Before
Legal or GRC staff would likely need to locate the contract and reference documents, extract or read their contents, and manually cross-reference contractual clauses against several regulatory frameworks and internal policies. They would then consolidate overlapping findings, prepare recommendations and draft clauses, build reports, and send the results to the requester through separate handoffs.
How it works
- The requester submits an email through the audit portal after uploading a contract, and the workflow locates the contract and the reference materials in the designated document repository.
- The workflow extracts the documents, compares the contract against GDPR, DORA, ISO 27001, and internal requirements, scores compliance, consolidates duplicate gaps, and prioritizes risks and corrective actions.
- The workflow generates an executive HTML dashboard and structured Excel report, then emails both deliverables to the requester.
Workflow details
- Submission and file discovery: A requester enters a valid email address in the contract audit portal, uploads a contract to the designated SharePoint folder, and launches the analysis. The workflow locates the contract, reference documents, templates, and result locations in the document repository.
- Document preparation: The workflow extracts text from the contract and each reference document, supporting PDF and DOCX files. Large documents are processed in sequential chunks, with one retry for failed extraction attempts, so the analysis can use the available contract and reference content.
- Compliance assessment: An AI-based GRC analysis compares the contract clause by clause with GDPR, DORA, ISO 27001, and internal policies and procedures. It identifies gaps, assesses legal, operational, financial, and reputational risks, evaluates compliance scores, prioritizes corrective actions, and proposes remediation language such as transfer, security, incident, and resilience clauses.
- Consolidation and reporting: The workflow aggregates findings across the reference frameworks, removes overlapping issues, maps each consolidated gap to its regulatory and internal requirements, and creates an executive priority list. It then generates a dashboard view and structures general findings and domain-level analysis in an Excel workbook.
- Delivery: The completed HTML dashboard and Excel report are sent by email to the requester as an analysis package, while the portal informs the requester that processing continues in the background.
What changed
Contract analysis now starts from a portal submission and runs as a coordinated workflow that performs document discovery, text extraction, framework comparison, gap consolidation, scoring, and report generation automatically. The final dashboard and Excel report are delivered directly to the requester's email instead of requiring separate manual preparation and handoffs.
Work removed
Locating contract and reference files, extracting document text, reviewing clauses against multiple frameworks, checking and consolidating overlapping gaps, calculating compliance summaries, drafting remediation clauses, preparing dashboard and spreadsheet reports, and manually emailing the completed results.
Expected outcome
A complete third-party contract analysis package is expected to reach the requester within the workflow's stated 3-to-5-minute processing window, replacing a review process described as taking multiple days; this is an estimate based on the workflow documentation, not a measured customer result.
