Interos AI Risk Platform
Interos AI Risk Platform helps companies identify, assess, and mitigate supply chain risks using AI-driven insights, enabling better decision-making and enhanced resilience.
Interos AI Risk Platform is a leading AI-powered SaaS solution for real-time supply chain risk management, continuously mapping and monitoring over 230 million entities and 11 billion supplier-buyer relationships to deliver multi-tier visibility and proactive threat identification.[1][2] Its core value lies in the proprietary i-Score™, an intuitive 0-100 rating system powered by machine learning that analyzes over 350 attributes from 100 sources across six critical risk factors: cyber, financial, ESG, geopolitical, catastrophic, and restrictions, enabling organizations to preempt disruptions and ensure compliance.[1][3]
Key features include dynamic risk scoring, automated supplier mapping, real-time alerts, executive dashboards, scenario analysis, and innovative tools like Similar Suppliers for rapidly identifying low-risk alternatives during trade disruptions such as tariffs.[4][5] Designed for enterprises with complex global supply chains—particularly in volatile industries like manufacturing, finance, and government—it empowers procurement teams, risk managers, and executives in Fortune 500 companies and public sector organizations to accelerate due diligence, benchmark resilience, and maintain operational continuity.[1][5]
What sets Interos apart is its unmatched data scale, industry-first automated intelligence that surpasses static surveys, and proven ability to integrate physical and digital supply chains for fully predictive insights, as recognized by users for its depth and user-friendly interface.[4][6]
Sources
- [1] https://aws.amazon.com/marketplace/pp/prodview-h3m3irdg7bika
- [2] https://www.interos.ai/solutions/
- [3] https://www.interos.ai
- [4] https://www.selecthub.com/p/supply-chain-risk-management-software/interos/
- [5] https://www.businesswire.com/news/home/20250819337282/en/interos.ai-Expands-itariffs-with-Similar-Suppliers-Tool-for-Faster-Smarter-Response-to-Regulatory-and-Trade-Disruptions
- [6] https://www.interos.ai/our-software/
The documents do not explicitly state whether user data is used to train AI models. The Privacy Policy mentions 'service
The documents do not explicitly state whether user data is used to train AI models. The Privacy Policy mentions 'service
Moderate risk. Suitable for internal data but avoid confidential information.
The documents do not explicitly state whether user data is used to train AI models. The Privacy Policy mentions 'service improvement' and 'analyze' the Services, but lacks clarity on whether this includes model training. No explicit opt-out or prohibition on training is stated.
“[Privacy] 'Provide, analyze, administer, and improve the Services' — vague language without explicit training disclosure or opt-out mechanism.”
The DPA limits the processor's use of personal data to providing services per documented instructions, but the Privacy Policy's broad 'improve the Services' language and lack of explicit restrictions on sublicensing or derivative use creates ambiguity about content ownership and licensing scope.
“[DPA] 'Processor shall Process Personal Data only (i) for the purposes set forth in the Agreement (ii) in accordance with the terms and conditions set forth in this Addendum' — limited to service delivery but lacks explicit prohibition on sublicensing or derivative works.”
The Privacy Policy discloses sharing with 'Service Providers,' 'Affiliated Entities,' and 'Online Advertising Partners,' but lacks detail on DPA requirements for sub-processors. The DPA references an Authorized Subprocessor List and requires contractual obligations, but the Privacy Policy's broad 'business partners' and 'affiliates' language creates moderate concern.
“[Privacy] 'We disclose your personal information to our third-party service providers...affiliated entities...online advertising partners' and [DPA] 'Authorized Subprocessors listed https://www.interos.ai/subprocessor/' — sharing occurs but sub-processor list exists with some controls.”
The Privacy Policy states 'We reserve the right to retain any information as long as it is needed' without specific timeframes. The DPA specifies retention 'As needed to provide the Services...or until it is no longer required for legal, contractual, litigation or regulatory purposes' but lacks concrete deletion timelines or automatic purge policies.
“[Privacy] 'We reserve the right to retain any information as long as it is needed to: (i) fulfill the purposes for which we collected the information, and (ii) comply with applicable law' — vague retention period with no automatic deletion guarantee.”
The DPA explicitly limits the processor's rights to personal data and requires return or deletion upon service completion. While the documents address personal data (not generated outputs), the processor is clearly restricted to service delivery with no claimed ownership or sublicensing rights over data processed.
“[DPA] 'Following completion of the Services, at Controller's choice, Processor shall return or delete the Personal Data' and 'Processor shall Process Personal Data only (i) for the purposes set forth in the Agreement' — no vendor ownership claims over data.”
The DPA references SOC 2 alignment ('Proactively align policies, plans, and procedures to SOC2 controls') and Standard Contractual Clauses for GDPR compliance, but does not explicitly state SOC 2 Type II certification, ISO 27001, or HIPAA. Compliance is claimed but not formally certified.
“[DPA Annex II] 'Proactively align policies, plans, and procedures to SOC2 controls' and [DPA] 'Standard Contractual Clauses...GDPR' — SOC 2 alignment mentioned but formal Type II certification not explicitly stated; GDPR compliance via SCCs confirmed.”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai