Vendict

Vendict is a web-based AI-native platform for security teams and GRC professionals that automates security questionnaire responses, third-party risk management (TPRM), and compliance workflows.

Key capabilities include:

• Security questionnaire and RFP/RFI automation that generates personalized answers from existing compliance evidence (SOC 2 reports, policies, past questionnaires, audit documents) and supports spreadsheets and web-based forms, with response times reduced by up to 92%.
• Secure knowledge base built from uploaded compliance documentation to power referenced responses, plus flagging for review when answers are unclear.
• Interactive Trust Center with real-time AI-powered search for instant, document-backed security answers and sharing of verified security documents and certifications.
• Self-assessment and framework mapping to evaluate compliance posture and gaps across frameworks including SOC 2, ISO 27001, and HIPAA.

Pricing: Unknown (a 90-day free trial is advertised for the Trust Center).

What makes it notable: It focuses on trackable, explainable, auditable outputs and uses generative AI trained on a company’s existing compliance data, with customer data not used for training. Vendict is also available on AWS Marketplace (Vendict GenAI for Security Questionnaire Automation) and has raised a $10M Series A.