UpGuard Vendor Risk

Connect UpGuard Vendor Risk to collect vendor procurement evidence with automated compliance tests, switched on per workspace.

Connect with an API token

1. In UpGuard Vendor Risk:

   1. Sign in to UpGuard as an administrator (only administrators can access the API token).
   2. Click the Settings icon in UpGuard's top-right corner.
   3. Click the API tab.
   4. Copy an existing key or click Create new API key.

   The doc does not describe per-key scopes, so the BreachRisk grant depends on the account's UpGuard modules rather than a key setting. Whether the key is shown only once is not stated.

   Source: help.upguard.com, checked 2026-10-07.

   The permissions Safeguard needs: BreachRisk.

2. On Compliance › Connectors, open UpGuard Vendor Risk, click Connect, choose API token and fill in:

   Field	What to enter
   API key	Required. Stored encrypted and never shown again.

3. Click Connect with token.

Frameworks

Safeguard's automated tests read UpGuard Vendor Risk and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.

These tests are switched on per workspace by the Safeguard team.

Related

• Vendor Procurement connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks