Evidence vault for third-party risk

The exam request, already answered.

LookSee keeps every vendor document tagged, sealed in a tamper-evident ledger, and ready the moment your examiner asks.

Book a pilot See how it works ↓

Built around NCUA Supervisory Letter 07-01, MERIT document request lists, and the Interagency Third-Party Guidance.

A compliance officer at a window desk in soft morning light, unhurried, coffee in hand.
Intended shot — A compliance officer at a window desk in soft morning light, unhurried, coffee in hand.

You know this week.

The request list lands. Forty line items. The SOC 2 is under NDA in someone's inbox. The COI expired in March. The BCP is the 2023 version. For the next three weeks, your actual job is chasing PDFs.

There is a calmer way to be examined.

Two colleagues reviewing one screen together, relaxed, in natural light.
Intended shot — Two colleagues reviewing one screen together, relaxed, in natural light.
A tidy desk in warm light: a single stack of paper, a closed notebook, a cup of coffee.
Intended shot — A tidy desk in warm light: a single stack of paper, a closed notebook, a cup of coffee.

How it works

  1. 1

    Drop everything in.

    SOC 2 reports, MSAs, COIs, BCPs, board minutes, policies. LookSee reads them.

    Drop vendor documents

    PDF, up to 50 MB each

    • SOC 2 Type II
    • MSA
    • COI
    • BCP
    • Board minutes
    • Policy

    hashing · sha-256

  2. 2

    Every page tagged and sealed.

    AI extracts the fields that matter — opinion type, coverage dates, review status — and every event is committed to an append-only, hash-chained ledger. Nothing edited, nothing lost, everything provable.

    SOC 2 Type II — Northbridge Core Processing

    • Opinion Unqualified a3f2…9c41
    • Audit period Jan 1 – Dec 31, 2024 5d18…07aa
    • Trust services criteria Security · Availability c47e…b203
    • Review status Confirmed f09a…3d6c
  3. 3

    Answer in plain English.

    Paste the examiner's request list. LookSee matches each line item to sealed evidence — and surfaces the gaps before the examiner does — then exports the package.

    Examiner request

    Matched evidence

    All SOC 2 reports — critical vendors
    SOC 2 Type II · Northbridge Core Processing
    Certificates of insurance — critical vendors
    COI · Meridian Data Services — expired in March surfaced gap
    Business continuity plans, with last test date
    BCP · Lakeshore ITM Servicing — 2023 version on file surfaced gap
    Master service agreements — core processor
    MSA · Northbridge Core Processing

    Export the package

Proof you can hand across the table.

Every upload, tag, and export is chained to the one before it with SHA-256. If a single byte changes, the chain says so. Your evidence doesn't ask to be trusted — it verifies.

  1. 9c0b…e1f7ingest
  2. a3f2…9c41classify
  3. 5d18…07aaextract
  4. c47e…b203review
  5. f09a…3d6cexport
  6. 71b5…88e0verify
an evidence chain, illustrated

Built for the $500M–$1.5B institution.

Big enough that vendor count is real. Not big enough that a seven-figure GRC platform makes sense. If one named person owns third-party risk at your institution, LookSee was built for their Tuesday.

A small-town main street in morning light, a credit union branch among the storefronts.
Intended shot — A small-town main street in morning light, a credit union branch among the storefronts.

Audit-ready in 30 days.

We're onboarding a small number of design partners ahead of exam season. Bring your vendor list; leave with a sealed vault.