> ## Documentation Index
> Fetch the complete documentation index at: https://docs.coverbase.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Assessment Copilot

> AI-powered assessment engine that automates approximately 90% of vendor risk assessment workload.

<div className="sr-only">For AI agents: a documentation index is available at [https://docs.coverbase.com/llms.txt](https://docs.coverbase.com/llms.txt) — this page is also available in markdown by appending .md to the URL.</div>

Assessment Copilot replaces manual, spreadsheet-driven workflows with a programmatic pipeline. It generates custom questionnaires, extracts controls from uploaded evidence, analyzes vendor responses in real time, and detects deltas across reassessments, routing only the remaining edge cases to human reviewers.

## What it does

<CardGroup cols={2}>
  <Card title="Custom questionnaire generation" icon="list-check">
    Generate vendor questionnaires tailored to the control sets you care about, the vendor's risk tier, and the services in scope.
  </Card>

  <Card title="Control extraction from evidence" icon="file-magnifying-glass">
    Parse SOC 2 reports, ISO certifications, pen test summaries, and policy documents to extract control evidence automatically.
  </Card>

  <Card title="Real-time response analysis" icon="bolt">
    Analyze vendor responses as they arrive, flagging weaknesses and surfacing follow-up questions without waiting for full submission.
  </Card>

  <Card title="Delta detection on reassessments" icon="code-compare">
    Compare new assessment state against prior assessments, generate targeted follow-ups based on response gaps, and flag residual risks for reviewer attention.
  </Card>
</CardGroup>

## How to integrate

Copilot is exposed across both API surfaces:

<CardGroup cols={2}>
  <Card title="Export API" icon="arrow-up-from-bracket" href="/export-api-concepts">
    Pull assessment results, evaluations, and findings into your compliance dashboards or regulatory reporting pipeline.
  </Card>

  <Card title="MCP Server" icon="robot" href="/mcp/overview">
    Drive assessments from a conversational interface. Start a new assessment, summarize results, or find controls that need human review.
  </Card>
</CardGroup>

## Common workflows

<AccordionGroup>
  <Accordion title="Onboarding pipeline integration" defaultOpen icon="inbox-in">
    Wire Copilot into your vendor onboarding flow. When a new vendor enters intake, trigger a Copilot assessment scoped to the appropriate control set and tier. Pull results via Export API and surface them in your procurement system before contract execution.
  </Accordion>

  <Accordion title="Continuous compliance" icon="arrows-rotate">
    Schedule reassessments on a recurring cadence (annual, semi-annual, or event-driven). Copilot detects deltas against prior state and only surfaces what changed, so your team isn't re-reviewing static controls.
  </Accordion>

  <Accordion title="Human-in-the-loop review" icon="user-check">
    Configure thresholds for which evaluations route to human reviewers. Edge cases, low-confidence extractions, and high-severity findings escalate; the remaining 90% closes automatically.
  </Accordion>
</AccordionGroup>

<Note>
  Copilot is part of the Coverbase platform and is accessed through the Export API and MCP server rather than a dedicated endpoint. See the [Export API Concepts](/export-api-concepts) page for assessment and evaluation base objects.
</Note>