Glossary
Definitions of key terms used in the Aprovall API and the TPGRC domain.
A
- Attribute
- Customizable property associated with a ThirdParty. Examples: purchase amount, criticality, business unit, supplier type.
C
- Compliance
- State of a third party that meets all regulatory and documentary requirements defined by the client. Can be OK, KO or under evaluation.
- Criticality
- Level of importance of a third party for the organization. Generally defined as High, Medium or Low.
D
- Document
- Supporting document requested from a third party as part of an assessment. Examples: Kbis, URSSAF certificate, bank details, insurance certificate.
- Dossier
- Structured set of documents requested from a third party for a specific assessment. A dossier has a status that evolves based on third party responses.
E
- ESG
- Environmental, Social, and Governance - Non-financial assessment criteria measuring a company's environmental, social and governance impact.
- Evidence
- Response provided by a third party to a document request. Can be a file, attestation or declaration.
- Evaluation
- Process of analyzing a third party based on provided documents and calculated indicators.
I
- Indicator
- Metric or status calculated for a third party. Examples: Bank Details, Carbon, Cyber, Financial Risk, Overall Compliance.
K
- Kbis
- Official document certifying the legal existence of a French company, issued by the commercial court registry.
R
- RIB
- Relevé d'Identité Bancaire - Document containing a company's bank details (French bank account statement).
S
- SIRET
- Unique 14-digit identification number assigned to each establishment of a French company.
T
- ThirdParty
- External entity with which an organization maintains a business relationship: supplier, subcontractor, partner, service provider.
- TPGRC
- Third-Party Governance, Risk & Compliance - Discipline of managing third-party risks, including assessment, monitoring and compliance.
- TPRM
- Third-Party Risk Management - Process of managing risks associated with third-party relationships.
U
- URSSAF
- Union de Recouvrement des cotisations de Sécurité Sociale et d'Allocations Familiales - French organization collecting social security contributions. The URSSAF certificate proves that a company is up to date with its contributions.
W
- Webhook
- Real-time notification mechanism for receiving events (status change, new document, etc.) on a configured URL.