What are Domain Review Agents?
Going through every control in an assessment - checking the control description, the supplier's answer, and their notes - takes time and concentration. You need to work out whether a supplier is actually compliant, and whether they've given you enough evidence to back up their claims.
Domain Review Agents give you an AI-generated first pass at this. They summarise each domain in an assessment, highlighting which control answers need your attention and what to do about them:
Available from All Domains and from within each individual domain
Scrutiny is calibrated to the supplier's risk profile (criticality, PII, data classification), so higher-risk suppliers get a stricter analysis
Surfaces a Findings (AI) tab on each control, pre-filled with evidence and recommended actions
Advisory only - you stay fully in control of every decision
Please note: Domain Review Agents are advisory only. They're designed to point you towards what to check next, not to make compliance decisions for you.
How do I use Domain Review Agents?
Go to the Assessment (1) tab on a supplier's profile, then All questions (2), or open the domain you want to review within an assessment.
Click Start (3) to begin the AI review. This runs across all controls and all domains, and takes about 15-20 seconds:
Once it's finished, click View:
This adds a Has AI findings filter to the main page (1), and you'll see a new AI Findings icon on any control with a finding (2). You can also add or remove this filter manually at any time. Hovering over the AI Findings icon will produce a floating information box for quick access to the findings/recommendations:
TIP: There is also a new filter called "AI recommended action is" which you can use to see just controls that the AI recommends a Risk/Remediation/Discussion on.
Additionally, we provide a summary of the security posture of each domain once the AI has run:
Click into the AI Findings icon to open the full control window (1), then select the new Findings (AI) tab (2). Review the pre-filled Evidence section (3), which explains the reasoning behind the finding. Then review the Recommended action, such as starting a discussion, requesting a remediation, or opening a new risk (4):
How do we ensure this feature is safe and reliable?
Domain Review Agents are designed with security, transparency, and reliability in mind.
Analysis is calibrated to each supplier's risk profile, so the level of scrutiny matches the level of risk. Findings are advisory only - they help guide your attention to what's worth reviewing, but every decision, discussion, remediation, and risk remains yours to make.
đĄ If there is anything we haven't covered, please feel free to contact us at support@riskledger.com or alternatively, select the Chat icon in the bottom right corner.