Skip to main content
A playbook tells AI drafts how your team writes assessment comments: what to lead with, how to phrase conditions, which data types to name. You can keep several playbooks, for example a strict one for Critical vendors and a light one for low-risk tools, and VendexLabs picks the right one for each vendor. Find playbooks under Assessments → Playbooks. Playbooks list showing the default playbook, published playbooks with the tiers and tags they apply to, and drafts

How a playbook is chosen

When someone drafts a comment, VendexLabs uses, in order:
  1. The playbook they picked for that draft.
  2. A published playbook whose dependency tier and tags match the vendor.
  3. The default playbook, which covers every vendor no other playbook matches.
If a playbook sets both tiers and tags, a vendor must match a tier and a tag. Tags come from your vendor list.

What’s in a playbook

The dependency tiers and tags the playbook matches. The editor shows how many of your vendors currently match.
One set of instructions each for the security risk, compliance, and privacy comments. Write them the way you’d brief a colleague. Built-in rules always apply on top: every fact is cited, nothing is invented, and only the compliance comment suggests an outcome.
Optionally attach a text PDF (up to 5 MB), such as your vendor risk policy, for drafts to follow.
What drafts may draw on besides the assessment’s own evidence review: business context, enrichment research, and past comments to write like.
Search the web for recent findings adds cited breach, certification, and enforcement news. Drafts are slightly slower with it on.
The length and shape of every comment drafted with this playbook.
Optionally, the template that usually goes with this playbook.

Drafts and publishing

Drafts aren’t used automatically until an admin publishes them. Only admins can change a published playbook, so to propose a change, create a new playbook as a draft. Archiving a playbook stops drafts from using it.
Not sure where to start? Ask Claude to write one. With the Claude connector, Claude can read your past assessments and save a playbook draft for an admin to publish.