Now in private beta

Vendor assessments
on autopilot
100% free.

What if an AI agent handled third-party risk for you? What if it was thorough and accurate? What if it was free?

If that sounds good, you'll like what we're building.

It's free, but we only let in folks who actually work in third-party risk. We'll verify before granting access. Existing users click here to log-in.

How it works

Four steps. No questionnaire required.

01

Detect

The agent watches the Gmail inbox you connect for new vendor requests. No manual kickoff.

02

Gather

It pulls in vendor documentation, business context, and fresh web research on its own.

03

Assess

In minutes, it produces a security assessment tailored to your requirements, with evidence-based risks flagged.

04

Decide

You review the completed draft and spend your time on judgment calls, not data entry.

See it in action

Here's what to expect.

Upload a company's SOC 2 and receive a professional-quality assessment.

Click to preview a report
Google Workspace

How the TPRM Agent uses Google data.

Vendor security documents land in your inbox. Connect Gmail and the agent picks them up there instead of asking you to re-upload everything. It's optional.

Gmail gmail.modify
We read the mailbox you connect to find vendor security questionnaires, trust center access notifications, and security documentation like SOC 2 reports. When you tell the agent to respond to a vendor, we send that reply from your mailbox.

That is the only Google permission we request. We don't ask for your Google Drive, your calendar, or your contacts.

We don't use Google user data for advertising. We don't train AI models on it. We don't sell it. Conveyor's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Disconnect any time inside Conveyor or from your Google Account permissions. We delete Google user data within 30 days of a disconnect or deletion request. Full detail is in the Conveyor TPRM Privacy Policy & Google Services Disclosure.

The problem

Activate Agent Mode for TPRM.

TPRM is stuck in the past. Manual questionnaires. Weeks of waiting. Reviews that are, let's be honest, more than a little theater. AI should handle the busywork so your team can focus on actual risk.

What we're building

Agent-ify the entire workflow.

TPRM should be agent-powered, end to end. Every vendor review starts with a completed assessment, so your team spends time on judgment, not data gathering.

The business model

Why is anyone paying for TPRM software?

It's free. Not just for the beta. Free, period.

Quality vendor assessments shouldn't require a five-figure contract or a bloated platform you'll only half-use. We're picky about who we let in, but the agent itself is free and capable. Start using it. Cancel another contract while you're at it.

FAQ

Common questions.

Is it really free? +
Yes. Conveyor is a Series B company with a thriving core business and a roster of well-known enterprise customers. The TPRM agent is free. We may show you our paid products down the road, but the agent stays free.
What are the requirements to apply for access? +
We're prioritizing folks in a TPRM or adjacent role at US-based companies. We'll throttle access in waves as we gather feedback and make updates.
How is this different from a Claude Skill or a Custom GPT? +
General-purpose AI pulls from everywhere. Sounds powerful, until you realize you can't trust what it tells you. Fast, but unreliable. Our agent runs on Conveyor's trust RAG engine, purpose-built for security and compliance content. It's accurate, evidence-grounded, and the kind of analysis you'd put your name on.
How do you protect user and vendor data? +
When you use the TPRM Agent, you get the rights and protections in Conveyor's Terms of Service, including our Privacy Statement and Data Processing Addendum. If you connect Gmail, our Conveyor TPRM Privacy Policy & Google Services Disclosure explains exactly how we handle Google user data.
Who made this? +
The team at Conveyor. We've spent years building AI for security and customer trust teams. This is what we do.