Vendict

Vendict is a Tel Aviv-area (Ramat Gan) startup founded in 2020 that uses generative AI to automate two related, historically manual GRC workflows: responding to inbound security questionnaires from prospects and customers, and managing third-party/vendor risk assessments on the buy side. The company emerged from stealth in 2023 with $9.5 million in seed funding and has since raised a total of roughly $31.5 million, including a $10 million Series A in August 2025.

On the sell side, Vendict’s platform ingests a vendor’s own security documentation (SOC 2 reports, policies, prior questionnaire answers) and uses that knowledge base to auto-draft responses to incoming security questionnaires, cutting a process that traditionally takes days or weeks of manual cross-referencing down to hours. On the buy side, its newer Managed Third-Party Risk Management offering uses AI agents to chase vendors for outstanding documentation, extract relevant security and privacy details from what’s submitted, check those details against the buyer’s own control requirements, and surface risk findings for the reviewing team.

The company’s relevance sits squarely in the GRC/vendor-risk space, where security questionnaire fatigue is a well-known, widely complained-about pain point on both sides of enterprise sales cycles. Vendict is available on AWS Marketplace, which suggests some enterprise procurement traction, though independent, named case studies quantifying time or cost savings were not found in current public reporting; the specific efficiency claims come from the company itself.