KnightGrid resolves the legal entity, sets what must be proven, tests the evidence, records who approved and why, and reopens the decision when the facts change.
KG-2026-04-1184Five stages, one record. Each step is written down as it happens, so nothing has to be reconstructed later.
Trading names, parent groups and near-identical entities are where assessments quietly attach to the wrong company. Each vendor is resolved to its registered legal entity, and any prior assessment carries forward before control work begins.
A payments processor and a stationery supplier should not face the same review. What the vendor touches, how deeply it connects and what depends on it set the tier. The tier sets which controls must be evidenced.
A completed questionnaire is a claim. Each document is tested against the controls it is meant to support, so gaps surface before approval rather than in an audit finding.
Rules produce the signal; they do not approve vendors. An accountable reviewer accepts evidence, sets conditions and signs the approval, and the record is frozen at that moment.
Certificates expire, ownership changes, incidents happen. Each one opens a new review against a new record. The original stays intact as evidence of what was known when the vendor was approved.
The legal-entity key follows the vendor through every later assessment and decision record.
IndependentContractualIndependentTestedConfigurationFacts are extracted and issues are flagged. An accountable reviewer accepts the evidence before a control outcome enters the decision record.
frozen · 7f4a…91c2sub-processor addedopen · owner assignedNew facts create a new assessment and a new hash. The earlier approval remains replayable exactly as it was made.
Walk from legal identity to a frozen, replayable approval, with every control, evidence item, exception and owner connected.
Request early accessKnightGrid Academy