VendorVault

VendorVault is a web app (with optional browser extension) that centralizes third‑party privacy and data protection compliance for small and mid-sized companies that can’t afford a full GRC suite. It tracks what data each vendor touches, where it flows, and what contractual/privacy artifacts exist (DPA, SCCs, subprocessor lists, SOC2/ISO reports, breach SLAs). The app provides a realistic “audit-ready” workspace: a vendor intake questionnaire, evidence requests, renewal reminders, and a simple risk score that’s explainable to legal and security. An AI assistant can draft vendor emails, summarize long PDFs (SOC2, DPAs), and flag missing clauses, but the product is designed so humans can override everything. The goal isn’t perfection—it’s reducing chaos, shortening audit prep, and preventing obvious vendor-related privacy failures.