No more chasing, no more answering twice
RAY does the work, so you understand your supplier risk.
Today, you and your subsidiary each send your own questionnaire, with the same questions. Each of you waits, sends the supplier a reminder and copies the answers. The supplier receives two questionnaires.
With RAY, the tool sends the questionnaire and the reminders to the supplier. Bright Cyde checks each piece of evidence and signs the report. The supplier answers once. You choose the supplier and read the signed report. Your subsidiary gets a score matched to the criticality of its prestation.
We check every answer before you see a result
- 1
The supplier answers
It declares each control point and attaches its evidence, from a link, with no account. The AI pre-fills its answers.
- 2
RAY analyses
RAY reads the evidence and, before sending, flags each divergence from the answer.
- 3
A consultant validates
The consultant sets the level of each point. RAY computes the score from those levels.
- 4
A second person signs
You receive a signed report, with a score for each domain.
You know which suppliers to deal with first
| Accepted | With conditions | Action plan | Not recommended | |
|---|---|---|---|---|
| Critical | Monitor | Plan | Act | Act |
| Important | Monitor | Monitor | Plan | Act |
| Standard | Monitor: a standard prestation is only monitored | |||
Columns: our conclusion on each supplier. Rows: the criticality of the prestation, drawn from seven questions on what it touches in your company.
What to ask each one to fix
For each supplier, we list the most serious gaps, to address in the contract or at renewal.
One signed report per supplier
Its scores on the 9 domains and its gaps. You can show it to an auditor.
Answer once, choose what your clients read
Does every client send you its own security questionnaire? With RAY, you declare once. Your company gives its agreement, and your dossier then serves the other clients under contract with Bright Cyde.
Under NIS2 (Art. 21), your clients bound by the directive must manage the security of their direct suppliers. With RAY, one up-to-date assessment spares you one questionnaire per client.
Did you receive an invitation? The link in your email, on ray.bright-cyde.tech, is personal to you: open it to answer.
No invitation? Answering a tender, or going through an assessment with a company of the AFM (Association Familiale Mulliez) ecosystem?
Get my company assessedor write to contact@bright-cyde.com
The AI pre-fills the answers and cites its source
“Pre-fill with AI” reads the text of the supplier’s evidence, proposes a level for each point and cites the passage that supports it. Before sending, the AI rereads the supplier’s declarations against its evidence. A Bright Cyde consultant then checks each point.
Are you a supplier? The AI reads the text of your evidence, never the files, and never trains on your data. Before sending, RAY removes the e-mail addresses, phone numbers and names of people it detects. Privacy policy
In preparation: API and MCP access to the RAY registry for authorised clients. The score and the summary travel with the supplier’s agreement. The detail remains subject to the supplier’s authorisation.
Talk to us about your next supplier cycle
Describe your current process. We will see how the RAY model can reduce unnecessary repetition.