aid: aravo
name: Aravo
description: 'Aravo Solutions is a San Francisco based enterprise software company providing
  third-party risk management (TPRM), supplier and procurement risk management, and governance,
  risk and compliance software. Its Intelligence First platform covers vendor nomination and
  intake, onboarding, due diligence, continuous monitoring, contracts, performance management,
  issue remediation and offboarding, with risk-domain applications for anti-bribery and
  corruption, data privacy and GDPR, information security, ESG, DORA and the German Supply
  Chain Due Diligence Act (LkSG). Aravo markets an integration framework that exchanges data
  with ERP, procure-to-pay, accounts payable and GRC systems, and with risk-intelligence
  providers including Refinitiv World-Check One, LexisNexis, Dow Jones, BitSight,
  SecurityScorecard, RapidRatings and Dun & Bradstreet, over SOAP and REST web-services APIs in
  XML and JSON. That API surface is described only on marketing pages; the reference
  documentation sits behind the login-gated Aravo customer portal.'
image: https://aravo.com/wp-content/themes/aravo/img/logo-desktop-v2.svg
url: https://raw.githubusercontent.com/api-evangelist/aravo/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.23'
created: '2026-08-06'
modified: '2026-08-06'
tags:
- Company
- Third-Party Risk Management
- Supplier Risk Management
- Governance Risk and Compliance
- Vendor Management
- Continuous Monitoring
- Compliance
- Enterprise Software
apis: []
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
x-disambiguation:
  note: 'Aravo Solutions (aravo.com, third-party risk management) is a DIFFERENT company from
    aravo.app, a time-tracking product that publishes the `aravo-agent` npm CLI and an MCP
    server at https://aravo.app/api/mcp. Do not wire aravo.app packages, MCP or agent
    artifacts into this repo.'
  checked: '2026-08-06'
common:
- type: DomainSecurity
  url: security/aravo-domain-security.yml
- type: Website
  url: https://aravo.com/
- type: CustomerPortal
  url: https://aravo.my.site.com/
- type: Support
  url: https://aravo.com/contact-us/
- type: Blog
  url: https://aravo.com/blog/
- type: BlogRSS
  url: https://aravo.com/feed/
- type: PrivacyPolicy
  url: https://aravo.com/lp/aravo-solutions-privacy-policy/
- type: Press
  url: https://aravo.com/press-releases/
- type: Partners
  url: https://aravo.com/partner-integrations/
- type: LinkedIn
  url: https://www.linkedin.com/company/aravo-solutions/
- type: Twitter
  url: https://twitter.com/aravo
- type: YouTube
  url: https://www.youtube.com/channel/UCwMoKa7-Zznupeinre7h4qw
- type: WellKnown
  url: well-known/aravo-well-known.yml
- type: Conformance
  url: conformance/aravo-conformance.yml
- type: LLMsTxt
  url: llms/aravo-llms.txt
x-enrichment:
  date: '2026-08-06'
  status: minimal
  artifacts_added: 5
  pass: local-v1
x-coverage:
  state: gated
  reason: customer-only-docs
  detail: 'Aravo publishes no developer host (developer/docs/api.aravo.com all NXDOMAIN) and its
    only API documentation sits inside the Aravo Customer Portal, a Salesforce Experience Cloud
    site whose every path 301s then JS-redirects to https://aravo.my.site.com/login?ec=302, so
    the SOAP/REST integration framework it markets is describable only from marketing prose.'
  evidence:
  - url: https://aravo.my.site.com/s/
    status: 301
  - url: https://aravo.my.site.com/.well-known/openid-configuration
    status: 200
  - url: https://aravo.com/.well-known/agent-card.json
    status: 404
  - url: https://aravo.com/openapi.json
    status: 404
  - url: https://aravo.com/llms.txt
    status: 404
  checked: '2026-08-06'