# Coati

> Automated third-party vendor risk assessment tool for enterprise compliance

Automated third-party vendor risk assessment tool for enterprise compliance

## Facts
- Website: https://coati-sec.com
- Categories: SaaS
- LotsDirectory page: https://lots.directory/products/coati
- Listing state: Unclaimed. We listed this product from its public website, and its owner has not claimed it yet.

## Detailed info

## What is Coati?

Coati is a third-party risk management tool designed for analysts to issue vendor questionnaires and audit uploaded compliance documents against security control frameworks.

## What Coati does

Coati issues lightweight security questionnaires to vendors via unique response links. Vendors submit answers and attach supporting documentation, such as SOC 2 reports, ISO certificates, and policy PDFs. Analysts can also upload documents directly. The platform analyzes documents against frameworks including NIST CSF, SOC 2, HITRUST, PCI-DSS, ISO 27001, and CIS Controls to surface gaps, flag discrepancies between responses and evidence, and export assessment reports.

## Who Coati is for

The platform is built for risk analysts who manage third-party vendor risk assessments and review compliance documents.

## How Coati works

Analysts add vendors to an inventory, build and email questionnaires, collect responses and evidence via a vendor portal, review framework gap analyses, reconcile discrepancies with analyst overrides, and export reports.

## Key features

- Custom questionnaire builder with tamper-tracked vendor response links
- Vendor portal allowing document uploads without requiring a vendor account
- Automated document analysis mapping files against NIST CSF, SOC 2, HITRUST, and ISO 27001
- Discrepancy engine comparing vendor answers against attached documentation
- Analyst override controls and executive attestation for audit reports
- Structured assessment export for executive and board presentations
- Database isolation with row-level security on Supabase and Postgres

## Facts from coati-sec.com, checked 15 October 2026

Written from Coati's own website ([Homepage](https://coati-sec.com/)). The maker can claim this listing to edit it.

## FAQ

### Which security frameworks are supported by Coati?
Coati maps vendor documents against NIST CSF 2.0, SOC 2 Type II, HITRUST CSF, ISO 27001, CIS Controls, and PCI-DSS v4.

### Are uploaded vendor documents used to train AI models?
No. Vendor documents and questionnaire responses are processed for analysis and discarded without being used to train or fine-tune models.

### Can analysts override automated gap findings?
Yes. Analysts can accept, override, or flag findings for follow-up when discrepancies occur between responses and evidence.

### Do vendors need an account to complete questionnaires?
No. Vendors access a response portal through unique email links to answer questions and attach documentation without creating an account.

---
Source: https://lots.directory/products/coati · Machine-readable context by LotsDirectory.