Data Vendor and Third-Party Sharing Review Agent

Vendors receive customer data through integrations nobody has reviewed in two years. This agent lists vendors that receive data and checks contracts, security attestations and the data types shared. It flags missing agreements, such as a data processing agreement, and drafts review requests to each vendor. When vendors reply, it rechecks the answers against the requirements. It ranks vendors by how sensitive the shared data is, so the most important reviews come first, and it keeps a record of every question and answer for audits. When a vendor does not answer, the agent reminds once and then escalates to you. Edge case: a vendor now shares data with a subprocessor, so the agent flags the new risk. The officer approves any change to sharing.