I've spent numerous years in IT audit and kept running into the same wall: security and compliance teams were burning 4+ hours manually reading SOC 2 PDFs for every vendor review, cross-referencing controls, building spreadsheets, chasing exceptions. It's repetitive, error-prone, and completely automatable. So I built VouchVendor, where you simply upload a SOC 2 report and get AI-extracted controls, framework mappings (SOC 2, ISO 27001, NIST, SOX), and a risk score in under 2 minutes. I'm launching today and would love feedback from anyone who's dealt with third-party risk or compliance workflows. Happy to connect!
