By default we do not engage with any sort of Vendor Assessments, they are insanely time-consuming in comparison to our fees. The absolute majority of our customers do not need them and therefore factoring in the cost of responding to VAs for everyone makes no sense.

Bear in mind:

eramba develops and publishes software, for some customers eramba hosts that software in our SaaS infrastructure. If the reason you need vendor assessments is that you are worried something could go wrong in that regard, then please read our public and technical standards to understand in detail how all that is done.
Every (non-hotfix) release we complete includes a pen test using AppSec tools and of course, the results are public on our forum. To find them, go to the Release Category in our forum and search for the latest major release post. Inside you will find the result of the scan.
eramba is certified in ISO 27001:2022, the scope of our certificate includes the production and distribution of software and SaaS services. Our certificate is UKAS valid and is available upon request from support@eramba.org.

If you still need a vendor assessment:

email support@eramba.org with your vendor assessment, we'll look at it and estimate the number of hours it will take us to respond to it (we bill our technical hour at EUR 100) and when you will get the completed documents. Typically this is done at a rate of 15 minutes per question (although sometimes it is done quicker and your bill will be adjusted accordingly). The exception to this rule is multi-year licenses (your company buys our yearly license for the following three years) or purchases above EUR 10k.
Notes:
- While we can answer questions, we do not submit any type of documents requested by these Vendor Assessments (policies, certificates, etc.). The exception is our ISO 27001 certificate and any document which is already public on our platforms.
- The fee assumes a one-time response process. If you have additional questions, we'll estimate that effort and update our billing.
When you purchase the software we will include an item on the bill for "Consulting" that includes those hours we spent on the Vendor Assessment. If you decide not to buy the software, you will be invoiced anyway for those hours.