Getting started

1. Set up the programme

In Settings, name the owner and SLA of each review lane (security, privacy, legal, finance, IT, business owner), the reassessment cadence for each tier, and the insurance minimums. Add routing rules — when a field matches, add lane, set tier, require document or skip lane — or start with the workflow templates.

2. Bring in what you have

Add vendors and contracts in the console or through the API, then upload the documents you already hold: SOC reports, ISO certificates, pen tests, insurance certificates, DPAs and MSAs. The Document agent reads each one; the Risk agent scores every vendor; the contracts fill the renewal calendar.

3. Make a request

# the console, or the API
curl -s -H "Authorization: Bearer $TOKEN" -H 'content-type: application/json' \
  -d '{"text": "We want Gong for sales call recording, about 40 seats, roughly $60k a year"}' \
  https://app.insightvendors.com/api/requests/intake      # a preview: nothing saved
# → vendor, category, data types, spend, duplicates, questions it could not answer

4. Review and decide

Reviewers see their lane on the request: the findings with pages, the score with reasons, the contract deviations and the routing reasons. Approve, approve with conditions, reject or send back. Release the assessment invitation from the Outbox; the vendor answers in the portal.

5. Set the dial

In Agents, start most agents at L2 (ask first). Raise one when its acceptance rate shows it is right.