Drata Launches AI Agent for Vendor Risk Management
Drata today announced the first public look at its AI Agent for Vendor Risk Management (VRM), an autonomous, context-aware assistant built to transform how enterprises evaluate and manage vendor risk.
This preview is the first step in Drata’s broader vision: a shift from manual, fragmented GRC tools to autonomous Trust Management powered by AI agents. Trust Management serves as the foundation for governance, risk, compliance, and assurance (GRC-A), building continuous confidence in an organization’s security, compliance, and risk posture, and proving it across the business.
The VRM Agent is the first in a series of AI agents that will launch across the Drata platform, with dedicated Trust and Compliance Agents in development. Built for teams managing thousands of third parties, the VRM Agent automates vendor risk assessments that previously took weeks—cutting time, increasing consistency, and scaling trust across the supply chain.
The VRM Agent includes key capabilities such as:
- Automated Criteria Extraction and Mapping: The Drata VRM Agent ingests vendor questionnaires or custom criteria (PDF, DOCX, XLSX), establishing a consistent, scalable baseline for risk assessments and removing manual setup.
- AI-Powered Document Review and Risk Scoring: Integrated with SafeBase Trust Center, the agent saves valuable time by collecting vendor artifacts and analyzing them against defined criteria to flag risks, assign scores, and produce clear, structured reports with source-backed findings.
- Dynamic Report Generation and Follow-Up Orchestration: Generate executive summaries, issue follow-up questionnaires for gaps or concerns, and automatically reassess vendors as new responses are submitted for real-time visibility.
“Drata is pushing the boundaries of what GRC can be with Agentic Trust Management,” said Ali Firooz, Security Engineering Manager at Homebase. “Their AI vision goes beyond automation; it’s about enabling a future where trust is dynamic, intelligent, and woven into every decision. It’s changing how we think about assurance, and we’re excited to be on this journey with them.”
“Vendor Risk Management requires significant oversight, making it one of the most resource-draining and error-prone areas of trust today. Our new AI agent delivers speed, precision, and continuous insight that wasn’t possible before,” said Adam Markowitz, co-founder and CEO of Drata. “This is a defining chapter for our vision, and with our Trust Management platform powered by agentic AI, enterprises can move faster, gain efficiency, and scale trust across every part of the business.”