The CMS Compliance Portal

One environment for the work behind compliance.

A configurable workspace for compliance teams, their clients and their vendor networks. Organize information, coordinate reviews and maintain a record of what happened.

Core platform capabilities

Document & policy management

Keep current policies, procedures, contracts and evidence together with version history, notes and controlled access.

Vendor and downstream oversight

Collect due diligence, manage relationships, standardize annual reviews and assess risk across providers and subcontractors.

Risk & supervisory assessments

Use configurable assessment processes, findings, reviews, heatmaps and remediation tracking.

Requests, complaints & disputes

Capture questions, issues and incidents; assign owners and route responses, supporting files and approvals.

Approvals & corrective action

Use manager and client review workflows, track open conditions, escalate outstanding tasks and preserve decisions.

Licenses, bonds & insurance

Record required items, expiration dates and reminders, with a history of activity.

Dashboards and reporting

See outstanding items, status, risk and activity through configurable reports and management views.

Controlled collaboration

Share records and requests across internal groups, clients, agencies and law firms with appropriate permissions.

Audit support

Preserve review histories, changes, follow-up and remediation evidence in an auditable workflow.

How it works

Structure the process instead of chasing updates.

CMS is designed around reusable records, defined tasks and documented decisions, rather than one-off emails and disconnected files. Workflows can be configured to match different review and approval requirements.

1

Define
Set the information required and who should review it.

2

Collect
Gather data and documents in a controlled location.

3

Review
Assign approvals, exceptions and remediation.

4

Report
Document decisions and surface outstanding work.

Third- and fourth-party oversight

See the relationships behind your vendor network.

CMS provides a network view of the organizations involved in a compliance program, including vendors and downstream providers. Review the relationships among institutions, servicers, agencies, law firms and other participants without treating each company as an isolated record.

Connected oversight records and controlled access support work across organizational boundaries while preserving appropriate visibility restrictions.

Explore vendor network oversight →
CMS Compliance Portal network view showing an illustrative hierarchy of an oversight organization, financial institutions, servicers, collection agencies, law firms and downstream providers
Actual CMS network-view interface. Participant names were replaced with illustrative labels to avoid disclosing company relationships.

License tracking & geographic visibility

See license status across jurisdictions.

Review collection-license coverage on a color-coded map. Distinguish current licenses, pending renewals, warnings, exemptions and other tracked statuses without searching through individual records.

CMS also organizes supporting license, bond and insurance information, including expirations and follow-up.

See the license tracker in a demo →
CMS license tracking map showing state-by-state color-coded collection license statuses, license categories and a status legend
CMS Compliance Portal licensing map. Company information removed; status colors illustrate the portal’s available categories, not a regulatory determination.

Risk assessments & heatmaps

Turn assessment results into a clear picture of residual risk.

CMS can score individual assessment items and roll results up by topic, helping reviewers distinguish higher-risk findings from areas where controls appear more effective.

Color-coded scores make exceptions easier to find and provide a practical starting point for assigning follow-up, reviewing controls and documenting remediation.

The example shown is a cybersecurity assessment report. Its scores reflect that example only, not a CMS certification, endorsement, or a statement about a particular customer.

See risk assessment capabilities →
Example CMS assessment report showing a residual risk scale from low to very high, five cybersecurity categories with composite scores, and color-coded detailed assessment findings
Example residual risk assessment showing scoring bands, category scores and item-level heatmap results. Displayed scores are illustrative of the supplied example.

See CMS in the context of your work.

A focused demonstration can start with an existing vendor review, assessment or issue.

Talk with CMS