier Shield is the third-party risk management (TPRM) module of the Acuna GRC platform, delivering vendor lifecycle management, risk tiering, adaptive due-diligence questionnaires, continuous OSINT monitoring, 4th-party visibility, and audit-ready evidence pre-mapped to 50+ European and US regulatory frameworks (DORA, NIS2, GDPR, nDSG, ISO 27001, FINMA, BaFin). The platform is sold as a modular subscription with unlimited users, no per-seat fees and Swiss data residency, complemented by Abilene Advisors practitioner-led advisory services and Abilene Academy training.
Product overview
Supplier Shield is the TPRM module of Acuna GRC — an AI-native, modular GRC platform built by Acuna SA in Switzerland. The platform operates on a modular architecture: the Compliance Frameworks module is included at the entry price (Acuna Professional, from CHF 5,388/year), while Supplier Shield (TPRM), Data Privacy, Internal Audit, and other modules are available as add-ons. All modules share a single data layer, one login, and the Aiko AI assistant. The core Acuna GRC modules are: Supplier Shield (TPRM — vendor risk visibility, assessments, OSINT monitoring, audit evidence), Data Privacy (GDPR/nDSG DPA management, RoPA, DPIAs), Framework Compliance (50+ frameworks including DORA, NIS2, ISO 27001, ISAE 3402), Internal Audit (audit planning, fieldwork, findings), Enterprise Risk (coming soon), Business Continuity (coming soon), Aiko AI Agents, and Trust Center/Breach Scanner. Supplier Shield also offers supplementary services: Abilene Advisors (senior practitioner advisory) and Abilene Academy (PECB-certified training). Unlimited users, no per-seat fees, Swiss data residency by default.
Differentiator
Problem solved
Functional benefit
Brands
- Acuna: AI-native GRC platform built by Acuna SA. The full platform covering TPRM (Supplier Shield), Data Privacy, Compliance Frameworks, Internal Audit, Enterprise Risk, and Business Continuity modules.
Products and services
- Supplier Shield (TPRM Module of Acuna GRC) Third-party risk management module covering the full vendor lifecycle: vendor onboarding, risk tiering by criticality and regulatory scope, adaptive due-diligence questionnaires that reuse responses across frameworks, evidence storage, remediation tracking, OSINT-based continuous monitoring, 4th-party visibility, A-F risk grades and audit-ready reporting. Built for regulated entities that must comply with DORA Article 28, NIS2 supply chain requirements, GDPR, ISO 27001, FINMA, BaFin and 50+ frameworks.
- Acuna GRC Platform AI-native modular Governance, Risk and Compliance platform sold by Acuna SA covering TPRM (Supplier Shield), Data Privacy, Framework Compliance, Internal Audit, Enterprise Risk and Business Continuity on a single data layer with the Aiko AI assistant, Swiss data residency by default, unlimited users and no per-seat fees.
- Abilene Advisors (Advisory Services) Senior practitioner advisory offering covering TPRM programme design and gap review, DORA/NIS2/ISO 27001 readiness assessments, vendor due diligence and questionnaire support, and interim CISO/DPO engagements, sold on a fixed-fee or subscription basis without a sales rep.
- Abilene Academy (PECB-Certified Training) PECB-certified professional training institution delivering ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, ISO 27005 Risk Manager, ISO 31000 Lead Risk Manager and ISO 22301 Lead Implementer courses, with a 99% exam pass rate and over 2,500 professionals trained across 120+ countries.
- Framework Compliance Module Compliance module covering 50+ EU and US regulatory frameworks including DORA, NIS2, ISO 27001, ISAE 3402, HIPAA, SOX, FINMA, BaFin, GDPR and nDSG, all natively pre-mapped and maintained by the regulatory team and included at the Acuna Professional entry price.
Quantifiable outcome
- 248K vendors monitored on platform
- +5 more outcomes
Companies that use Supplier Shield
Customer profileNamed customers8 records
Segments5 records
Ideal customer profiles6 records
Supplier Shield technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability3 records
Feature6 records
Supplier Shield partnerships and signals
Strategic signalPartnerships
Three partnerships are on record, tiered core and minor.
- Abilene GroupcoreParent organization including Abilene Advisors (advisory services), Abilene Academy (training), and Supplier Shield (TPRM module). All entities share Rue de la Gare 39 address in Morges, Switzerland.
- Acuna GRCcoreSupplier Shield is the TPRM module of Acuna GRC, the AI-native GRC platform. Acuna GRC is the product delivery platform while Supplier Shield remains the editorial and advisory identity. Existing Supplier Shield customers migrate to Acuna at no additional cost.
- PECBminorAbilene Academy is Switzerland's only PECB Titanium Partner, authorized to deliver PECB-certified training courses including ISO 27001, ISO 22301, ISO 31000, and ISO 27005 certifications.
Scale indicators8 records
Recent moves7 records
Expansion highlights6 records
Supplier Shield competitors and assessment
Company assessmentDirect peers
- ProcessUnity: ProcessUnity is a direct TPRM platform competitor offering vendor onboarding, risk assessments, continuous monitoring, and a vendor intelligence network. Like Supplier Shield, it targets third-party risk workflows for regulated enterprises, though it is more established in the US market.
- Riskonnect: Riskonnect is an integrated risk management platform that includes TPRM alongside ERM, BCM, and audit modules — closely mirroring the full Acuna GRC suite. It is a comparable peer given Supplier Shield's roadmap to bundle TPRM, ERM, and BCM in a single platform.
- Prevalent: Prevalent is a direct TPRM peer offering vendor risk assessments, continuous monitoring, and a network for sharing completed vendor questionnaires. It competes head-to-head with Supplier Shield's core Supplier Shield TPRM module, particularly in mid-market financial services and healthcare segments.
- Venminder: Venminder is a focused TPRM platform with vendor risk assessments, ongoing monitoring, and outsourced program management. It is a directly comparable TPRM specialist serving regulated financial institutions and healthcare organizations in North America and Europe.
Others
- ServiceNow Integrated Risk Management: ServiceNow IRM is a broad GRC incumbent covering TPRM, operational risk, and compliance within its enterprise platform. It is the most consequential incumbent competitor for large enterprise TPRM deals and is increasingly bundling vendor risk into broader enterprise contracts.
Broad incumbents
- OneTrust: OneTrust is a broad GRC, privacy, and TPRM incumbent that overlaps with Supplier Shield's TPRM and Data Privacy modules. While much larger and US-headquartered, it competes for the same enterprise privacy-and-vendor-risk budget, particularly with multinationals operating under GDPR.
- Diligent (Galvanize/ACL): Diligent, with its Galvanize/ACL GRC portfolio, is a broad incumbent serving audit, risk, and compliance teams at large enterprises. It overlaps with Supplier Shield's Internal Audit and Compliance Frameworks modules and competes for enterprise GRC budget consolidation.
- RSA Archer: RSA Archer is a long-established GRC platform serving large financial institutions and corporations with TPRM, operational risk, and compliance workflows. It is a typical incumbent rival in enterprise TPRM evaluations where Supplier Shield would compete for replacement or expansion.
- SAP GRC: SAP GRC is a broad enterprise incumbent serving large multinationals with integrated access, process, and vendor risk controls. It is a typical incumbent alternative for global enterprises evaluating Supplier Shield's TPRM and compliance modules.
Emerging players
- LogicGate Risk Cloud: LogicGate is an emerging GRC platform with strong TPRM and risk management capabilities, particularly in mid-market and tech-forward enterprises. It is a credible comparable for Supplier Shield's modular, configurable, mid-market-friendly approach.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Supplier Shield social profiles
Digital presenceSupplier Shield compliance and trust
Trust signalCompliance1 record
Supplier Shield financial estimates
Financial estimateRevenue estimate
Valuation estimate
Supplier Shield leadership team
Management profileNumber of profiles
Profiles6 records
Supplier Shield subsidiaries and ownership
Company hierarchySubsidiaries2 records
Supplier Shield funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Supplier Shield M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Supplier Shield
What does Supplier Shield do?
Supplier Shield is the third-party risk management (TPRM) module of the Acuna GRC platform, delivering vendor lifecycle management, risk tiering, adaptive due-diligence questionnaires, continuous OSINT monitoring, 4th-party visibility, and audit-ready evidence pre-mapped to 50+ European and US regulatory frameworks (DORA, NIS2, GDPR, nDSG, ISO 27001, FINMA, BaFin). The platform is sold as a modular subscription with unlimited users, no per-seat fees and Swiss data residency, complemented by Abilene Advisors practitioner-led advisory services and Abilene Academy training.
Is Supplier Shield a public or private company?
Supplier Shield is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Supplier Shield founded?
Supplier Shield was founded in 2019. It employs 1 to 10 people.
Where is Supplier Shield based?
Supplier Shield is headquartered in Morges, Switzerland, in the Europe region.
How does Supplier Shield make money?
Four revenue lines are on record. Platform Subscription is the primary driver. The others are advisory Services, managed Services and academy Training.
Who are Supplier Shield's main competitors?
Direct peers on record are ProcessUnity, Riskonnect, Prevalent and Venminder. ServiceNow Integrated Risk Management is listed as an others. Broad incumbents are OneTrust, Diligent (Galvanize/ACL), RSA Archer and SAP GRC. LogicGate Risk Cloud is listed as an emerging player.
Does Supplier Shield have an API?
No public API is recorded for Supplier Shield.
What industry is Supplier Shield in?
Supplier Shield's product category is Third-Party Risk Management Software. Its primary akta.pro industry code is HDADAIAE, Third-Party/Vendor Risk Management (TPRM/VRM), with a secondary code of BPAEAPAG, Third-Party Risk, Vendor Due Diligence & Supply Chain Compliance.