> ## Documentation Index
> Fetch the complete documentation index at: https://help.dsalta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Vendor List

> Add, classify, and manage all third-party vendors in your compliance program.

The Vendor List is where you manage all third-party vendors. You can add vendors manually or through automated discovery, classify them by tier, and choose between manual and AI-powered risk assessments.

## Adding a vendor

<Steps>
  <Step title="Click Add New Vendor">
    Enter the vendor's domain name. DSALTA will attempt to identify the company automatically.
  </Step>

  <Step title="Set vendor tier">
    Classify how critical this vendor is — Critical, High, Medium, Low, or Untiered.
  </Step>

  <Step title="Assign a portfolio">
    Categorize the vendor as a Supplier, Service Provider, or a custom portfolio you create.
  </Step>

  <Step title="Choose monitoring type">
    Select **Automated** for AI-powered continuous monitoring, or **Manual** for self-managed assessments.
  </Step>
</Steps>

<Info>
  Automated vendor assessments are powered by AI and scan vendor domains and IP addresses. The initial scan may take 10–20 minutes to complete. From then on, DSALTA re-queues an automated vendor for a fresh scan in its nightly 02:00 America/New\_York job, once that vendor's last scan is more than a month old.
</Info>

## Vendor discovery

Vendors are matched for you once, during framework onboarding: the onboarding assistant takes the infrastructure, code repository and email provider you selected there, matches them against DSALTA's technology catalogue, adds each match to your vendor list as **Untiered**, and shows you the result to approve. That step runs a single time per framework — after it, vendors are added with **Add New Vendor**.

## Vendor list columns

| Column          | Description                      |
| --------------- | -------------------------------- |
| **Vendor Name** | Company name with logo           |
| **Domain**      | Primary domain                   |
| **Score**       | Risk score from 0–1000           |
| **Monitoring**  | Manual or Automated              |
| **Tier**        | Criticality classification       |
| **Label**       | Custom business labels           |
| **Report**      | Link to the vendor's risk report |

<Tip>
  Use automated monitoring for your most critical vendors and manual for lower-tier ones to balance thoroughness with cost.
</Tip>

## Related pages

* [Vendor Summary](/guides/vendors/vendor-summary)
* [Remediations](/guides/vendors/remediations)