CXOBuddy Help center

Help center › Sourcing & purchasing

How the vendor risk score is calculated

Published 2026-10-09

The AI vendor analysis looks for facts about a vendor on the web, each with a link to where it was found. CXOBuddy then turns those facts into scores using your company's points table. The AI never makes up a score.

The five areas

The Risk Score Breakdown shows five areas: Financial, Quality, Delivery, Compliance and Reputation.

  • Each area starts at 0.
  • Facts found with a source add points, each kind of fact up to a limit (for example, a buyer rating can add up to 40).
  • Problems found, such as complaints or legal cases, take points off.
  • The total, kept between 0 and 100, is the area's score.

Reading the bars

  • Colour: green is 70 or more, amber 50 to 69, red 30 to 49, dark red under 30.
  • Striped bar with "Limited data": fewer than half of the kinds of fact this area looks for were found. A low striped score usually means little information, not a bad vendor.
  • "N of M fact types sourced": how many of the kinds of fact the area looks for were found.

How calculated

Click an area to open How calculated. It shows the sum, for example "Reputation 42 = Buyer rating 22 of 40 + Notable customer 10 of 30 + Recognition 10 of 30", and every fact with what was found, its source link and its points.

Change the points (admins)

Admins set how many points each kind of fact is worth in Settings → Vendor Risk Scoring. Each analysis keeps the points it was scored with, so older analyses don't change.

Was this article helpful?