VendorProof

VendorProof is a web app (with optional Slack/Teams add-ons) that automates third-party risk and compliance evidence collection. Instead of chasing vendors for SOC 2, ISO 27001, pen test summaries, DPAs, and security questionnaires, it sends structured requests, tracks status, and stores evidence with expiry dates and audit trails. It includes a lightweight portal for vendors to upload documents, answer standardized questions, and reuse prior responses. An AI layer can map vendor-provided artifacts to your internal control requirements, flag gaps (e.g., missing subprocessor list, outdated SOC report), and draft follow-up questions—while keeping humans in the approval loop. The product focuses on mid-market companies that can’t afford a full GRC suite but still face customer security reviews and procurement scrutiny. Expect tough sales cycles, but strong retention once embedded in procurement and security workflows.