VendorVault

VendorVault is a web app (with optional Slack/Teams integration) that centralizes third‑party risk management for mid-market companies that can’t afford a full GRC suite. It ingests vendor security artifacts (SOC 2, ISO 27001 certs, pen test letters, DPAs, SIG/CAIQ responses), extracts key controls and dates, and maps them to your internal requirements. The app tracks renewals, flags missing evidence, and generates a clean audit-ready vendor risk packet per supplier. It also supports lightweight questionnaires with conditional logic and a vendor portal to upload documents without email chaos. This is a combination traditional + AI app: traditional workflows for approvals and tracking, AI for document parsing, control mapping, and summarization. The focus is pragmatic: reduce time spent chasing vendors and compiling evidence, not “solve compliance” magically.