Tool

Assess vendors

Which vendor should we trust with our data?

Several vendors scored on ten criteria weighted for your profile, with two knock-outs no weighting can rescue.

  • ≈ 5 min
  • Free calculation · AI commentary on request
  • You leave with: A ranking of vendors, knock-outs included

The candidates and the grid

0 absent · 1 verbal promise · 2 documented but partial · 3 contractual · 4 contractual and verified. Two criteria are knock-outs: without a DPA and a no-training guarantee, price does not matter.

Your profile

Changes the weights: regulated and public weigh residency, certifications and logs; standard weighs price.

VendorGDPR-compliant DPA *No-training guarantee *EU data residencySOC 2 / ISO 27001SSO and admin controlsExportable audit logsModel and sub-processor transparencyReversibility and data exportPriceSupport and SLAs
* knock-out

The verdict

Recommendation
83 %
Fournisseur A — suite bureautique
Eligible vendors
2
of 3
Knocked out
1
Gap between the top two
15 %
Reading

The figures above are computed and free. If you also want them read back to you — what they mean, what is specific to your sector, where to start — that is produced on request.

Ranking

  1. 1. Fournisseur A — suite bureautique83 %

    To negotiate: Price

  2. 2. Fournisseur B — assistant spécialisé68 %

    To negotiate: SOC 2 / ISO 27001, SSO and admin controls, Reversibility and data export

  3. 3. Fournisseur C — start-up39 %

    Knocked out: GDPR-compliant DPA

The detail

Cost line items
LineEstimate
Set-up
#1 Fournisseur A — suite bureautique — 83 %

Weak points to negotiate: Price (2/4).

€66
#2 Fournisseur B — assistant spécialisé — 68 %

Weak points to negotiate: SOC 2 / ISO 27001 (2/4), SSO and admin controls (2/4), Reversibility and data export (2/4).

€54
Risk
#3 Fournisseur C — start-up — 39 %

Knocked out: GDPR-compliant DPA. No weighting compensates for a contract that does not permit sending the data.

€31

The assumptions

Every figure above rests on these. The ones marked “assumption” have no external source: they are modelling choices, labelled so they can be argued with rather than mistaken for measurements.

Weighting profile
standardObserved
Standard: price weighs as much as compliance. Regulated and public: residency, certifications and logs weigh more, price less.
Knock-out criteria
GDPR-compliant DPA, No-training guaranteePublished
A score ≤ 1 on either ranks the vendor last regardless. Without a DPA, personal data cannot lawfully be sent; without a no-training guarantee, your confidential data becomes the vendor's.
Scale
0–4Observed
0 absent · 1 verbal promise · 2 documented but partial · 3 contractual · 4 contractual and verified.

What the calculation does, what the AI does

Every figure on this page comes from a deterministic algorithm running in your browser: the same input always gives the same result, and nothing is sent to produce it. AI runs only afterwards, to write the commentary from those figures. It produces none of them — the format it fills has no numeric fields — and any sentence quoting a value the calculation did not produce is removed before display.

Where to go next

See all 19 tools →