Third Party

A third party represents any external entity with which your organization maintains a business relationship: supplier, subcontractor or partner.

Definition

In Aprovall, a Third party refers to a third-party company you wish to assess. It can be:

  • Suppliers — Companies that sell you goods or services
  • Subcontractors — Companies that perform work on your behalf
  • Partners — Companies you collaborate with
Third-Party Portfolio

All your third parties make up your portfolio. Each third party is uniquely identified by its thirdpartyId.

Third-Party Structure

A third party in Aprovall consists of several types of information:

🏢

Identity Information

Legal and administrative company data.

  • Company name, SIRET, EU VAT number
  • Headquarters address
  • NAF code, main activity
  • Directors, workforce
  • Status (active, in collective procedure, deregistered)
GET /thirdparties/:id
🏷️

Custom Attributes

Business data specific to your organization.

  • Category (IT, Construction, Services...)
  • Criticality (High, Medium, Low)
  • Annual purchase amount
  • Business Unit
  • Internal reference
GET /thirdparties/:id/attributes
📋

Evaluation Dossiers

Ongoing or completed assessments for this third party.

  • Dossier type (Vigilance, Onboarding, CSR...)
  • Dossier status
  • Required and collected documents
  • Expiration date
GET /thirdparties/:id/dossiers
📊

Indicators

Compliance and risk scores calculated by SmartPilot.

  • Legal compliance
  • Financial risk
  • Cybersecurity score
  • Environmental impact
GET /thirdparties/:id/indicators

Third-Party Identification

To add a third party to your portfolio, you must provide a legal identifier. Aprovall supports several types of identifiers:

CodeIdentifier TypeFormatCountry
CIT001SIRET14 digitsFrance
CIT002EU VAT numberFR + 11 charactersEuropean Union
CIT003DUNS9 digitsInternational

Search for a Third Party

Before adding a third party to your portfolio, you can search by name, SIRET number, VAT or DUNS. Aprovall relies on reference data providers:

  • Altares — For French companies
  • Dun & Bradstreet (Direct Plus) — For international companies
POST/api/v1/account/:accountId/thirdparties/search
curl -X POST https://edge.aprovall.com/api/v1/account/123/thirdparties/search \
  -H "Authorization: Bearer VOTRE_JWT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "countryCode": "FR",
    "searchBy": "NAME",
    "value": "Aprovall"
  }'

Search Parameters

searchByDescriptionRestriction
NAMESearch by company name
SIRETSIRET number (14 digits)countryCode = FR
SIRENSIREN number (9 digits)countryCode = FR
VATEU VAT number
DUNSDun & Bradstreet identifier
LOCAL_IDCountry local identifierNon-France

Third-Party Lifecycle

A third party typically follows this cycle in Aprovall:

1
Creation

Adding the third party via its legal identifier

2
Enrichment

Automatic retrieval of identity data

3
Evaluation

Creating dossiers and document collection

4
Monitoring

Continuous monitoring and renewal

API Endpoints

GET/api/v1/account/:accountId/thirdparties

Lists all third parties in your portfolio with pagination.

POST/api/v1/account/:accountId/thirdparties

Adds a new third party from its legal identifier. See the quick start guide for a complete example.

GET/api/v1/account/:accountId/thirdparties/:thirdpartyId

Retrieves detailed information about a third party.

Custom Attributes

Attributes allow you to enrich your third parties with business data specific to your organization (category, criticality, purchase amount, business unit, etc.).

List Available Attributes

First retrieve the list of attributes configured on your account:

GET/api/v1/account/:accountId/attributes?bondType=thirdparty

Returns all available attributes for third parties on your account.

Attribute Types

TypeDescriptionExample Value
stringFree text"Strategic supplier"
booleanTrue / Falsetrue
dateDate"2025-01-15"
decimalDecimal number150000.50
percentagePercentage25
list_uniqueSingle choice list"High"
list_multipleMultiple choice list["IT", "Cloud"]

Add or Modify an Attribute

POST/api/v1/account/:accountId/thirdparties/:thirdpartyId/attributes
curl -X POST https://edge.aprovall.com/api/v1/account/123/thirdparties/456/attributes \
  -H "Authorization: Bearer VOTRE_JWT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "label": "CATEGORY",
    "values": ["IT"]
  }'
Attribute Label

The label field corresponds to the attribute name as returned by the GET /attributes endpoint. For list_multiple type attributes, you can pass multiple values in the values array.

Next Steps