Third Party
A third party represents any external entity with which your organization maintains a business relationship: supplier, subcontractor or partner.
Definition
In Aprovall, a Third party refers to a third-party company you wish to assess. It can be:
- Suppliers — Companies that sell you goods or services
- Subcontractors — Companies that perform work on your behalf
- Partners — Companies you collaborate with
All your third parties make up your portfolio. Each third party is uniquely identified by its thirdpartyId.
Third-Party Structure
A third party in Aprovall consists of several types of information:
Identity Information
Legal and administrative company data.
- Company name, SIRET, EU VAT number
- Headquarters address
- NAF code, main activity
- Directors, workforce
- Status (active, in collective procedure, deregistered)
GET /thirdparties/:idCustom Attributes
Business data specific to your organization.
- Category (IT, Construction, Services...)
- Criticality (High, Medium, Low)
- Annual purchase amount
- Business Unit
- Internal reference
GET /thirdparties/:id/attributesEvaluation Dossiers
Ongoing or completed assessments for this third party.
- Dossier type (Vigilance, Onboarding, CSR...)
- Dossier status
- Required and collected documents
- Expiration date
GET /thirdparties/:id/dossiersIndicators
Compliance and risk scores calculated by SmartPilot.
- Legal compliance
- Financial risk
- Cybersecurity score
- Environmental impact
GET /thirdparties/:id/indicatorsThird-Party Identification
To add a third party to your portfolio, you must provide a legal identifier. Aprovall supports several types of identifiers:
| Code | Identifier Type | Format | Country |
|---|---|---|---|
CIT001 | SIRET | 14 digits | France |
CIT002 | EU VAT number | FR + 11 characters | European Union |
CIT003 | DUNS | 9 digits | International |
Search for a Third Party
Before adding a third party to your portfolio, you can search by name, SIRET number, VAT or DUNS. Aprovall relies on reference data providers:
- Altares — For French companies
- Dun & Bradstreet (Direct Plus) — For international companies
curl -X POST https://edge.aprovall.com/api/v1/account/123/thirdparties/search \
-H "Authorization: Bearer VOTRE_JWT_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"countryCode": "FR",
"searchBy": "NAME",
"value": "Aprovall"
}'Search Parameters
| searchBy | Description | Restriction |
|---|---|---|
NAME | Search by company name | — |
SIRET | SIRET number (14 digits) | countryCode = FR |
SIREN | SIREN number (9 digits) | countryCode = FR |
VAT | EU VAT number | — |
DUNS | Dun & Bradstreet identifier | — |
LOCAL_ID | Country local identifier | Non-France |
Third-Party Lifecycle
A third party typically follows this cycle in Aprovall:
Adding the third party via its legal identifier
Automatic retrieval of identity data
Creating dossiers and document collection
Continuous monitoring and renewal
API Endpoints
Lists all third parties in your portfolio with pagination.
Adds a new third party from its legal identifier. See the quick start guide for a complete example.
Retrieves detailed information about a third party.
Custom Attributes
Attributes allow you to enrich your third parties with business data specific to your organization (category, criticality, purchase amount, business unit, etc.).
List Available Attributes
First retrieve the list of attributes configured on your account:
Returns all available attributes for third parties on your account.
Attribute Types
| Type | Description | Example Value |
|---|---|---|
string | Free text | "Strategic supplier" |
boolean | True / False | true |
date | Date | "2025-01-15" |
decimal | Decimal number | 150000.50 |
percentage | Percentage | 25 |
list_unique | Single choice list | "High" |
list_multiple | Multiple choice list | ["IT", "Cloud"] |
Add or Modify an Attribute
curl -X POST https://edge.aprovall.com/api/v1/account/123/thirdparties/456/attributes \
-H "Authorization: Bearer VOTRE_JWT_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"label": "CATEGORY",
"values": ["IT"]
}'The label field corresponds to the attribute name as returned by the GET /attributes endpoint. For list_multiple type attributes, you can pass multiple values in the values array.