VendorProof

VendorProof is a web app (with optional browser extension) that streamlines third‑party risk and compliance evidence collection for SOC 2, ISO 27001, and customer security questionnaires. Instead of chasing vendors by email and dumping PDFs into shared drives, you send a structured evidence request that maps to specific controls, required artifacts, and expiry dates. Vendors upload documents, link trust portals, or share attestations; you get automated reminders, versioning, and an audit-ready evidence trail. The app generates a “vendor evidence pack” per supplier with control mappings, review notes, and renewal timelines. It’s a combination traditional + AI app: AI helps classify documents, extract key fields (dates, scope, exceptions), and flag missing/contradictory evidence, but humans approve everything. This is not a full GRC suite—it's a focused tool that reduces the most painful, repetitive part of vendor compliance.