Scaling third-party due diligence without losing depth
Natura works with many types of third parties, and each one has its own risk profile. Assessing them all with the same criteria doesn't reflect that difference. Generic tools tend to treat the whole chain the same way.
The company's compliance team already operated at a high level of maturity. The process worked, but due diligence relied on slow manual reviews. Keeping up with the pace of the operation demanded more and more effort from the team.
The goal was to expand the compliance and due diligence structure for third-party management. That meant reducing information gaps and the analysis time per third party, without compromising quality.
A risk architecture designed for Natura's reality
VAAS designed a bespoke risk architecture with Natura instead of applying a standard model. The solution combines an automated flow, technical opinions and compliance tracks aligned with the company's business.
Flows by type of third party. Each type of third party has its own flow, with specific rules, data sources and risk policy. This ensures more precise and consistent analyses across the whole chain.
Three-layer due diligence. The process runs in three layers of analysis, with access to more than 40 connected data sources. Information gaps shrink before a case reaches the team.
Automated technical opinions. Integration with Natura's internal systems makes it easier to generate automated technical opinions. These opinions arrive already tailored for decision-making by senior management.
VAAS structures data collection, applies the rules defined for each flow and delivers the technical opinion. The risk policy and the decision on each third party remain with Natura's compliance team and senior management.
With the automated flow, releasing green flags became faster and more consistent.
Fewer information gaps and less time per third party
With three-layer due diligence and more than 40 connected data sources, Natura significantly reduced information gaps and the analysis time per third party.
In practice, the compliance team gained the infrastructure to raise the standard it already had:
- Consistency by type of third party. Each flow applies the corresponding risk policy, with the same criteria across the whole chain.
- Less reliance on manual review. Due diligence is now structured, without depending on slow manual reviews.
- Scale. The structure keeps pace with the speed Natura's operation requires.
- Opinions ready for decisions. Automated technical opinions arrive tailored for decision-making by senior management.
