Abstract: Described techniques relate to improved methods, systems, devices, and apparatuses that support predictive assessments of vendor risk. The described techniques provide for machine learning and modeling to produce predictive risk profiles for vendors (e.g., even without security profile data provided by the vendor). Various described techniques may also produce unique insights across an entire portfolio of third parties using instant, predictive risk assessment results. Predictive risk profiles predict how a given vendor will answer each question in a standardized assessment based on one or more parameters (e.g., firmographics), both outside-in data and inside-out data, and similar completed assessments stored on an exchange associated with the system.