GATEKEEPER AI AGENTS
AI Due Diligence Review Agent.
Assess AI vendors consistently across governance, security, fairness and regulatory requirements.
The AI Due Diligence Review Agent checks vendor questionnaire responses against your configured criteria, scores compliance and flags gaps, giving your team a clear view of each vendor’s AI practices.
ESG Review Agent in action.
See how the ESG Review Agent assesses vendor submissions against your sustainability criteria, scores performance and identifies gaps requiring attention.
HOW IT WORKS
How the AI Due Diligence Review Agent works.
Vendor completes due diligence.
The vendor submits their AI due diligence questionnaire through the Gatekeeper Vendor Portal.
AI practices reviewed.
The Agent reviews responses across AI governance, data security, bias and fairness, explainability, regulatory compliance and transparency.
Compliance scored.
Each area is assessed against your configured requirements and compliance thresholds.
Gaps identified.
Missing or insufficient responses and areas that fall below your requirements are flagged for attention.
Review documented.
Questionnaire responses, compliance scores and recommendations are recorded in Gatekeeper, creating a clear audit trail for each AI vendor review.
Decisions informed.
Clear compliance findings and flagged risks give your team the evidence needed to determine next steps.
FAQS
Frequently asked questions.
What does the AI Due Diligence Review Agent review?
The Agent assesses vendor responses across six areas:
- AI model governance: Model inventories, deployment controls, update approvals and rollback capabilities.
- Data security: How data is protected and encrypted during AI training and inference.
- Bias and fairness: Processes for identifying, mitigating and remediating algorithmic bias.
- Explainability: How vendors explain AI model decisions.
- Regulatory compliance: Alignment with specified AI regulations, sector requirements and data protection rules.
- Transparency: Disclosure of AI use, explanations of AI-driven decisions and opt-out options.
What are the configuration options?
Configure the Agent around your AI governance and compliance requirements, including:
- Compliance score thresholds.
- Bias and fairness criteria.
- Explainability requirements.
- Regulatory frameworks.
- Transparency requirements.
The Agent then applies these criteria consistently across vendor assessments.
When does the Agent review AI vendors?
The Agent can assess vendors when they submit an AI due diligence questionnaire and during periodic re-evaluation cycles.
This supports both initial due diligence and ongoing oversight as vendor AI practices and requirements change.
Does the Agent make compliance decisions automatically?
No. The Agent assesses vendor responses against your defined criteria, but your team retains oversight and control of compliance decisions.
- Compliance gaps and risk areas are flagged for review.
- Scores and recommendations are supported by documented evidence.
- Your team reviews the findings and determines any remediation required.
- Final vendor decisions remain with your organisation.
How does Agent automation compare with a manual process?
Without Agent automation, teams manually review AI vendor questionnaires against governance, security and compliance requirements.
- Reviews take hours of manual assessment.
- Assessment quality depends on reviewer expertise.
- Requirements can be applied inconsistently.
With Agent automation, questionnaires are evaluated automatically against your defined criteria.
- Compliance is scored across assessment areas.
- Gaps are identified for attention.
- Every assessment follows the same criteria and is documented.
Is there an audit trail?
Every Agent action is recorded in Gatekeeper with a timestamp, including the criteria applied, decision made, supporting evidence and reasoning where applicable.
This creates a searchable record of how each outcome was reached, supporting compliance verification, internal review and audit requirements.
How is my data kept secure and compliant?
Your data stays within Gatekeeper while the Agent performs its work. Actions, decisions and supporting evidence are logged, creating a clear audit trail.
The Agent operates within the permissions, playbooks and authority controls you configure.
Data handling follows Gatekeeper’s enterprise security standards, including SOC 2 Type II compliance and GDPR requirements.
one unified record
Every capability, connected.
One single source of truth.
Customer and vendor contracts, obligations, and renewals in one record.
See spend against contract.
Contract value sits next to what is actually being spent.
No single point of failure.
Contract knowledge lives in the platform, so nothing is lost when someone changes role or leaves.
Draft from approved templates.
Every agreement starts from language Legal already trusts.
Keep control of the clause library.
Guard-railed templates keep off-policy wording from going out.
Nothing renews unnoticed.
Every renewal date tracked, with owners and reminders set automatically.
Expert insight & opinion
Related AI agents.
Gatekeeper's agents work as a single, connected team, handing off to one another across the lifecycle rather than running in isolation like bolted-on point tools.
