Estimated reading time: 4 minutes
The End of Era
Most third-party risk programs focus on tracking activity instead of improving safety. Vendors fill out questionnaires, and teams submit reports, but the real risks often remain. TrustCloud created a new version of TrustLens to break this pattern by using ongoing, evidence-based data that stands up to review.
This announcement comes at an important time. Our review of the Panorays 2026 CISO survey shows that 85% of organizations do not have complete supply chain visibility. Seventy-one percent of security leaders believe traditional questionnaires are no longer effective. In just one year, AI use in TPRM programs rose from 27% to 66%. TrustCloud is now addressing this major change in the market.
A Global 2000 Customer Delivers Real Numbers
TrustCloud highlights a real-world example at a Global 2000 life sciences company. The results are clear: the customer reviewed over 5,000 suppliers in six months, a tenfold increase from before. Vendor coverage grew from 20% to 92% of their ecosystem, and the AI agent found four times more critical gaps than the old method.
These results matter to underwriters. Insurance carriers want proof of real controls. Showing a 92% coverage rate on a risk submission is much stronger than showing only 20%.
What The AI Agent Actually Does
TrustLens automates over 70% of assessment tasks, while human analysts still make the final decisions. The platform offers five main features. It tailors each assessment based on risk level, instead of using the same questionnaire for everyone. It collects real-time vendor data and reviews submitted security evidence. It creates smart risk summaries using both internal and external data. It includes a Q&A tool so anyone can ask about a vendor’s risk status. Finally, it keeps watch for new risks, even after an assessment is done, without needing to start over.
Jikku Venkat, Head of Product at TrustCloud, said the platform replaces “point-in-time attestations with continuous proof.” This move from single snapshots to ongoing data is key for insurance. Underwriters can now see live evidence instead of relying on a questionnaire signed six months ago.
Why This Matters For Cyber Insurance Buyers
BlueVoyant’s State of Supply Chain Defense report found that 97% of organizations suffered a supply chain breach impact in the past year. Only 16% named risk reduction as the primary purpose of their TPRM program. Most cited insurance requirements, contract obligations, or board mandates instead. TrustCloud aims to change the focus on compliance above all else. Dan Walsh, CISO at Datavant, explained the new standard insurers expect: organizations must “understand, report, and reduce risk with transparency, automation, and a data-driven approach.” More carriers now require ongoing third-party monitoring before offering coverage. Programs that rely on periodic questionnaires no longer meet this standard.ard.
The Underwriting Signal
TrustCloud presents TrustLens as a tool that predicts risk, rather than just tracking processes. Tejas Ranade, Co-founder and CPO, said the product replaces “every broken manual workflow” with “agentic, continuous data driven assessments.” For CFOs and General Counsel looking at coverage terms, this difference can affect renewals. Underwriters use program data to set prices and coverage. A TPRM program using AI agents and real-time evidence gives buyers a better position when negotiating.
FAQ: TrustCloud, TrustLens, and Third-Party Risk Management
TrustLens is TrustCloud’s AI-powered third-party risk management platform. It uses agentic AI to automate vendor assessments on a continuous basis.
It replaces static, periodic questionnaires with real-time evidence analysis. The agent assesses vendors using outside-in security data and vendor-provided artifacts, then produces auditable risk summaries.
The life sciences customer assessed more than 5,000 suppliers in six months. Coverage expanded from 20% to 92% of its vendor ecosystem. The AI identified four times more critical gaps than the previous process.
Carriers now require continuous evidence of vendor monitoring. Programs that automate assessments and generate verifiable data conform to current underwriting standards and support stronger renewal positions.
No. The AI agent automates over 70% of the work. Human analysts retain final decision authority and approval rights.
Related Cyber Insurance Posts
- Bridging Cyber Risk Exposure with an 831(b) Plan: Why the New Federal Court Ruling Changes the Game
- 97% of Top U.S. Banks Hit by Third-Party Data Breaches in 2024 – SecurityScorecard(Opens in a new browser tab)
- Holiday Scams Rise as Cybercriminals Target Retailers During Peak Shopping Weeks(Opens in a new browser tab)
- What Your Cyber Insurance Policy Misses – And What Attackers Find First – NEW PODCAST(Opens in a new browser tab)
