VectraIQ
What VectraIQ does in the platform, and what it leaves to people.
VectraIQ chats, writes insights, reads documents and drafts. It reads only your company’s records, and your expert team reviews final reports and makes the key decisions with you.
Ask VectraIQ
ExampleVectraIQ
Two active issues are overdue and rated High or above: the finance system access review and the billing system access review. Both are linked to the access review control. Open either record to see its owner and target date.
Where it works
Where you will meet VectraIQ.
Chat on every page
Ask VectraIQ
Ask about your issues, risks, controls, vendors and policies in plain language. Answers link to the records behind them.
On your dashboards
Insights
A ranked list of cyber and vendor insights with a short briefing: where you stand, what to do first, and the pattern across your records.
On uploaded documents
Document reading
Reads an uploaded policy or report, scores its quality, summarizes it and checks it against what the document should contain.
Issues, risks and vendor reports
Drafting
Turns a plain-English description into a draft issue or risk, and starts vendor reports with a written summary and profile.
Ask VectraIQ
A chat that stays inside your data.
It answers from your own records, and only about your company.
- Knows which record you have open, so "why is this overdue?" needs no name
- Answers with links to the issues, risks and other records behind them
- States a total or percentage only when your data supplied it
- Read-only: it never creates, edits or closes a record
- Scoped to your company: it answers only from your records
Insights
What the AI writes, and what is calculated.
Insights are refreshed each day your team signs in. Severity and trend are calculated from your data, not left to the AI.
- 1
Platform
Refreshed each day your team signs in
Insights are regenerated from your current records, once a day, when your team first signs in. Closed issues and accepted risks are left out.
- 2
VectraIQ
Cyber and vendor analysis
It reads your records alongside your company profile and writes insights for your own posture and for your vendors.
- 3
VectraIQ
Checked against your records
Each insight is checked against your records, and any that points to something not in your data is removed or corrected.
- 4
Platform
Severity and trend are calculated
Severity follows your own risk scale, and trend comes from comparing with the previous run. Neither is left to the AI.
Quarterly access reviews are overdue on three systems
Example- High
- Worsening
- Overview
- Reviews for the finance, HR and billing systems have passed their target dates. Two are linked to the same control.
- Why this matters
- Overdue reviews mean former staff access could stay unnoticed through the audit period.
- Recommended action
- Assign one owner for all three and complete them this week.
Linked records
- ControlAccess reviews performed on a schedule
- IssueFinance system review overdue
- IssueHR system review overdue
- IssueBilling system review overdue
The briefing at the top
- Where you stand overall, in one verdict and one sentence
- What is getting worse and what was recently resolved
- Do this first
- The pattern across your records
- Your biggest vendor exposure
"Do this first" is a starting point. Your cyber expert turns it into a plan with you, sets the priority, and drives it to closure. When the issues behind the insight are resolved, the insight is not recreated on the next run.
Limits
What VectraIQ does not do.
What it leaves to people and to your data, for your security review.
It does not change your records from chat
Ask VectraIQ is read-only.
It does not save drafts for you
A draft issue or risk is stored only after you review and save it.
It does not invent numbers
Counts come from your data, and severity comes from your risk scale.
It does not sign off
Final reports and key decisions belong to your cyber expert and to you.
It does not train on your data
Our Master Subscription Agreement states that we will not use Customer Data to train or fine-tune AI or machine learning models.
Platform protections and how the AI is used are on the security page. Dashboards that show insights are described in reporting and dashboards, and the document checks feed audit and compliance. The people side is the managed program.
Questions, answered.
Who can use Ask VectraIQ?
Your own team and your expert team. Vendors answering an assessment cannot.
Does VectraIQ learn from our data?
No. Our Master Subscription Agreement states that we will not use Customer Data to train or fine-tune AI or machine learning models.
Can I trust the figures in a chat answer?
Totals come from your data, not from the AI. If it was not given a figure, VectraIQ does not state one. Follow the record links to check the source.
Where do I read about AI and my data?
On our security page, which covers how VectraIQ is used and the platform-level protections. Ask us for the detail your own security review needs.
More in the platform
Explore the rest of the platform.
- Risk assessmentsRun a risk assessment, score it, and turn the findings into issues and risks.
- Third-party riskAssess vendors, tier them by criticality and keep watching them between reviews.
- Risk managementA risk register with owners, treatment and progress, rolled up into dashboards.
- Audit and compliancePolicies, controls and evidence kept current, so audit prep is a review.
- Frameworks and controlsOne control library mapped across the frameworks you report against.
- Reporting and dashboardsExecutive dashboards and board reports drafted for your cyber expert to finalize.
Ask VectraIQ about your own program.
A lead expert will show how it answers questions about your risks, vendors and readiness.