Processes/compliance — filings, taxes, and staying compliantcompliance

Vendor security review — compliance processVendor security review

moderatepartially automatable🔁 when it happens⏳ has async waits

Create a vendor security assessment workflow for SOC 2 compliance — questionnaires, risk scoring, and approval.

Vanta API supports vendor tracking. Security questionnaire review requires human judgment.

Current agent ceiling

An agent can run 3 of 5 steps — 2 of them behind a human approval gate ⏸

⚡ Closable with today’s market (1 — via Workflow Automation): Vendors respond (a workflow with webhooks/polling watches this so no human has to)

No workaround yet (1): Score and assess responses (needs a human)

How it runs

Route-coded block flow: emerald = agent, amber = manual form/portal, red = needs a human. ⏸ approval gate · ⏳ async wait.

01Create vendor assessment template

agent

Notion59⏸ approval gate

1 API call

02Send security questionnaires

agent

Gmail⏸ approval gate

1 API call

03Vendors respond

human

⏳ async

⚡ agentic workaround: a workflow with webhooks/polling watches this so no human has to — n8n, top of Workflow Automation →

04Score and assess responses

human

⏸ approval gatehigh risk

05Log in Vanta

agent

Vanta

1 API call

Context the agent needs first: vendor list to review (from the founder) · security requirements (from the founder)

Each role resolves against its arena’s live leaderboard — the default is the process’s canonical vendor, alternatives ranked by agent-readiness.

simulated dry run from the mapped process — no real calls are made

Project Management