Vesta

Every vendor reviewed. Every decision on record.

Third-party risk and security questionnaires, in one place.

Watch the demo
Demo video, 48 seconds, no sound. It shows:
  • the vendor list
  • a vendor page
  • Legal and Security reviewing side by side
  • the workflow editor, with the high-risk decision
  • an approval waiting for the right team
  • the vendor portal

Review vendors

Your process, as a workflow

Parallel steps, decisions and approvals. Each team hears when it's their turn, in Vesta and on Slack.

The New vendor review workflow. Procurement confirms the business need. Then Legal reviews the DPA and Security reviews the SOC 2 Type II and pentest at the same time; Legal has a Your turn notice. Then Analyst reviews the answers. If the inherent risk is high, CISO approves; otherwise it ends. yes otherwise Start Procurement confirms the business need Legal reviews the DPA Your turn Security reviews the SOC 2 Type II and pentest Analyst reviews the answers ? High inherent risk? CISO approves End The New vendor review workflow. Procurement confirms the business need. Then Legal reviews the DPA and Security reviews the SOC 2 Type II and pentest at the same time; Legal has a Your turn notice. Then Analyst reviews the answers. If the inherent risk is high, CISO approves; otherwise it ends. yes otherwise Start Procurement confirms the business need Legal reviews the DPA Your turn Security reviews the SOC 2 Type II and pentest Analyst reviews the answers ? High inherent risk? CISO approves End
The vendor's view of the link: a security question answered, with an Attach Evidence button for documents.

Vendors answer through a link

No account. Answers and documents land in the review.

AI drafts. People decide.

A summary, the gaps and a suggested decision, checked against your rules.

Approval Required: a member of the Management role must approve before advancing. An Approve button waits.
Approval Required: a member of the Management role must approve before advancing. An Approve button waits.

Answer customers

Questionnaires, pre-filled

Drafted from your saved answers and Notion. Good answers are kept for next time.

Trust

  • Your AI key: OpenAI or Anthropic
  • Every AI call logged
  • AI quotes checked against the document
  • Okta sign-in
  • Audit log

Integrations

  • Okta
  • Slack
  • Zip
  • Notion
  • Linear
  • MCP
  • API keys
  • Webhooks