For AI agents: a documentation index is available at https://docs.coverbase.com/llms.txt. This page is also available in markdown by appending .md to the URL.
Coverbase connects with the tools your security, risk, and procurement teams already run. This directory lists the external systems available on the Configuration → External Integrations page in the dashboard, grouped by category. Some integrations are self-serve (you configure them yourself with an API key or credentials), while others are enabled by the Coverbase team during onboarding.
This directory reflects the integration catalog in the dashboard. For how integrations behave end to end (inbound API, workflow engine, and outbound webhooks), see Integration Workflows. Platforms with a deep-dive guide (architecture diagrams, data mapping, trigger model) are linked below; see the platform-specific guides. To connect a system not listed here, talk to your Coverbase team.
How to read this directory
- A linked name has a built-in connector with its own guide, or is read by a documented Coverbase feature (the link says which).
- A name without a link is listed in the dashboard catalog, but Coverbase has no built-in connector for it today. Its card on Configuration → External Integrations explains that Coverbase can build the integration and how to reach your Coverbase representative. It does not connect anything. Talk to your Coverbase team, or connect it yourself through the public API and webhooks.
- Coupa, SAP Ariba, Ironclad, Icertis, Archer, ServiceNow IRM, the ERM risk register, Microsoft Teams, Bitsight, SecurityScorecard, Rapid Ratings, Moody’s Analytics, ISNetworld, Avetta, EcoVadis, and the Snowflake, Amazon S3 and BigQuery destinations are part of the third-party lifecycle features, which your Coverbase representative turns on for your organization.
Cybersecurity & threat intelligence
Outside-in security ratings, attack-surface, and threat-intelligence sources that enrich Vendor Intelligence. Shodan, Censys, Have I Been Pwned, Axio, Bitsight, Black Kite, CyberGRX, Panorays, Recorded Future, RiskRecon, SecurityScorecard, UpGuard, Mandiant, IONIX, Cyberhaven.Security operations & SIEM
Security information and event management platforms your security operations team runs, where vendor activity, access, and third-party alerts meet the rest of your security telemetry. Exabeam, Splunk Enterprise Security, Microsoft Sentinel, Google Security Operations, IBM QRadar SIEM, CrowdStrike Falcon Next-Gen SIEM, Palo Alto Networks Cortex XSIAM, Elastic Security, Sumo Logic, Securonix, Rapid7 InsightIDR.AI Governance & Safety
AI governance, AI security, and model-risk platforms for evaluating vendors that build or depend on AI systems, a natural companion to the AIUC-1, ISO/IEC 42001, EU AI Act, OWASP LLM, and MITRE ATLAS control sets. Credo AI, Holistic AI, FairNow, Lakera, Robust Intelligence, HiddenLayer, Protect AI, Cranium, Lasso Security, WitnessAI.SaaS Security Posture Management (SSPM)
Identity, configuration, and posture signals from your SaaS estate. Okta, FalconShield (Adaptive Shield), AppOmni, Grip Security, Obsidian Security, Valence Security (configured on its card), Nudge Security.Identity & single sign-on (SSO)
Identity providers Coverbase reads users, application assignments, and access data from. Microsoft Entra ID, Google Workspace, AWS IAM Identity Center, OneLogin, Ping Identity, JumpCloud, Cisco Duo, Auth0, CyberArk, SailPoint, Saviynt. Okta is listed under SaaS Security Posture Management above.These are the identity systems Coverbase reads from, for access reviews and application inspection. Signing in to Coverbase is a separate capability: SAML 2.0 enterprise SSO, which inherits your identity provider’s MFA and conditional-access policy, with just-in-time provisioning and an API for IGA-driven joiner/mover/leaver lifecycle. See Identity and access management.
HR & workforce management (HRIS)
HR and payroll systems that supply employee, contractor, and org data for ownership and access reviews. Workday, BambooHR, ADP, UKG, Rippling, Gusto, Paychex, Paycom, Namely, SAP SuccessFactors, Oracle HCM Cloud, Dayforce, HiBob, Deel.GRC & risk management platforms
Governance, risk, compliance, and third-party risk management systems Coverbase exchanges data with. Coverbase also runs the internal side of enterprise risk natively: see Internal control monitoring for evaluating the controls inside your own applications on the same control model, risk domains, scales, findings and dashboards as your third-party program. Archer, AuditBoard, Diligent, Fusion Risk Management, LogicGate, LogicManager, MetricStream, NAVEX Global, OneTrust, Prevalent, ProcessUnity, Riskonnect, Resolver, SAI360, ServiceNow GRC, Vendor Insight, Vendor Risk, Venminder, Workiva, Aravo, Whistic, VISO TRUST, Certa, Graphite Connect, Supply Wisdom, Ncontracts.Archer and ServiceNow IRM receive findings as issues and vendors as risks, and a REST risk register can receive vendor risk through the ERM risk register connector, all through the Integration Hub. The ServiceNow integration covers ServiceNow VRM and ITSM records from workflows.
Compliance Automation & Trust Management
Continuous-compliance and trust-management platforms that automate control monitoring and evidence collection. Vanta, Drata, Secureframe, Thoropass, Hyperproof, Sprinto, Conveyor, Vendict. SafeBase trust centers are read automatically during vendor enrichment, so SafeBase has no card on the page.Regulatory change & obligations management
Regulatory intelligence, obligation registers, and EHS compliance systems that track the laws and permits your organization must meet, including sector-specific obligations in energy and heavy industry. Norebase AutoComply, CUBE, Ascent, Compliance.ai, Corlytics, Regology, Enablon, Sphera, Intelex.Financial crime & AML
Anti-money laundering, fraud, and financial-crime platforms that risk teams at banks, credit unions, and fintechs run alongside Coverbase. iPiD, NICE Actimize, Nasdaq Verafin, Oracle Financial Crime and Compliance Management, SAS Anti-Money Laundering, Quantexa, Feedzai, Featurespace, Fenergo, Unit21, Hummingbird, Sardine, Alloy, Napier AI, Silent Eight, Chainalysis.Privacy & data governance
Data discovery, consent, and data-subject-request platforms that govern the personal data your vendors process. Securiti, BigID, Transcend.Document & contract lifecycle management
Contract and document systems Coverbase reads obligations from and writes back to. Adobe Acrobat Sign, Agiloft, CobbleStone, Concord, Conga, ContractPodAi, DocuSign, Dropbox Sign, Evisort, Gatekeeper, Harvey, Icertis, Ironclad, Juro, LinkSquares, Luminance, Malbek, Onit, SirionLabs, SpotDraft.The DocuSign integration initiates execution from a Coverbase document, routes countersignature through ordered signer slots, tracks envelope status on the record, and keeps the executed agreement attached to the third party it belongs to.
Procurement & supplier management
Procurement, sourcing, and supplier-management platforms that drive vendor onboarding and spend. SAP Ariba, Coupa, Workday Strategic Sourcing, GEP SMART, Ivalua, Jaggaer, Levelpath, Lio, Omnea, ORO Labs, Zip, Tropic, Vendr, Sastrify.ERP & finance systems
ERP and financial systems that hold your supplier master, purchase orders, and payables. Microsoft Dynamics 365, SAP S/4HANA, Oracle Fusion Cloud ERP, NetSuite, Workday Financial Management, Infor CloudSuite, Sage Intacct, Acumatica.Supply chain & nth-party risk
Multi-tier supplier mapping, product traceability, disruption sensing, and ownership intelligence for risk that sits beyond your direct vendors. Interos, Exiger, Resilinc, Everstream Analytics, Sayari, TrusTrace, Sourcemap, Altana, Prewave, Assent, Sedex.IT service management
Ticketing and service-management systems for routing findings and tasks. Freshservice, Jira, ServiceNow ITSM.Communication & collaboration
Messaging workspaces Coverbase connects to. Slack, Microsoft Teams.Sustainability & ESG
ESG ratings and sustainability-risk sources. CyberVadis, EcoVadis, ISS ESG, Sustainalytics.Financial & business data
Company, credit, and ownership data that enriches vendor records and Vendor Intelligence. Bureau van Dijk (Orbis), Crunchbase, Dun & Bradstreet, Moody’s Analytics, PitchBook, Rapid Ratings, S&P Global.Regulatory & compliance data
Sanctions, enforcement, and public-registry sources used for screening and due diligence. CFPB enforcement actions, ComplyAdvantage, Dow Jones Risk & Compliance, FDIC, FinCEN enforcement actions, GBG, OFAC, OpenCorporates, SEC EDGAR.Risk intelligence & analytics
Screening, adverse-media, and identity-verification data for third-party due diligence. Bitsight Security Scorecard, Kroll, LexisNexis, LSEG World-Check One, Trulioo, UpGuard, RiskRecon by Mastercard.Tax & VAT validation
Registries Coverbase validates vendor tax and VAT identifiers against. SAP, Sovos (Convey), VIES.Contractor prequalification
Contractor safety, insurance and compliance networks that feed the Certificate Vault. These appear on the page once your organization has the third-party lifecycle features. ISNetworld, Avetta.Data warehouses
Destinations for warehouse data share, configured on Configuration → Data Share rather than on the External Integrations page. Snowflake, Amazon S3, BigQuery.Integration platforms and API access
Workato, MuleSoft and Boomi connect through Coverbase’s starting points (a Workato custom connector, a Mule 4 template and a Boomi recipe) built on OAuth 2.0 client credentials, the REST API and signed webhooks. They are templates rather than certified marketplace connectors: see Integration platforms.Related
Integration Workflows
How inbound API, the workflow engine, and outbound webhooks fit together.
Onboarding
What Coverbase configures during onboarding, and reference architectures.
Webhooks
Subscribe downstream systems to Coverbase events.
MCP connector directory
Connect Coverbase to AI assistants and connectors via the MCP server.