# Vendor Risk Assessment: Security Check Before You Sign

Source: https://maito.app/workflows/check-a-new-vendors-security

Maito reads a vendor's trust page and security documents against your requirements, shows the gaps and exceptions, and leaves approval to your team.

Get a first pass on a vendor's security docs before you sign.

[IT and admin](https://maito.app/workflows/team/it-and-admin) · When you ask · Updated October 19, 2026

Works with

-   Slack
-   Email
-   Box
-   Dropbox
-   Notion
-   Microsoft 365

## How do you check a new vendor's security?

To check a new vendor's security, give Maito the vendor's name, trust page and security documents plus your requirements. It reads the SOC 2 summary, DPA and policies, compares each requirement, and lists what matches, what is missing and any exceptions. Your team sees the gaps before signing.

## How it's done today

Vendor reviews pile up.

## What Maito does

1.  Read their security page and reports
2.  Check against your requirements
3.  List gaps

## Example

**Ben** (3:00 PM):

check Hooli Vault's security against our vendor requirements. Their SOC 2 summary is in the Vendors folder in Drive.

**Maito** (3:04 PM):

From their trust page, the SOC 2 summary (Type II, Jul 2025 to Jun 2026) and their DPA, against our requirements:

• **SOC 2 Type II:** yes.  
• **SSO:** Enterprise plan only. We'd be on Business, so no SSO.  
• **Data location:** EU, Frankfurt.  
• **Encryption:** AES-256 at rest, TLS 1.2 or higher.  
• **Breach notice:** no period in the DPA. We require 72 hours. This is the gap.

**Catch:** the SOC 2 summary lists 2 exceptions in user access reviews. The report says they were fixed in Q2.

You make the call. Want questions for their security contact on the 72 hours and the exceptions?

## How to set it up

When you ask Check a new vendor's security

Set up

Nothing to set up. Ask in Slack or by email whenever you need it.

Connect files

-   Google Drive
-   Box
-   Dropbox
-   Notion
-   Microsoft 365

Not connected yet? Your agent sends you a link to sign in.

## What it won't do

It only reads what the vendor has published or you provide, and can't verify the controls are actually in place. It's a first pass, not a full audit.

## Questions

### What does it read?

The vendor's public trust page and any documents you attach or store in your file tool, such as a SOC 2 report or DPA.

### Does it approve the vendor?

No. It gives a first pass with gaps and exceptions. Security or IT makes the decision.

### Can it check our plan tier?

Yes, if you tell it which plan you'd buy. It flags features like SSO that only come on higher plans.

## More it and admin workflows

-   [Answer IT questions in the help channel People get answers to everyday IT questions without a ticket. IT and admin · When you ask Works with Slack, Email.](https://maito.app/workflows/answer-it-questions-in-the-help-channel)
-   [Handle access requests Access requests get collected, approved by the right person and logged. IT and admin · When you ask Works with Jira Service Management, ServiceNow.](https://maito.app/workflows/handle-access-requests)
-   [Review who has access Every quarter, check who has access to key tools and flag what looks wrong. IT and admin · On a schedule Works with Slack, Email.](https://maito.app/workflows/review-who-has-access)
-   [Guide people through buying something Purchases follow the process without people learning it first. IT and admin · When you ask Works with Slack, Email.](https://maito.app/workflows/guide-people-through-buying-something)
-   [Track laptops and equipment Know who has which device and when warranties end. IT and admin · On a schedule Works with Airtable, Microsoft 365.](https://maito.app/workflows/track-laptops-and-equipment)
-   [Write IT how-to guides Turn solved IT tickets into short guides. IT and admin · When you ask Works with Jira Service Management, ServiceNow, Notion, Confluence.](https://maito.app/workflows/write-it-how-to-guides)

[See all workflows](https://maito.app/workflows)

## Put your AI teammate to work.

Set it up in minutes. Start with this one, and let it earn the next one.

[Put Maito to work](https://maito.app/login?returnTo=%2Fworkflows%2Fcheck-a-new-vendors-security)[Book a demo](mailto:support@maito.app?subject=Maito%20demo)