Skip to main content
For AI agents: a documentation index is available at https://docs.coverbase.com/llms.txt. This page is also available in markdown by appending .md to the URL.
Your Coverbase representative turns on the third-party lifecycle features, including the Certificate Vault, prequalification, and the licensed rating connectors with their Radar rating detector, for your organization.
The Certificate Vault is a record for every attestation your program relies on: ISO certificates, SOC reports, PCI attestations, certificates of insurance, network grades and ESG ratings. Prequalification rules read the vault to decide which vendors may be used, and licensed rating providers feed rating changes into Radar.

​
What it does

Every certificate in one place

Certificates in the left navigation lists every certificate across your vendors, and each vendor has a Certificates tab. Validity (valid, expiring within 60 days, expired) is worked out when you look, so it never goes stale.

Filled from what you already have

Certification, PCI, SOC 1 and SOC 2, ACORD 25 and insurance policy documents fill the vault when they are analyzed. Trust center documents, network pulls and certificates you add by hand fill it too, and you can request a certificate from the vendor through the supplier portal.

Prequalification rule sets

Rules that must all pass, each passing when any one of its conditions does: a network grade, a network status, a certificate held, insurance coverage with a minimum limit and additional insured, or a safety or ESG figure such as TRIR, EMR, DART rate or ESG score.

Blocking with an override

A rule set can block new purchase orders until the vendor qualifies or someone records an override with a rationale. An override lapses when the result changes.

Contractor and ESG networks

ISNetworld and Avetta grades, safety statistics and insurance, and EcoVadis scorecards, sync into the vault daily.

Licensed ratings in Radar

Bitsight, SecurityScorecard, RapidRatings and Moody’s ratings are pulled for your portfolio. A change in a matched vendor’s rating becomes a Radar signal, and the first pull is a baseline, so connecting a provider does not flood Radar.
Certificates page with counts for certificates, expiring in 60 days, expired and from networks, the All Certificates table, two prequalification rule sets and the Networks card

Certificates in the left navigation: the vault's counts, every certificate with its source and status, the prequalification rule sets and the networks.

When a provider’s response does not have the shape Coverbase expects, the pull stops and records the error rather than reading it as empty, so a changed response never archives certificates. A value the provider reports as zero, such as a rating, a score, an insurance limit or a company ID, is recorded as zero.

​
How long a certificate counts

  • A SOC report is relied on for a year past the end of its period.
  • A certificate of insurance is only as current as its first policy to lapse.
  • Every prequalification condition reads only current certificates, so an expired record stops counting for its grade and its figures alike.
  • A safety figure over a number of years needs each of the latest years reported. A missing year fails the condition.

​
Where prequalification shows up

  • On the vendor’s page, as Qualified, Blocked or Overridden, with Override with rationale.
  • On the Front Door review of an intake request, with the same override control.
  • When someone issues a purchase order in Coverbase for a blocked vendor: the purchase order is refused.
  • In workflows, as a prequalification condition you can branch on.
A failing rule set that does not block reads as advisory. Results are recalculated when a certificate changes, when you save a rule set, and once a day. Each rule set can remind relationship owners a set number of days before a certificate lapses.

​
Where to go next

Certificate Vault guide

Fill the vault, write a rule set, override a result and connect a network.

ISNetworld

Connect contractor grades, statistics and insurance.

Bitsight

Bring security rating changes into Radar.

Supplier Radar

Where rating changes become signals.