> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vendexlabs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Draft comments with AI

> Draft security, compliance, and privacy comments where every fact is tied to a source.

Writing assessment comments is where most review time goes. **Draft with AI** writes the first version for you, in your team's style, and ties every fact to a source you can check. You refine it, use it, and stay the author.

![Draft with AI panel beside an assessment, showing the playbook in use, verified and vendor-asserted evidence with sources, and the Generate draft button](https://mintcdn.com/vendex-labs/CoyCkSVFgoJE5Vl7/images/ai-comment-panel.png?fit=max\&auto=format\&n=CoyCkSVFgoJE5Vl7\&q=85\&s=da09a5490fb275654bb90b1aee5c431a)

> [!NOTE]
>
> AI drafting is part of the **Enterprise** plan and includes a monthly allowance of drafts per organization.

## Which comments it drafts

| Comment | What it covers |
| - | - |
| **Security risk** | What to lead with, how the findings weigh up, and which gaps to call out. |
| **Compliance** | The compliance review, ending with a suggested outcome and any conditions. |
| **Privacy notes** | Which data types the vendor handles and what's known about processing and retention. |

Only the compliance comment suggests an outcome. The approval decision is always yours.

## Draft a comment

**1. Open the panel**

On the vendor's **Assessment** tab, choose **Draft with AI** next to the comment you want to write.

**2. Check the evidence first**

Before anything is generated, the panel shows what it found for this vendor: accepted [evidence review](https://docs.vendexlabs.com/guides/evidence-review.md) answers, cited research, your business context, and gaps. Expand any item to see exactly what the draft can draw on.

**3. Pick a playbook (optional)**

The [playbook](https://docs.vendexlabs.com/guides/playbooks.md) that matches this vendor's tier and tags is used automatically. You can pick a different one, or tweak the instructions for this draft only.

**4. Generate**

Choose **Generate**. The panel gathers the evidence and, if the playbook allows it, checks the web for recent breach, certification, or enforcement news.

**5. Refine**

Ask for changes in plain language, or use the quick refine chips, such as **Shorter**, **More formal**, **Name the gaps**, or **State the conditions**. Each turn keeps the same evidence, so citations stay consistent.

**6. Use it**

Choose **Use this** to place the draft in the comment field. Edit it like any other text, then save the assessment.

## Every fact has a source

Each statement in a draft carries a chip showing where it came from:

| Chip | Source |
| - | - |
| **verified** | A quote found in the vendor's own report, with the page number. |
| **vendor-asserted** | Something the vendor states publicly (a trust page, a policy), not independently checked. |
| **finding** | A red flag or exception from the evidence review. |
| **no information** | An item your template asks about that the evidence doesn't cover. Shown as a gap, never filled in. |
| **your note** | Business context from the assessment itself. |
| **web** | A recent news result from the freshness search. |

The model can only cite evidence it was given. VendexLabs drops any citation that doesn't match a real source, and statements with no source are marked **unattested** instead of being presented as fact.

## Provenance

Once a draft is in the comment field, a small strip shows it as **AI-assisted**. If you then edit the text, the strip changes to **Edited · citations no longer traced**, so reviewers can tell what was drafted and what was rewritten. The assessment's [audit log](https://docs.vendexlabs.com/guides/audit-log.md) records the save as usual.

> [!TIP]
>
> Drafts use your organization's past comments as a style reference, so new comments read like the ones your team already writes.

> [card] [Playbooks](https://docs.vendexlabs.com/guides/playbooks.md)
>
> Tell the drafts how your team writes.

> [card] [Draft from Claude](https://docs.vendexlabs.com/integrations/claude.md)
>
> Draft and save assessments from a Claude conversation.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.