Skip to content

Sample report

See the report your auditor receives

Every completed assessment produces an audit-ready PDF. This one was generated by VendorVett itself, from a fictional company and vendor, so you can see exactly what you would hand to an auditor or a customer.

6 pages · no email required. Example Co. and Northwind Sample Supplies LLC are fictional.

What each section shows

  1. 1.Vendor and assessment

    Who the vendor is, how critical it is to you, which questionnaire and framework were used, and when it was sent, submitted, scored and signed off, by whom.

  2. 2.Risk scores with their working

    Inherent and residual risk on a 0 to 100 scale, with the formula and the weights behind them. The engine is deterministic: the same answers always give the same score.

  3. 3.Control coverage

    Each SOC 2 control the questionnaire maps to, marked attested or not, with the questions that support it. A control counts only when every mapped answer passed.

  4. 4.Response detail

    Every question, the outcome of the vendor's answer and exactly what it added to residual risk, so an auditor can recompute the score by hand.

  5. 5.Evidence on file

    The documents the vendor supplied, with a SHA-256 digest for each, so anyone holding a file can confirm it is the one that was assessed.

  6. 6.Audit trail

    Who did what and when, taken from the tamper-evident, hash-chained log, with sequence numbers that locate each line in the full trail.

What the report does not claim

Answers are the vendor's own attestations. The report records and scores them, and says so on the page, rather than presenting them as independently tested. AI never produces a score; a written summary appears only after a named reviewer accepts it.

The PDF report is included from Starter. Start free and upgrade when you need it.

Prefer to talk it through first? Book a call with us (opens in a new tab).