Federal civilian · Moraph software

Supply Chain Mapping & Risk Illuminator

See who your suppliers depend on, several tiers down, and where that creates risk

Book a demonstrationRequest a technical briefingFactsheet

Overview

What you are buying

The Supply Chain Mapping & Risk Illuminator builds a map of an agency's suppliers and their own suppliers from contract data, supplier disclosures and the commercial data sources you choose. It shows where critical products and services depend on a single source, on suppliers in countries of concern or on unstable regions, and records the evidence behind each finding. Analysts and contracting officers use it to document risk assessments, domestic preference reviews and mitigation decisions, which stay with people.

The problem it solves

Agencies are expected to understand where their critical goods and services come from, apply domestic preference rules, and keep prohibited sources out of their supply chains. In practice, most agencies know their prime contractors well and their sub-tier suppliers hardly at all. Supplier information sits in contract files, questionnaires and spreadsheets, commercial data is bought separately by different offices, and when a supplier is named in a new prohibition or a region becomes unstable, finding which programs are exposed takes weeks of emails.

  • Visibility usually stops at the prime contractor
  • Supplier disclosures and questionnaires are kept in files that cannot be searched together
  • Exposure to a newly prohibited source or affected region is found by hand
  • Risk assessments and mitigation decisions are hard to evidence consistently

Who uses it

  • Supply chain risk management (C-SCRM) programs in federal civilian agencies
  • Contracting officers and acquisition staff applying domestic preference and sourcing rules
  • Program offices that own critical systems and products
  • Chief information security and acquisition officers who answer for supply chain risk
  • Inspectors general and auditors who review supply chain decisions

Requirements it supports

Buy American Statute (41 U.S.C. 8301 to 8305) and FAR Part 25Federal Acquisition Supply Chain Security Act of 2018 (41 U.S.C. 1321 to 1328) and FAR Subpart 4.23Section 889 of the John S. McCain National Defense Authorization Act for FY 2019 (FAR 52.204-24 and 52.204-25)Executive Order 14005 (Ensuring the Future Is Made in All of America by All of America's Workers)Executive Order 14017 (America's Supply Chains)NIST SP 800-161 Rev. 1 (Cybersecurity Supply Chain Risk Management Practices)

The product supports these requirements; meeting them remains your organization’s responsibility.

See how it works

A short walkthrough

Illustrative screens with fictional sample data. They show the workflow, not any client’s data or configuration, and the layout of the product itself differs. A live demonstration uses the product with sample data.

  1. Step 1

    Critical items at a glance

    The program view lists critical items with how deep the map goes and how many open findings each has.

    ItemProgramPrimeTiers knownOpen findingsHighest risk
    Network switches (sample)Example Program AExample Systems Co. (fictional)32High
    Laboratory reagents (sample)Example Program BExample Supply Inc. (fictional)21Medium
    Field radios (sample)Example Program AExample Comms LLC (fictional)1Map incompleteUnknown
    Server hardware (sample)Example Program CExample Compute Corp. (fictional)40Low
    Protective equipment (sample)Example Program BExample Safety Ltd. (fictional)21Medium
    The program view lists critical items with how deep the map goes and how many open findings each has.

  2. Step 2

    Following the supply path

    Selecting an item shows the chain of suppliers behind it, each link with its source and the date it was last confirmed.

    Network switches (sample) · Example Program A

    1. Example Systems Co. (fictional), prime contractorContract file
    2. Example Assembly Partner (fictional), final assembly, Example Country 1Supplier disclosure
    3. Example Board Maker (fictional), circuit boards, Example Country 2Commercial data source
    4. !Example Chip Foundry (fictional), sole source for one component, Example Country 3 (designated)Commercial data source
    Selecting an item shows the chain of suppliers behind it, each link with its source and the date it was last confirmed.

  3. Step 3

    Why a finding was raised

    Each finding explains itself: the criterion applied, the supplier path and the data behind each step.

    F-2214 · Single-source dependency in a designated country

    Critical item
    Network switches (sample)
    Criterion
    Sole source located in a country on the program's designated list
    Supplier
    Example Chip Foundry (fictional), tier 3
    Source of relationship
    Commercial data source, last updated in the sample period
    Confirmed by supplier
    Not yet

    Also affected

    • Example Program C uses a product with the same component
    • Two other primes list Example Board Maker (fictional) as a supplier
    • No alternate source recorded
    Each finding explains itself: the criterion applied, the supplier path and the data behind each step.

  4. Step 4

    Asking the supplier

    Information requests go to the supplier through the portal and are tracked against the finding until answered.

    RequestSupplierFindingSentStatus
    RQ-0581Example Systems Co. (fictional)F-2214Sample date 1Response received
    RQ-0577Example Comms LLC (fictional)Map incompleteSample date 2Overdue, escalated to contracting officer
    RQ-0570Example Safety Ltd. (fictional)F-2190Sample date 3Awaiting response
    RQ-0566Example Supply Inc. (fictional)F-2185Sample date 4Closed
    Information requests go to the supplier through the portal and are tracked against the finding until answered.

  5. Step 5

    Recording the decision

    The risk assessment, the mitigation chosen and the approval are recorded together, with follow-up actions tracked.

    A-0412 · Finding F-2214 · Network switches (sample)

    Likelihood
    Medium (analyst assessment)
    Impact
    High: no alternate source for the component
    Mitigation chosen
    Qualify an alternate component; monitor in the meantime
    Decided by
    Program owner, Example Program A
    Approval
    Awaiting C-SCRM program lead

    Follow-up actions

    • Prime to propose alternate component
    • Contracting officer to review contract clause options
    • Re-check supplier status at the next data refresh
    The risk assessment, the mitigation chosen and the approval are recorded together, with follow-up actions tracked.

  6. Step 6

    When a list changes

    When the program updates a list, the map is re-checked and new findings are raised for the programs affected.

    Designated entity list · Sample update

    1. List updated with 3 sample entities, source recordedC-SCRM program lead
    2. List change approvedSecond approver
    3. Map re-checked across all programsSystem
    4. !2 new findings raised: Example Program A, Example Program CSystem
    5. Findings assigned to analystsSystem
    When the program updates a list, the map is re-checked and new findings are raised for the programs affected.

Workflows

The principal workflows

  1. Map

    Contract and supplier data is loaded and resolved into a map of suppliers, their locations and their relationships, starting from your prime contractors and extending down as disclosures and data sources allow.

    • Contracts, line items and prime contractors loaded from your acquisition systems
    • Entity data matched to supplier records, with uncertain matches flagged
    • Sub-tier suppliers added from disclosures and the commercial sources you select
    • Each relationship recorded with its source and date
    • Critical products and services marked by the owning program

  2. Assess

    Risk criteria your program sets are applied across the map: single sources, suppliers in countries of concern, unstable regions, prohibited entities and domestic content questions, each finding with its evidence.

    • Risk criteria and lists configured and approved by the program lead
    • Suppliers checked against prohibited and excluded entity lists
    • Concentration and single-source dependencies identified for critical items
    • Findings created with the supplier path and the data behind them
    • Analyst reviews each finding and confirms, dismisses or requests more information

  3. Engage

    Where data is missing or a finding needs explanation, the analyst sends a structured request to the supplier and tracks the response.

    • Information request prepared from the finding
    • Request sent to the supplier contact through the supplier portal
    • Supplier responds with disclosures, attestations and documents
    • Response reviewed and the map updated
    • Unanswered requests escalated to the contracting officer

  4. Decide and mitigate

    Confirmed risks go to the people who own the decision. Contracting officers and program owners record the assessment, the mitigation chosen and its follow-up, with approval by the program lead where your procedures require it.

    • Risk assessment written with likelihood, impact and options
    • Mitigation proposed: alternate source, contract clause, monitoring or acceptance
    • Program lead approves or returns the decision
    • Follow-up actions tracked to completion
    • Map re-checked when lists, data or suppliers change

Roles and permissions

Who does what in the product

Each role below is a starting point. During implementation we set them up to match your teams, and every action anyone takes is recorded in the audit trail.

Supply chain risk analyst

C-SCRM analyst, supply chain risk analyst, acquisition risk analyst

Builds and maintains the supplier map and turns its findings into reviewed, evidenced risks.

Sees

  • The supplier map for the programs assigned to them
  • Findings with the criterion, supplier path and data sources
  • Supplier requests and responses
  • Data quality and entity match issues

Does

  • Confirms or rejects uncertain entity matches
  • Reviews findings and confirms, dismisses or requests more information, with reasons
  • Sends supplier information requests and reviews responses
  • Drafts risk assessments for confirmed findings
  • Updates the map from new disclosures

Cannot

  • Change risk criteria or lists
  • Approve risk decisions
  • Record sourcing or contract decisions
Approvals
Their dismissals can be sampled by the program lead, and their assessments go to the program owner and program lead for decision.
Notified about
New findings assigned to them, supplier responses received, and requests overdue.

Contracting officer

Contracting officer, contract specialist

Brings supply chain findings into acquisition decisions for their contracts.

Sees

  • Findings and assessments for their contracts
  • Supplier information relevant to domestic preference and sourcing reviews
  • Supplier requests and responses for their contractors

Does

  • Reviews findings when planning, awarding or modifying a contract
  • Records domestic preference and sourcing decisions with their basis
  • Follows up overdue supplier requests with the contractor
  • Records contract actions taken as mitigations

Cannot

  • Change lists or risk criteria
  • Approve risk decisions outside their contracts
  • Edit an analyst's findings
Approvals
Their decisions follow your agency's acquisition approval procedures; the system records them.
Notified about
Findings on their contracts and supplier requests escalated to them.

Program owner

Program manager, system owner, mission program lead

Decides how risks to their program's critical items are handled.

Sees

  • Critical items, supplier map and findings for their program
  • Assessments and follow-up actions

Does

  • Marks products and services as critical
  • Chooses a mitigation or accepts a risk, with reasons
  • Assigns follow-up actions
  • Confirms when actions are complete

Cannot

  • Approve their own risk acceptance where your procedures require program lead approval
  • Change lists or criteria
  • See other programs unless granted
Approvals
Risk acceptances and mitigations above the level your procedures set are approved by the C-SCRM program lead.
Notified about
Confirmed findings and assessments waiting for their decision.

C-SCRM program lead

C-SCRM program manager, supply chain risk executive, senior acquisition official

Owns the agency's supply chain risk program: criteria, lists, decisions and reporting.

Sees

  • The full map, findings and decisions across all programs
  • Risk criteria and lists with their history
  • Portfolio reporting
  • The audit trail

Does

  • Sets and changes risk criteria and lists, with sources recorded
  • Approves or returns risk decisions
  • Samples dismissed findings
  • Prepares leadership and oversight reporting

Cannot

  • Apply a list change without a second approver
  • Edit or delete audit trail entries
  • Approve a decision they made as a program owner
Approvals
Approves risk decisions; their own list changes need a second designated approver.
Notified about
Decisions waiting for approval, list changes raising new findings, and overdue follow-up actions.

Supplier contact (external)

Supplier compliance contact, contractor supply chain manager

Provides information about their organization and its suppliers when asked.

Sees

  • Requests sent to their organization
  • Their own earlier responses and documents

Does

  • Answers questionnaires
  • Uploads disclosures, attestations and documents
  • Asks questions about a request

Cannot

  • See findings, assessments or other suppliers
  • See the agency's lists or criteria
  • Change a response after submission without sending a new one
Approvals
Their responses are reviewed by an analyst.
Notified about
New requests and reminders before a request is due.

Auditor or oversight reviewer (read-only)

Internal auditor, inspector general staff, oversight reviewer (under temporary access)

Reviews how supply chain risks were identified and decided without being able to change anything.

Sees

  • Map, findings and decisions within the scope granted
  • List and criteria history
  • The audit trail

Does

  • Searches and reads records within their scope
  • Exports records and reports, with each export logged
  • Leaves review notes where enabled

Cannot

  • Change, decide or approve anything
  • See records outside the scope and dates granted
  • Keep access after it expires
Approvals
Their access is approved by an agency official and an administrator, with a scope and an end date.
Notified about
Nothing by default; access granted and expiring is confirmed to the person who approved it.

Administrator

Application administrator, IT systems administrator

Manages users, roles, supplier accounts and configuration.

Sees

  • Users, roles, programs and supplier accounts
  • Data source connection status
  • The record of permission changes

Does

  • Adds and removes agency users, or maps them from single sign-on groups
  • Invites and deactivates supplier contacts
  • Maintains data source connections and schedules
  • Runs access review reports

Cannot

  • Confirm findings or approve decisions
  • Change lists or criteria
  • Grant themselves an analyst or approver role without a second approver
Approvals
Role changes that grant portfolio-wide access are approved by the C-SCRM program lead.
Notified about
Data source failures, access reviews due and accounts unused for a period your policy sets.

Permissions at a glance

ActionAnalystContractingProgram ownerSCRM leadSupplierAuditorAdmin
Confirm entity matchesFullNo accessNo accessFullNo accessNo accessNo access
Confirm or dismiss findingsOwn work onlyNo accessNo accessFullNo accessView onlyNo access
Send supplier information requestsOwn work onlyOwn work onlyNo accessFullNo accessNo accessNo access
Respond to information requestsNo accessNo accessNo accessNo accessOwn work onlyNo accessNo access
Mark critical itemsNo accessNo accessOwn work onlyFullNo accessView onlyNo access
Draft risk assessmentsOwn work onlyOwn work onlyOwn work onlyFullNo accessView onlyNo access
Choose a mitigation or accept a riskNo accessOwn work onlyOwn work onlyFullNo accessView onlyNo access
Approve risk decisionsNo accessNo accessNo accessApprovesNo accessNo accessNo access
Record sourcing and domestic preference decisionsNo accessOwn work onlyNo accessView onlyNo accessView onlyNo access
Change risk criteria and listsNo accessNo accessNo accessApprovesNo accessView onlyNo access
View audit trailNo accessNo accessNo accessView onlyNo accessView onlyView only
Manage users and supplier accountsNo accessNo accessNo accessApprovesNo accessNo accessFull
  • Full
  • Own work only
  • Approves
  • View only
  • No access

How access is controlled

  • Separation is built in: list and criteria changes need a second approver, and nobody approves a risk decision they made themselves.
  • Agency roles are limited by program and contract, so staff see the suppliers and findings they are responsible for unless granted portfolio-wide access.
  • Supplier contacts are external users: they see only the requests sent to their organization and their own responses, never findings, lists or other suppliers.
  • Every change to a user's role or access is recorded in the audit trail, and auditors and oversight reviewers get temporary read-only access with a defined scope and an end date.

Features

What it does

Multi-tier supplier map

Prime contractors and their sub-tier suppliers shown as a navigable map, with each relationship's source and date.

Entity resolution

Supplier records from different sources matched to a single entity, with uncertain matches flagged for an analyst to confirm.

Critical item marking

Programs mark the products and services critical to their mission, so analysis focuses where disruption would matter most.

Country and region risk

Supplier locations compared with the countries and regions your program designates, using lists your program approves.

Prohibited and excluded sources

Suppliers checked against the prohibition and exclusion lists your program configures, with each check and its result recorded.

Concentration analysis

Single-source and concentrated dependencies identified for critical items, including where several primes rely on the same sub-tier supplier.

Domestic preference review

Supplier and component information organized to support contracting officers' domestic content and country-of-origin reviews.

Supplier information requests

Structured questionnaires and document requests sent to suppliers through a portal, with responses tracked against each finding.

Explained findings

Every finding shows the supplier path, the criterion applied and the data source behind each step.

Risk assessments and mitigations

Assessment records with options, the decision taken, the approver and follow-up actions tracked to completion.

Change monitoring

When a list, data source or supplier record changes, the map is re-checked and new findings are raised for review.

Audit trail

Every data load, match, finding, decision and export recorded with the person and time.

Integrations

How it connects to your systems

Connects toHowWhat flows
Contract writing and acquisition systemsContracts, line items and contractor details from your agency's acquisition systems, by scheduled file or API.In: contracts, line items, contractors and product or service codes.
SAM.gov entity dataPublic entity registration information from SAM.gov, used to identify and match suppliers.In: entity registration data and exclusion records available through SAM.gov.
Commercial supplier dataSupply chain, ownership and location data from commercial providers your agency licenses, connected during implementation.In: supplier relationships, ownership and locations, under your agency's licence terms.
Asset and software inventoriesHardware and software inventories, including software bills of materials where available, link products in use to the suppliers behind them.In: products, versions and manufacturers in use.
Supplier portalSuppliers sign in to answer questionnaires and upload disclosures, seeing only the requests sent to them.Out: information requests. In: responses, attestations and documents.
Single sign-onAgency staff sign in through your identity provider, including PIV-based authentication where your provider supports it.In: user identity and group membership for role assignment.
Work APIMap, finding and decision data available to your agency's risk and reporting tools through the Moraph Work API.Out: suppliers, relationships, findings, assessments and decisions.

Each integration is confirmed in discovery and specified in the design. See how an engagement progresses.

Security and privacy

How your data is protected

Data kept in the United States

Supplier maps, findings and decisions are hosted in the United States region.

Cleared support lane

Support tickets from federal clients are routed only to US citizens with active security clearances.

Access by role and program

Staff see the programs and contracts they are responsible for; suppliers see only their own requests and responses.

Encryption under controlled keys

Client data is encrypted with keys our staff cannot access without explicit, time-bound authorization.

Complete audit trail

Every data load, finding, decision and export is recorded with the user and time, and cannot be edited.

Independent audits

Moraph's controls are covered by its SOC 2 Type II report and ISO/IEC 27001 certification, available through the Trust Center.

Company-wide controls, independent audits (SOC 2 Type II and ISO/IEC 27001) and data residency are described in our Trust Center, where you can request the evidence pack.

Reporting

What you can report on

11 standard reports, grouped by who uses them. Each shows who it is for, how it can be broken down, how it is delivered and what it is used for. The data behind them is also available to your own reporting tools.

Operational

Open findings

For analysts and the C-SCRM program lead

Every open finding with its criterion, critical item, program, assignee and age.

Break down by
Program, Criterion, Analyst, Age band, Risk level
Delivered as
Live dashboard; CSV export
Used for
Working findings in order of risk and age.

Supplier requests

For analysts and contracting officers

Information requests sent, answered, overdue and escalated, by supplier and finding.

Break down by
Supplier, Status, Contract, Age
Delivered as
Live dashboard; scheduled email
Used for
Following up on missing supplier information.

Follow-up actions

For program owners and the C-SCRM program lead

Mitigation actions with owners, status and target dates set by the decision maker.

Break down by
Program, Owner, Status, Action type
Delivered as
Live dashboard; scheduled email
Used for
Making sure mitigations are carried out.

Risk portfolio

Concentration and single sources

For c-SCRM program lead and program owners

Critical items that depend on a single source or on suppliers shared by several primes.

Break down by
Program, Tier, Supplier, Item category
Delivered as
Live dashboard; PDF
Used for
Prioritizing where alternate sources are needed.

Geographic exposure

For c-SCRM program lead and leadership

Suppliers by country and region, with those in designated countries or regions highlighted by program and item.

Break down by
Country or region, Program, Tier, Item category
Delivered as
Live dashboard; PDF; CSV export
Used for
Understanding exposure to countries of concern and unstable regions.

Map coverage

For c-SCRM program lead

For each critical item, the number of tiers known, the data sources behind them and where disclosures are missing.

Break down by
Program, Item, Data source, Tiers known
Delivered as
Live dashboard; CSV export
Used for
Deciding where to ask suppliers for more information or add data sources.

Acquisition and compliance

Prohibited and excluded source checks

For contracting officers and the C-SCRM program lead

Each check of suppliers against the configured lists, when it ran, and any matches with their disposition.

Break down by
List, Check date, Result, Program
Delivered as
Live view; PDF and CSV export
Used for
Evidencing that checks were run and matches were dealt with.

Domestic preference decisions

For contracting officers and acquisition leadership

Domestic preference and country-of-origin decisions recorded by contracting officers, with their basis.

Break down by
Contract, Decision type, Period, Contracting office
Delivered as
Live view; CSV export
Used for
Supporting acquisition reporting and review.

Audit and oversight

Risk decision register

For c-SCRM program lead, auditors and oversight reviewers

Every risk decision with the finding, assessment, mitigation, decision maker and approver.

Break down by
Program, Decision type, Approver, Period
Delivered as
Live view; PDF and CSV export
Used for
Showing how risks were assessed and who decided.

List and criteria change history

For c-SCRM program lead, auditors and oversight reviewers

Every change to risk criteria and lists, with its source, who made and approved it, and the findings it raised.

Break down by
List, Change date, Approver, Change type
Delivered as
Live view; PDF and CSV export
Used for
Evidencing that criteria were set and changed through an approved process.

Audit trail extract

For auditors and oversight reviewers

Who did what, when and why for a selected supplier, finding, decision or period.

Break down by
Record, User, Action, Date range
Delivered as
On request in the product; CSV and PDF export
Used for
Answering audit requests without assembling evidence by hand.

Exports, access and evidence

  • Any report can be exported to CSV, and summary and evidence reports to PDF; reports can be scheduled to arrive by email for the people entitled to see them.
  • Filters can be saved as personal or team views, and reports that need a different shape can be built in your own tools from the data described below.
  • Supplier, relationship, finding and decision data is available through the Moraph Work API for your agency's risk and business-intelligence tools.
  • Reports follow each person's role: an analyst sees their programs, the program lead sees the portfolio, and supplier contacts have no access to reports.
  • Audit reports can be run as of a past date and give the same result each time, and every report run and export is recorded in the audit trail.

Deployment

Where and how it runs

Moraph cloud, United States

Hosted in the United States region, with data kept in the US.

Dedicated environment

A single-tenant environment for agencies that require isolation, scoped in the proposal.

With a managed service

Optionally run alongside a Moraph managed service for administration, data source maintenance and analyst support.

Security controls, independent audits and data residency are set out in our Trust Center. Engagement models and what drives a quotation are on Working with Moraph.

Implementation

What a rollout involves

The general phases are on Working with Moraph. For this product, they involve the following.

Scope and critical items

We agree with your C-SCRM lead which programs, contracts and critical items are in scope first.

Data integration

Connections to your acquisition systems and the data sources you choose are built and tested. We need data extracts and a contact from each system's team.

Risk criteria and lists

Your program defines and approves the country, region, prohibition and concentration criteria, and the lists they use, with their sources documented.

Initial map and review

The first map is built and reviewed with analysts, uncertain entity matches are confirmed, and initial findings are triaged.

Workflow, roles and supplier portal

Assessment steps, approvers, roles and supplier questionnaires are configured to match your procedures.

Training and go-live

Analysts, contracting officers, program owners and approvers are trained on their own workflows, and supplier contacts receive instructions for the portal.

Limitations

What it does not do

Worth knowing before you evaluate it.

  • It informs decisions; it does not make them. Sourcing, exclusion, mitigation and domestic preference determinations belong to your contracting officers and officials.
  • The map is only as complete as the data behind it. Sub-tier visibility depends on supplier disclosures and the commercial data your agency licenses, and gaps are shown as gaps, not filled by assumption.
  • Country, region and entity lists are configured and approved by your program. Moraph does not designate countries of concern or decide which entities are prohibited.
  • It does not issue FASCSA orders, exclusion or removal decisions, or debarments; it records the information and decisions your agency makes through its own processes.
  • Commercial supplier data is subject to the provider's licence terms and accuracy, and is purchased by your agency or through a separate agreement.
  • Moraph holds no FedRAMP authorization for this product. We provide control documentation to support your agency's own authorization decision.
  • It is not designed for classified supply chain information. Classified material must be handled outside it under your agency's procedures.
  • It is not a contract writing or procurement system; it works alongside your acquisition systems.

Evaluation checklist

What to test in a demonstration or pilot

Questions worth putting to us, and to any other vendor you are considering.

  1. Load contract data for a few critical items and check how the prime contractors and their suppliers are resolved
  2. Review uncertain entity matches and judge whether the explanations are enough to confirm them
  3. Add a test entry to a designated list and see which findings it raises and how quickly analysts can trace them
  4. Send a sample information request through the supplier portal and review the response flow
  5. Walk a finding through assessment, mitigation and approval
  6. Confirm role separation: who can change lists, who can decide, and what suppliers can see

Questions

Frequently asked questions

Does it decide whether a supplier is prohibited?

No. It checks suppliers against the lists your program configures and approves, and shows the evidence. Decisions about exclusion, removal or mitigation are made by your agency's officials through its own processes.

How deep into the supply chain can it see?

As deep as the data allows. Prime contractor data comes from your contracts; sub-tier relationships come from supplier disclosures and the commercial sources you license. The map shows how many tiers are known for each item and where the gaps are.

Do suppliers need an account?

Supplier contacts sign in to a portal to answer requests sent to them. They see only their own requests and responses.

Is it FedRAMP authorized?

No. Moraph holds no FedRAMP authorization for this product. We provide control documentation to support your agency's own authorization decision.

Does it include commercial supply chain data?

It connects to the commercial providers your agency licenses. That data is bought by your agency or through a separate agreement and is used under the provider's terms.

How do we try it before buying?

A demonstration uses a fictional supplier network. For a deeper evaluation, a pilot can map a small set of your critical items from your own contract data and the sources you already have.

Next steps

Evaluate Supply Chain Mapping & Risk Illuminator

Book a demonstration

See the product working with sample data, focused on your workflows.

Request a demonstration

Request a technical briefing

Architecture, integrations, security and hosting, with our engineers and your technical team.

Request a briefing

Factsheet

This page on two sides, to share with colleagues or add to your evaluation file.

Open the factsheet

Buying through a formal procurement? See How to buy for purchasing routes, accessibility conformance reports and company information. Documentation: Supply Chain Mapping & Risk Illuminator guides on docs.moraph.com (getting started and security guides are public; setup, administration and integration guides are for client accounts). Support: Supply Chain Mapping & Risk Illuminator support guide.

Related products