Last verified · Added · 4 sources · How we verify
Vendor? Get your “Listed on Agent Index” badge
On this page
What it does
FlowForma Assure (launched as FlowAssure, opened to customers on 30 Jun 2026 after a beta) is the vendor-risk product of FlowForma, the Dublin-based no-code process-automation company. Its product page says specialist AI agents read the vendor evidence in their area (SOC 2 Type II, ISO 27001, NIST, pen-test reports, SIG and custom questionnaires, vulnerability scans), validate controls, classify findings and score risk against the customer's own profile, control library and audit history, with Pass/Partial/Fail findings, confidence indicators and links to the source text. Low-risk vendors can be auto-approved, high-risk ones land with the right analyst with questions already framed, and the middle tier gets a recommended decision. Clarifications to vendors are time-bound and tracked, and it integrates with Jira, ServiceNow and SharePoint (Microsoft Entra ID sign-in). It also assesses AI-governance risks. Time-saving figures are vendor claims from beta customers. A 30-day free trial is offered; Assure is priced separately by quote.
Frameworks (vendor-stated)
No framework tags yet.
Vendor-claimed ISO 27001, SOC 2, NIST CSF 2.0, NIS2, Cyber Essentials
Pricing (as published)
Not published
Tasks
vendor riskquestionnaire automationrisk assessmentworkflow automation
Sources
- flowforma.com/flowassure (primary)
- flowforma.com/pricing
- flowforma.com/contact-us
- prnewswire.com/news-releases/flowforma-launches-access-to-flowassure-an-evidence-first-ai-platform-for-vendor-risk-assessments-302813705.html
Last verified 18 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.
Next step: find an auditor
After you pick a tool, the usual next step is an independent audit. These are directory listings (Verified or registry-listed), not rankings or endorsements.
Narrow by region
This listing’s HQ country is Ireland. That is a starting point only — choose any published country page.
United States · India · United Kingdom · Japan · Germany · Australia · Netherlands · Canada · Brazil · Singapore · Ireland (suggested) · United Arab Emirates
Audit firms in India (131)
Audit firms in Japan (49)
Send a request Get matched with verified auditors All verified audit firms
Request received
Thanks, we've received your request. We'll be in touch before sharing it with any firm.
Reference:
Use-case comparisons
- TPRM and vendor-risk AI agents — 40 verified listings (Third-party risk, vendor assessments, security ratings and questionnaire automation)
Compare FlowForma Assure (AI agents for vendor risk assessment) with
Alternatives
-
ACTICO Compliance Solutions AI agents (KI-Agenten for AML, customer and payment screening) — Rules-based AML, customer screening, payment screening and market-abuse software for banks and insurers in which AI agents do the research, analysis and documentation work (for example adverse-media checks on screening hits) inside the platform's governance, with the compliance analyst making the final decision. -
AiPrise AI agents (AML Agent, Website Agent and Document Agent) — KYC/KYB and compliance platform whose AI agents review AML screening hits (sanctions, PEP, adverse media) and recommend a decision under the customer's AML policy, check business websites for legitimacy and risk with ongoing monitoring, and review documents, with an analyst confirming the outcome. -
BigID (incl. AgentIQ agents) — Data security, privacy and DSPM platform whose AgentIQ agentic layer runs data-risk work from a request: four BigID agents at launch (Remediate Sensitive Data, AI Governance Enforcement, Access Exposure Analysis, Privacy Operations) investigate, prioritise and act, e.g. revoking access, remediating exposure, applying retention, quarantining data and fulfilling data subject requests. -
Black Kite AI Agent — Third-party cyber risk agent made of sub-agents (Assessment, Incident Response, Threat Actor Intelligence, Investigation, Prioritization, Procurement) that assess vendors, investigate exposures, trigger rescans and draft outreach. -
Blinqx KYC Agent (Wwft client due diligence and UBO checks for accounting firms) — Dutch AI agent that runs Wwft client due diligence for accounting and tax firms: it analyses client files, UBO structures and legal constructions, checks identities against PEP and sanctions lists, pulls audit information from the Dutch UBO register and Trade Register, flags profile changes and schedules re-reviews, and delivers audit-ready KYC files with a source reference for every conclusion, while a person makes the decision. -
Bretton AI agentic back-office platform (formerly Greenlite AI) — Agent platform for bank and fintech financial-crime operations: pre-built and custom agents gather evidence, apply the institution's policy and draft full cases for EDD, monitoring alerts, sanctions, SAR drafting and KYB, with every action logged.
See all FlowForma Assure alternatives →
FAQ (from this dataset)
What does FlowForma Assure do?
Evidence-first vendor security assessment where AI agents read SOC 2 reports, ISO certificates, pen tests and questionnaires, validate controls, score risk with cited reasoning, auto-approve low-risk vendors and route high-risk ones to analysts with follow-up questions framed.
How much does FlowForma Assure cost?
Not published
Where is FlowForma headquartered?
Ireland
What are alternatives to FlowForma Assure?
See the FlowForma Assure alternatives page for category-sharing listings in relevance order, not a ranking. FlowForma Assure alternatives.
Stay updated
Check your inbox to confirm your email. We’ll only send the weekly brief after you click the link.
We use your email only to send the newsletter. See our privacy policy.