SOC 2 reports
Extract control coverage, exceptions, carve-outs, complementary controls, scope, and period context.
SAAS VENDOR SECURITY REVIEWS
Read the evidence before approving the vendor.
Turn SOC 2 reports, penetration-test summaries, security questionnaires, and trust-center exports into documented controls, material gaps, follow-up questions, and a shareable decision.
SIMPLIFIED FICTIONAL VENDOR REPORT
See what the evidence supports and what remains open.
This abbreviated example shows the vendor decision structure and omits parts of the complete interactive report.
Simplified fictional vendor report
Acme Platform
SOC 2 + penetration test evidence · Completed today
RecommendationConditionally approve2 CONDITIONS
Requirements reviewed24Across submitted evidence
Meets requirement18Evidence supports control
Evidence gaps4Partially met or unsupported
Pending vendor response2Unanswered questions
Requirement coverage24 reviewed
Meets18
Partial3
Not met1
Pending2
Priority follow-upBefore final approval
Privileged access enforcementPARTIALLY MEETS
SOC 2 evidence covers workforce MFA, but administrative support access needs confirmation.
Incident notification timingPENDING VENDOR RESPONSE
Ask the vendor to commit to a customer-notification window.
01 / ACCEPTED EVIDENCEBring the documents
Bring the documents
the vendor actually provides.
Multiple documents can be included in one vendor review. The review is counted per vendor, not per document.
Penetration-test evidence
Identify material findings, remediation status, testing scope, limitations, and unanswered questions.
Questionnaires and trust exports
Compare vendor claims with available documentation and identify statements that still need support.
02 / EXACT WORKFLOW
From a document bundle to a defensible decision.
The result is not a compliance certification. It is a structured review of what the submitted evidence supports and what it leaves open.
Upload vendor evidence
Add the SOC 2, penetration-test summary, questionnaire, trust export, or other authorized documents.
Map controls and gaps
Identify covered controls, exceptions, missing information, risk signals, and conflicting claims.
Structure follow-up
Turn thin or missing evidence into explicit questions instead of unsupported positive assumptions.
Document the decision
Share the report, apply business context, and record the final approval, limitation, or rejection.
03 / REPORT OUTPUT
Evidence that can survive the next question.
The report gives an auditor, client, manager, or procurement stakeholder the same control coverage, missing evidence, risk context, and final-decision basis your reviewer saw.
Vendor reviews support custom risk requirements and deal-breakers. Where evidence is thin, the report says so. CIRT does not turn missing vendor proof into a passing control.
VENDOR DECISION REPORTDOCUMENTED
- Control coverageEvidence mapped
- Material gapsPrioritized
- Missing informationExplicit
- Follow-up areasSpecific
- Executive summaryWeb + HTML + PDF
04 / COMMON OBJECTIONSKeep control of
Keep control of
sensitive vendor evidence.
Vendor documents can remain with the assessment for continuity. Customers decide whether to retain them.
Retained by default, not forever
Vendor documents remain with the assessment by default. Retention can be disabled, and the assessment plus retained documents can be deleted at any time.
No AI model training on all-inclusive data
All-inclusive submissions are not used for AI model training. BYOK processing follows the customer's Anthropic account settings and contract.
Missing proof becomes a gap
The review identifies incomplete evidence and follow-up questions rather than pretending the easy half of the vendor review is the whole decision.
05 / RELEVANT PRICING
Two vendor reviews from $50/month.
Starter includes 2 vendor reviews per month. Multiple documents can be included in each review. Early-access BYOK vendor assessments have usually cost less than repository reviews in Anthropic usage, depending on document count.
DOCUMENT-REVIEW ECONOMICSIf a manual vendor review takes four staff-hours, $99 Starter breaks even at $24.75/hour.
Compare every plan The labor comparison is illustrative. Actual provider spend, review time, and organizational savings vary.
Turn the next document bundle into a decision.
Upload the evidence, identify material gaps, and keep the final approval with your team.