How to Use Whistic AI (For Assessments)

Table of Contents

• Summary
• Getting Started
• Using Whistic AI (formerly Copilot)
  • Step 1: Collect
  • Step 2: Review
• Troubleshooting
• FAQ

Summary

Whistic's AI (formerly Copilot) streamlines the vendor security assessment process by automating tedious tasks and providing intelligent assistance throughout your evaluation. This AI-powered feature helps you efficiently complete assessments by leveraging available vendor sources to generate comprehensive summaries and analyses, reducing manual review time from hours to minutes.

Important: Before using this feature, ensure you have the proper licensing and permissions configured in your Whistic account.

🚀 Getting Started

Prerequisites:

• Active Whistic AI license (contact your Customer Success Manager or [e-mail] if needed)
• Whistic AI must be enabled in your account settings
• An active assessment with available vendor sources

To Enable Whistic AI:

1. Navigate to Settings > Company Settings
2. Locate Whistic AI settings
3. Toggle the setting to 'On'

Note: Whistic AI requires an existing assessment to function. For guidance on starting and completing assessments, refer to our assessment documentation, HERE.

🤖 Using Whistic AI (formerly Copilot)

In assessments, Whistic AI becomes available once vendor sources are accessible in your assessment. The feature will not appear if you're waiting for documents or questionnaires from vendors.

Key Requirements:

• Sources must be available and unlocked
• Prioritize using existing sources whenever possible
• Whistic AI processes may take several minutes to complete

Step 1: Collect

1. Access Sources
   • Click Select or Upload Sources
   • A window displays all available documents for selection
2. Select Available Sources
   • Choose from unlocked sources in the list
   • Avoid sources marked as "locked" or pending vendor response
3. Launch Whistic AI
   • After selecting sources, a banner appears: "Create a Vendor Summary and SOC 2 Summary now"
   • Click Launch Whistic AI
4. Choose Whistic AI Options
   • Create Vendor Summary: Generates comprehensive vendor analysis using all available sources. For more information, go here.
   • Create SOC 2 Summary: Produces detailed SOC 2 report analysis (requires valid SOC 2 documentation). For more information, go here.
5. Processing
   • Select Create Now to begin processing
   • You'll automatically advance to Step 2: Review
   • Processing typically completes within a few minutes

Step 2: Review

Whistic AI is also accessible during the Review phase under these conditions:

• No Whistic AI analysis has been run previously
• Available sources exist in the assessment

To Launch from Review:

1. Look for the Whistic AI banner in the Review section
2. Click Launch Whistic AI
3. Select your desired summary type
4. Complete the processing and review generated results

🔧 Troubleshooting

Whistic AI Option Not Appearing:

• Verify sources are available and not locked
• Ensure the vendor has returned the requested documents
• Check that Whistic AI is enabled in your account settings

Processing Takes Too Long:

• Large documents may require additional processing time
• Contact support if processing exceeds 10 minutes

Summary Generation Fails:

• Confirm document types are supported (SOC 1/SOC 2 for security summaries)
• Verify files are not encrypted or password-protected
• Ensure sufficient summary credits remain in your account

❓ FAQ

What types of sources work with Whistic AI?

Whistic AI works with most document types uploaded to vendor Trust Centers. For SOC 2 summaries specifically, only SOC 1 and SOC 2 reports are supported.

How long does Whistic AI take to process?

Processing typically takes 2-5 minutes depending on document size and complexity. Larger assessments with multiple sources may take longer.

Can I use Whistic AI for an assessment if I'm waiting for vendor documents?

No. Whistic AI only becomes available after vendors have provided the requested sources. The feature requires accessible documents to generate summaries.

How many times can I use Assessment Whistic AI?

Usage depends on your account's AI feature limits. Check Resources > Plan Overview to view available credits and usage statistics.

What's the difference between Vendor Summary and SOC 2 Summary?

Vendor Summary analyzes all available sources to provide comprehensive vendor insights, while SOC 2 Summary specifically focuses on SOC 1/SOC 2 compliance reports and security controls.

Can I run multiple Whistic AI analyses on the same assessment?

Yes, you can generate both Vendor Summary and SOC 2 Summary for the same assessment, provided you have sufficient credits and appropriate source documents.

What should I do if my sources are locked or unavailable?

Locked sources indicate pending vendor responses. Follow up with vendors to provide requested documents, then return to use Assessment Whistic AI once sources become available.

How does Assessment Whistic AI handle my data?

Review Whistic's AI & Security policies for detailed information on data access, storage, and usage. Whistic AI does not train on your data or share it with external parties.