-
Notifications
You must be signed in to change notification settings - Fork 1
Home
Vendor onboarding in security GRC is a slow, manual process. Reviewing regulatory compliance, security controls, and risk documentation across multiple teams can take weeks, and the quality of that review depends heavily on individual expertise and bandwidth. As vendor ecosystems grow and regulatory requirements multiply, this doesn't scale.
This project explores replacing that process with an AI-augmented workflow: structured document analysis, retrieval-grounded risk evaluation, and human approval gates at each stage. Faster reviews without sacrificing defensibility or auditability.
Problem Definition Requirements, constraints, scope, success criteria, and solution ideation.
Project Plan 7-day build plan for a functional proof-of-concept covering all four onboarding stages with a React frontend, Python/FastAPI backend, and RAG-powered AI analysis.
Technical Specification Repo Structure, Data Models, Workflow State Machine, API Endpoints, WorkflowService, AI Analysis Modules, LLM Client, RAG Layer, Knowledge Base, Configuration, Docker Compose, Testing, Mock Data, Quickstart