UnitedHealth Group uses the eGRC (Enterprise Governance, Risk & Compliance) External Vendor Portal to provide select vendors a single entry point to respond to our risk questionnaire(s)/compliance attestations and subsequently document any required remediation. This portal is only for current suppliers of UnitedHealth Group.
Vendors in our eGRC system and in scope for our risk review programs will be invited to register for the One Healthcare ID to establish security credentials for accessing the External Vendor Portal and will receive automated notices from the External Vendor Portal when action is required. To provide guidance and facilitate EVP navigation, please refer to the Getting Started with the External Vendor Portal (EVP) - Vendor Guide.
Delegated entities that are not in our eGRC system will receive the notice and attestation through other means.