GetTeddy compliance agents (Certification, Gap Audit, Policy, Evidence, Questionnaire and Contract agents)

What it does

GetTeddy (Teddy Technologies GmbH, Berlin) maps a company's obligations once into a single control set and hands the recurring compliance work to agents that run daily or weekly. Per its own agents page: the Certification Agent proposes a scope, turns each requirement into an owned task with a due date and runs readiness checks before stage 1 and stage 2 audits; the Gap Audit Agent rates every requirement across frameworks and entities as met, partly met or missing, checks controls in connected systems rather than only documents, scores each gap and creates remediation tasks; the Policy Agent drafts the policy set from the customer's real systems, roles and terminology and proposes updates when a system changes; the Evidence Agent collects evidence on a schedule from identity, cloud, HR and code tools through read-only service accounts, checks each item against its control and maps it to every framework; the Questionnaire Agent drafts answers to Excel, Word and PDF questionnaires from controls, policies and evidence with source links and flags what it cannot answer; and the Contract Agent rates vendor contracts and DPAs clause by clause against GDPR Art. 28, DORA Art. 30, NIS2 supply-chain clauses and the customer's own positions and suggests wording. Every action goes to an activity log, and policies, questionnaire answers, contract edits, risk acceptance and scope stay with a human approver. A 'Teddy' co-pilot chat sits on top; the agents, not the chat, are the listed capability. Supported frameworks named by the vendor include ISO 27001, SOC 2, NIS2, TISAX, DORA, CRA, EU AI Act and ISO 42001. It imports from Vanta, Drata or spreadsheets. The company emerged from the Antler ecosystem in Berlin and is young (VAT ID still 'applied for' on the imprint). Pricing is quote-based, scaled by how much work the agents take on.

Frameworks (vendor-stated)

No framework tags yet.

Vendor-claimed ISO 27001, SOC 2, NIS2, TISAX, DORA, CRA, EU AI Act, ISO 42001

Pricing (as published)

Not published

Tasks

gap analysisevidence collectionpolicy managementquestionnaire automationcontract reviewcontrol mappingaudit management

Integrations (vendor-listed)

AWSAzureGCPGitHubGitLabOktaGoogle WorkspaceMicrosoft 365 / EntraJiraSlack

Names that appeared on the vendor’s integrations page at last check. Missing names are unknown, not “no”. Only some listings have integration data so far.

Sources

1. getteddy.ai/agents (primary)
2. getteddy.ai/
3. getteddy.ai/about
4. getteddy.ai/legal/imprint
5. getteddy.ai/integrations

Last verified 20 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Use-case comparisons

• TPRM and vendor-risk AI agents — 40 verified listings (Third-party risk, vendor assessments, security ratings and questionnaire automation)
• Security questionnaire AI agents — 10 verified listings (Inbound security questionnaires, SIG/CAIQ-style responses and questionnaire automation)

Compare GetTeddy compliance agents (Certification, Gap Audit, Policy, Evidence, Questionnaire and Contract agents) with

• 
  6clicks Hailey AI vs GetTeddy compliance agents (Certification, Gap Audit, Policy, Evidence, Questionnaire and Contract agents)
• 
  Akitra Andromeda AI compliance agents vs GetTeddy compliance agents (Certification, Gap Audit, Policy, Evidence, Questionnaire and Contract agents)
• 
  Anecdotes Agentic GRC (Agent Library and Agent Studio) vs GetTeddy compliance agents (Certification, Gap Audit, Policy, Evidence, Questionnaire and Contract agents)
• 
  Archer Evolv AI Operators (Evolv Foundation and Evolv Workplace) vs GetTeddy compliance agents (Certification, Gap Audit, Policy, Evidence, Questionnaire and Contract agents)
• 
  Athereon LAiKA (AI agent for ISMS, risk and questionnaires) vs GetTeddy compliance agents (Certification, Gap Audit, Policy, Evidence, Questionnaire and Contract agents)
• 
  AuditFile Agentic AI Orchestrator Suite (audit agents) vs GetTeddy compliance agents (Certification, Gap Audit, Policy, Evidence, Questionnaire and Contract agents)
• 
  Behavox Digital Employees (AI agents for compliance surveillance alert review) vs GetTeddy compliance agents (Certification, Gap Audit, Policy, Evidence, Questionnaire and Contract agents)
• 
  Caseware Verity agents (Disclosure Checklist and Risk Suggestion) vs GetTeddy compliance agents (Certification, Gap Audit, Policy, Evidence, Questionnaire and Contract agents)
• 
  Cav Compliance OS agents (formerly Caveonix) vs GetTeddy compliance agents (Certification, Gap Audit, Policy, Evidence, Questionnaire and Contract agents)
• 
  CITSmart GRC.S (GRC + SecOps platform with AI agents that check deadlines and execute response actions) vs GetTeddy compliance agents (Certification, Gap Audit, Policy, Evidence, Questionnaire and Contract agents)

Alternatives

• 
  6clicks Hailey AI — Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform.
• 
  Akitra Andromeda AI compliance agents — AI-native GRC platform whose agents monitor controls, collect evidence, map controls, flag gaps, draft security-questionnaire responses and remediate gaps across 40+ frameworks, with a dedicated compliance expert per customer.
• 
  Anecdotes Agentic GRC (Agent Library and Agent Studio) — Enterprise GRC platform with built-in agents for evidence analysis, control assessment, risk enrichment and findings extraction, plus an Agent Studio for custom GRC agents and agentic TPRM.
• 
  Archer Evolv AI Operators (Evolv Foundation and Evolv Workplace) — Governed GRC agents ('AI Operators') inside the Archer system of record: identity-bound, scope-limited, human-supervised agents for control generation and assurance, regulatory change, reportable-event review and record hygiene; the Archer Evolv product is TX-RAMP Level 2 certified.
• 
  Athereon LAiKA (AI agent for ISMS, risk and questionnaires) — German, EU-hosted AI agent in the Athereon GRC platform that identifies risks, captures assets, maps gaps against NIS2/ISO 27001/DORA/TISAX/CRA, and sends and fills security questionnaires, asking for approval before it changes anything.
• 
  AuditFile Agentic AI Orchestrator Suite (audit agents) — Multi-agent orchestration for financial-statement audits: an orchestrator staffs engagements with long-running agents that draft disclosure-checklist answers, categorise trial balances, generate PBC request lists, prepare and perform procedures and draft workpapers, all ending in a human sign-off queue.

See all GetTeddy compliance agents alternatives →

FAQ (from this dataset)

What does GetTeddy compliance agents do?

Berlin agentic compliance platform in which six AI agents run recurring ISO 27001, SOC 2, NIS2, TISAX and DORA work on a schedule: planning a first certification, weekly gap audits against connected systems, drafting policies, collecting evidence, drafting security-questionnaire answers and checking vendor contracts and DPAs, with every result logged and approved by a person.

How much does GetTeddy compliance agents cost?

Not published

Where is GetTeddy (Teddy Technologies GmbH) headquartered?

Germany

What are alternatives to GetTeddy compliance agents?

See the GetTeddy compliance agents alternatives page for category-sharing listings in relevance order, not a ranking. GetTeddy compliance agents alternatives.

Stay updated