Trustero Automates Vendor Risk Assessment with AI Integration

The Palo Alto-based company aims to consolidate fragmented workflows by integrating vendor oversight directly into its existing governance, risk, and compliance engine. By applying the same AI architecture used for internal evidence collection, the system automatically sorts partners into risk tiers. Low-risk entities undergo minimal vetting, while high-risk vendors are automatically prompted for specific documentation like ISO 27001 certifications or insurance proofs.

VP of Engineering David Marsyla notes that the goal is to shift team focus toward final approval decisions rather than manual analysis. The platform orchestrates the assessment lifecycle, tracking documentation requests and triggering escalations for legal or financial sign-offs when necessary. Cybersecurity leader Chris Oshaben suggests the utility lies in its ability to sit at existing bottlenecks, allowing security teams to retain human oversight while accelerating the review cycle. By keeping this data within a unified platform, Trustero hopes to eliminate the blind spots created when vendor data is siloed across disconnected point tools.