Set up AI Evidence

Configure AI-powered evidence analysis to automatically evaluate vendor-submitted documents and responses against your acceptance criteria.

What is AI evidence analysis?

Galink's AI Analyst Agent automatically analyzes each piece of evidence submitted by vendors. When you define acceptance criteria for evidence, the AI uses these criteria to recommend whether the evidence should be approved or rejected.

Configuring acceptance criteria

For each evidence requirement on a questionnaire answer:

1. Navigate to Settings > Questionnaire.

2. Select the questionnaire and find the relevant question/answer.

3. On the evidence configuration, define the acceptance criteria.

4. Write clear, specific criteria that the AI will use to evaluate the submitted evidence.

Writing effective acceptance criteria

The AI evaluates evidence strictly based on your criteria. If any criterion is not met, the evidence is rejected. Examples of good acceptance criteria:

• "The document must be a valid SOC 2 Type 2 report issued within the last 12 months."

• "The policy must explicitly mention encryption at rest and in transit."

• "The certificate must include {{vendor.name}} in the scope."

How AI evidence analysis works

When a vendor submits a questionnaire with evidence:

1. The AI analyzes each piece of evidence against the defined acceptance criteria.

2. For each evidence item, the AI provides:

   • A recommendation (accept or reject).

   • A reason explaining the decision.

3. The Security Officer sees the AI recommendation and can:

   • Approve the evidence.

   • Reject the evidence.

   • Add comments for additional context.