Coati
Automated third-party vendor risk assessment tool for enterprise compliance
Is this your product? Claim it to edit the listing, post updates and answer questions. Prove it with an email address at the product's domain (the listing becomes Claimed), or put the LotsDirectory badge on your website (the listing becomes Verified, and its link to your website is followed while the badge is live).
Description
Automated third-party vendor risk assessment tool for enterprise compliance
About Coati
What is Coati?
Coati is a third-party risk management tool designed for analysts to issue vendor questionnaires and audit uploaded compliance documents against security control frameworks.
What Coati does
Coati issues lightweight security questionnaires to vendors via unique response links. Vendors submit answers and attach supporting documentation, such as SOC 2 reports, ISO certificates, and policy PDFs. Analysts can also upload documents directly. The platform analyzes documents against frameworks including NIST CSF, SOC 2, HITRUST, PCI-DSS, ISO 27001, and CIS Controls to surface gaps, flag discrepancies between responses and evidence, and export assessment reports.
Who Coati is for
The platform is built for risk analysts who manage third-party vendor risk assessments and review compliance documents.
How Coati works
Analysts add vendors to an inventory, build and email questionnaires, collect responses and evidence via a vendor portal, review framework gap analyses, reconcile discrepancies with analyst overrides, and export reports.
Key features
- Custom questionnaire builder with tamper-tracked vendor response links
- Vendor portal allowing document uploads without requiring a vendor account
- Automated document analysis mapping files against NIST CSF, SOC 2, HITRUST, and ISO 27001
- Discrepancy engine comparing vendor answers against attached documentation
- Analyst override controls and executive attestation for audit reports
- Structured assessment export for executive and board presentations
- Database isolation with row-level security on Supabase and Postgres
Facts from coati-sec.com, checked 15 October 2026
Written from Coati's own website (Homepage). The maker can claim this listing to edit it.
Categories
Frequently asked questions
Which security frameworks are supported by Coati?
Coati maps vendor documents against NIST CSF 2.0, SOC 2 Type II, HITRUST CSF, ISO 27001, CIS Controls, and PCI-DSS v4.
Are uploaded vendor documents used to train AI models?
No. Vendor documents and questionnaire responses are processed for analysis and discarded without being used to train or fine-tune models.
Can analysts override automated gap findings?
Yes. Analysts can accept, override, or flag findings for follow-up when discrepancies occur between responses and evidence.
Do vendors need an account to complete questionnaires?
No. Vendors access a response portal through unique email links to answer questions and attach documentation without creating an account.