Vendor due diligence register with on-demand risk briefs

Build me a vendor due diligence register that our operations and procurement team can work out of every day, replacing the shared spreadsheet nobody trusts anymore.

The main view is the register itself. Load our vendors from Airtable using List Records against our vendor table, which has vendor name, website domain, internal owner, annual spend, renewal date and current risk rating. Sort it so anything renewing in the next ninety days floats to the top, with a days-until-renewal badge on those rows, then everything else by renewal date. Show the on-file columns plus the enriched ones described below, and give me filters for internal owner, current risk rating, renewal window, ownership mismatch, and vendors with no diligence run in the last twelve months. Put a small summary strip at the top with counts for renewing soon, ownership mismatches, and overdue diligence.

Enrich every row on load through Diffbot Knowledge Graph Enhance, keyed on the vendor's website domain plus the vendor name. Show the vendor's real legal entity, headquarters country, employee count, revenue band, parent company and funding history beside what we have on file, so the difference between the two is visible at a glance. Wherever the enriched parent company disagrees with the parent we recorded, put a loud flag on the row and on the detail view, and make that filterable, because a quiet ownership change is the thing that most often invalidates an old assessment. Enhance accepts partial data and can return multiple best-match candidates, with size up to 25, so when a domain matches several entities do not silently take the first one: show the candidates and let the vendor's owner pick the right legal entity, then save that choice onto the vendor record so future loads resolve to the same entity. Cache enrichment results per vendor so opening the register does not re-run every lookup from scratch on every visit.

Clicking a vendor opens its detail view: the on-file record, the enriched company panel with the ownership mismatch flag if there is one, and the full diligence history. Every past brief stays visible, newest first, each one dated and showing its recommended rating and whether that recommendation was accepted or declined. The point is that the register shows a diligence history rather than only the latest state, so someone can see how a vendor's risk picture moved over time.

Each vendor has a Run diligence button that kicks off a background agent for that vendor. The agent queries Diffbot Knowledge Graph DQL Search for recent news about that organization, covering acquisitions, funding, layoffs, breaches, outages and litigation. It pulls the full text of the relevant hits with Diffbot Extract Article rather than working from headlines. It reads the previous brief for the same vendor so it can say what actually changed. Then it writes a dated diligence brief summarizing what it found, what changed since the last run, and a recommended risk rating with its reasoning, with source links for every claim. It saves the brief back onto the vendor record through Airtable Update Record, appending to the diligence log field or creating a row in the linked briefs table, and it posts the brief to the vendor's internal owner in Slack: look the owner up by email, open a direct message, and send a short summary with the recommended rating and a link back to the vendor in the app. While the agent runs, show progress on the vendor row and the detail view, and drop the finished brief into the history when it lands.

One firm rule the app has to enforce: the agent recommends a risk rating but never writes the official rating itself. The recommendation lives inside the brief only. On the detail view a brief with a pending recommendation shows Accept and Decline, and only Accept writes the official risk rating field back through Airtable Update Record, stamped with who accepted it and when. Make a pending recommendation visually obvious in both the register and the detail view so it does not get lost. That official rating field is what gets shown to auditors, so a human has to be in the loop before it ever changes.