Drata has announced a preview version of its new AI Agent for Vendor Risk Management (VRM). This is an autonomous, context-aware assistant built to ‘transform how enterprises evaluate and manage vendor risk’. This preview is the first step in Drata’s broader vision: a shift from manual, fragmented GRC tools to autonomous Trust Management powered by AI agents. Trust Management serves as the foundation for governance, risk, compliance, and assurance (GRC-A), building continuous confidence in an organization’s security, compliance, and risk posture, and proving it across the business.
The VRM Agent is the first in a series of AI agents that will launch across the Drata platform, with dedicated Trust and Compliance Agents in development. Built for teams managing thousands of third parties, the VRM Agent automates vendor risk assessments that previously took weeks – cutting time, increasing consistency, and scaling trust across the supply chain.
The VRM Agent includes key capabilities such as:
- Automated criteria extraction and mapping: the Drata VRM Agent ingests vendor questionnaires or custom criteria (PDF, DOCX, XLSX), establishing a consistent, scalable baseline for risk assessments and removing manual setup.
- AI-powered document review and risk scoring: integrated with SafeBase Trust Center, the agent saves valuable time by collecting vendor artefacts and analysing them against defined criteria to flag risks, assign scores, and produce clear, structured reports with source-backed findings.
- Dynamic report generation and follow-up orchestration: generate executive summaries, issue follow-up questionnaires for gaps or concerns, and automatically re-assess vendors as new responses are submitted for real-time visibility.
“Vendor Risk Management requires significant oversight, making it one of the most resource-draining and error-prone areas of trust today. Our new AI agent delivers speed, precision, and continuous insight that wasn’t possible before,” said Adam Markowitz, cofounder and CEO of Drata. “This is a defining chapter for our vision, and with our Trust Management platform powered by agentic AI, enterprises can move faster, gain efficiency, and scale trust across every part of the business.”
