Introduction

Bring your licensed EcoVadis ratings into Parakeet Risk to centralize supplier risk signals, automate routing, and keep audits ready without extra spreadsheet churn. Parakeet processes customer‑licensed data only—no commercial partnership with EcoVadis is implied.

Ingestion options

Choose the path that matches your data access and IT posture.

API (customer token)#

• You provide an API token associated with your EcoVadis license. Parakeet stores credentials securely and scopes access to your tenant.

• Supports incremental pulls keyed by last update timestamp so only changes are retrieved.

• Recommended when you need consistent cadence and minimal manual touch.

CSV/SFTP#

• Drop standardized CSV files to a secure SFTP endpoint managed by Parakeet or your IT.

• Ideal for teams already exporting to Excel/CSV—leverages Parakeet’s Spreadsheet Synergy to preserve existing columns while adding validation and audit trails.

• Versioning tracks each file as a distinct import with before/after diffs.

Email‑to‑ingest#

• Send files from whitelisted email domains/addresses to a unique intake address.

• Lightweight for smaller teams; Parakeet validates attachments and rejects unrecognized senders.

• Great for pilot phases or occasional updates.

Field mapping

Parakeet maps incoming fields to your supplier master so ratings are actionable across EHS, compliance, and procurement workflows.

• Company identifiers (required)

• Primary key: your internal supplier/vendor ID.

• Secondary keys (optional): external company IDs supplied in the file (e.g., platform‑specific company ID), plus any additional reference codes you maintain.

• Rating core (required)

• Overall rating/score, rating scale/units, rating status (e.g., active/expired), rating date and validity period.

• Medal/scorecard fields (optional)

• Medal or tier, scorecard version, renewal date, confidence/level if provided.

• Issue categories and flags (optional)

• High‑level categories, findings/alerts, and corrective‑action requirements as available in your licensed export.

• Provenance

• Source method (API/CSV/Email), file or job identifier, hash/checksum, and import timestamp for audit.

Mapping rules

• Identity resolution: Parakeet first matches on your internal supplier ID; if absent, it falls back to external company IDs you designate. Conflicts are flagged for review.

• Normalization: Scales and medal tiers are normalized to a common model so cross‑source comparisons remain consistent.

• Versioning: Each new rating snapshot is stored as a new version; downstream risk scores reference the exact version used.

Refresh cadence and audit logs

• Cadence options: on‑demand, scheduled (hourly, daily, weekly), or event‑driven (email receipt/SFTP drop). You choose per connection.

• Delta vs. full loads: API jobs default to delta; CSV/SFTP/email can run as delta (changed rows only) or full refresh with deduplication.

• Failure handling: Automatic retries with notifications; jobs surface row‑level errors and suggested fixes.

• Audit trail: Every import is immutable and includes who/what/when, record counts, field‑level changes, and the downstream objects updated (e.g., supplier risk score, open actions). Audit logs are searchable and exportable for audits.

How ratings influence risk scoring and routing

EcoVadis ratings become first‑class signals inside Parakeet’s unified risk model.

• Risk scoring

• Weighted factor: Overall rating and medal/tier contribute to the supplier’s composite risk score alongside incidents, certifications, and performance data.

• Thresholds: You can set minimum rating thresholds by category (e.g., direct materials vs. indirect) and region.

• Time decay: Optionally increase risk if a rating nears expiry or has not refreshed within your policy window.

• Automated routing

• Intake triage: Low ratings or flagged categories can auto‑open tasks for corrective action plans, evidence requests, or focused assessments.

• Approvals: Purchases or onboarding flows can be gated until minimum thresholds are met.

• Monitoring: High‑performing suppliers can be routed to lighter‑touch reviews; riskier ones to higher monitoring frequency.

• Evidence and reporting

• Rosella AI helps generate audit‑ready narratives that cite the exact rating version and import job used to make a decision.

Validation and quality controls

• Schema checks: Required fields present, data types and value ranges validated.

• Referential integrity: Supplier IDs must map to your master; or the record is parked in a review queue.

• Deduplication: Exact and fuzzy matching prevent duplicate supplier‑rating pairs.

• Change detection: Field‑level diffs highlight what changed since the last version.

Getting started

1. Decide on an ingestion method (API, CSV/SFTP, or email‑to‑ingest).

2. Connect and authenticate (API token) or register secure file/email sources.

3. Configure field mapping using your supplier master and desired optional fields.

4. Set refresh cadence and choose delta/full‑load behavior.

5. Test in a sandbox job; review validation results and audit log entries.

6. Enable routing rules and risk thresholds; verify end‑to‑end in a pilot supplier cohort.

7. Monitor dashboards and tune weights with operational feedback.

For broader data‑onboarding patterns, see External Ratings Ingestion. To push outcomes into procurement workflows, see SRM/S2P Integrations.