Proof, not promises.
Real vendor security programmes, with the cycle times, response rates and headcount numbers the teams measured before and after Urengi.
Customer stories
−84% review time
38 days to 6, across 240 clinical vendors
A hospital group routed intake by data sensitivity instead of by whoever picked up the ticket. Two analysts clear the queue weekly.
Northwind Health
0 audit findings
Walked into a PCI audit with the evidence already collected
Control responses, SOC 2 reports and pen tests were already in the vault when the assessor asked. Nobody spent the week chasing PDFs.
Ledgerline
3× volume, same team
1,200 sellers onboarded without adding a reviewer
Low-risk sellers clear an automated tier in minutes; only the top two tiers reach a human. The review team stayed at four people.
Kestrel Market
100% on-time renewals
Renewals stopped falling through the cracks
Certificate expiry and sub-processor changes reopen the review on their own, so nothing waits for an annual calendar reminder.
Aurea Bio
Live in 3 weeks
Four risk tiers an auditor could actually follow
Scores come out of a visible, versioned rules engine. Every tier decision lists the inputs that moved it — as the auditor asked.
Civic Grid
94% intake via Slack
The shared inbox is gone; requests live in Slack
Engineers file vendor requests with a /vendor-review command where they already work. No form, no email thread, no shared inbox.
Palewind Ops
The pattern across 380 customers
Aggregate numbers from live accounts, refreshed each quarter. Individual results are in the stories above.
- companies running vendor reviews on Urengi
- 380
- vendors monitored continuously
- 41,000
- of evidence collected without a human chase
- 82%
- median time to close a review
- 2 days