What's new
Every change to VendorVault, newest first. For what we are considering and building next, see the roadmap.
Follow updates in a feed reader with the Atom feed.
November 2026
- New
Monthly compliance report by email
Admins can receive the compliance report by email every month or every week. Each email links to a printable copy that needs no sign-in. Turn it off in Settings.
- New
Require two-step sign-in for admins
Organization owners can require two-step sign-in for admins. Admins get seven days to set it up, then they set it up before they can use the rest of the app.
- Security
Two-step sign-in for every account
Any user can turn on two-step sign-in with an authenticator app. Eight one-time recovery codes are issued in case a phone is lost.
- New
Needs attention this week on the dashboard
The dashboard now lists the vendor items to act on first: recent expiries, rejected documents, upcoming expiries, pending reviews and missing documents.
- New
Send a reminder now
Send a vendor the reminder for everything currently due, straight away. Each vendor can get one manual reminder every 24 hours, and opted-out addresses are never emailed.
- New
Checklists for reviewing certificates
A requirement can list checks such as additional insured or certificate holder. Reviewers tick them while checking a document. Checks never change a document's status.
- New
Requirements for specific trades
A requirement can apply only to certain trades. A single vendor can also be exempted from a requirement, with a reason that is recorded and shown in reports.
- New
Starter requirement packs
Add a ready-made set of requirements for general contractors, electrical, plumbing and HVAC, janitorial and landscaping, or property services. Applying a pack never creates duplicates.
- New
Bulk actions on vendors
Select several vendors to change their trade, or to pause or resume their reminders, in one step. Vendors that already match the change are skipped.
- Improved
Vendor list filters stay in the link
Filter the vendor list by trade and status, then bookmark or share the page address. Select-all only picks the rows you can see.
- Security
Uploaded files are scanned for malware
Every uploaded file is checked by a malware scanner before it is stored. An infected file is rejected and nothing is kept.
- Improved
Trial emails about your first documents
A trial account that has added a vendor but no document gets a reminder to upload one. Mid-trial accounts get a short summary of their progress.
- Security
Public security page
A page on the website lists our security controls and says plainly which certifications we do not hold.
- New
Guides and sample pages on the website
Six plain-language guides on tracking vendor insurance, and sample report and vendor pages with made-up data, are now public.
- Improved
Accessibility fixes
Fixed text colour contrast on several screens and keyboard focus in scrollable areas on phones. Every page now has a skip-to-content link.
October 2026
- New
Public API keys and webhooks
Growth and Pro accounts can create API keys and webhook endpoints to read compliance data and be notified when a vendor's status changes.
- New
Calendar feed of expiry dates
Admins can subscribe a calendar app to document expiry dates. The feed link can be rotated or turned off at any time.
- New
Compliance report as of a past date
Run the compliance report as of an earlier date. Documents uploaded after that date are left out, so the answer matches what you knew then.
- New
Yearly billing
Pay once a year and get two months free. The yearly price is ten times the monthly price for the same plan.
- New
Review vendor documents before they count
Turn on review so that documents uploaded through the vendor portal wait for approval. Only approved documents count toward compliance.
- Improved
Vendors get the reason when a document is rejected
A rejected document sends the vendor an email with the reason, the file name, the requirement and a link to upload it again.
- New
Suggested details from a certificate
When you upload a PDF certificate, an expiry date can be suggested for you to confirm. Nothing is filled in without your confirmation.
- Improved
Vendors can stop reminder emails
Each reminder email has a link that stops reminders to that vendor. Addresses that bounce or complain are no longer emailed.
Have an idea? Sign in and send it from Support.