Step 1: Frame the engagement
Confirm service, owner, data access, criticality, and deadline.
Back to Agent Library
<>Procurement
Vendor assessment
A review-ready vendor assessment with unresolved risks visible
Overview
Unify service scope, data access, evidence, prior review history, and contractual terms. The agent maps what is available to the review requirements and sends only unresolved risk to the right owner.
Prepared result
Aster Cloud · vendor risk dossier
Core evidence is current; subprocessor terms and recovery testing require review.
- Security evidenceReady
Current through Q4
- SubprocessorsReview
Contract comparison open
- Recovery testWaiting
Owner response requested
Prepared using fictional business records.
What it can handle
Frame the engagement
Capture service scope, owner, data access, criticality, and review deadline.
Map evidence to requirements
Compare current evidence with security, privacy, legal, and procurement needs.
Build the decision record
Keep gaps, conditions, owners, approvals, and remaining obligations together.
How it works
The path from request to result adapts to the available information, approved actions, and decisions that need review.
Step 2: Collect current evidence
Gather approved questionnaires, attestations, architecture, and terms.
Step 3: Map requirements
Compare available evidence with the applicable review requirements.
Step 4: Coordinate gaps
Route missing evidence, risk, and proposed exceptions to owners.
Step 5: Return the dossier
Package findings, decisions, conditions, approvals, and obligations.
