Back to walkthroughs/Third-Party Risk Review
The point

A vendor review built from retrievals can say 'this vendor got worse' with dates — not vibes.

The job

The situation this agent is built for, and the contract it arrives with.

The job it walks into

tprm.vendor_review

Renewal is 30 days out. The vendor's rating slid 31 points, their SOC 2 lapsed in May, and procurement wants a recommendation this week.

Why it matters

The reassessment is a join across four systems nobody enjoys doing quarterly. The agent does the join; the renew/replace call stays with the owner.

The contract

Domain

Risk

Proposal rights

none

Stated limit

Runs as the calling user — it can never read data you couldn't read yourself.

Third-Party Risk Review | GeneSecure