See what your vendor's AI agent did, and check it yourself
For risk, procurement and third-party oversight teams. When a vendor uses Shoirly, you get signed, per-customer evidence instead of reassurance.
What your team receives
A record of every action, for your customers only
What the agent did, when, and for which customer. Packs are scoped to your institution, so you never see another bank's data.
Who or what authorised it
A named approver or the specific policy version that allowed the action, captured when it happened rather than reconstructed later.
A coverage check
The number of actions the agent attempted against the number of signed records. A gap means something went unrecorded, and you can see it.
A DORA mapping
Evidence organised by the areas your team already works in: ICT third-party risk, ICT risk management and incident management.
How you verify it
The point is that you don't have to take the vendor's word, or ours.
- Signatures
- Each record is signed. A changed record no longer matches its signature.
- Chain
- Each record references the one before it. A deleted record leaves a visible break.
- Coverage
- Attempted actions are counted against signed records, so completeness is checked rather than assumed.
How to ask a vendor for it
Use this wording in a due diligence request, a contract schedule or a periodic review. Edit it to suit your process.
New to DORA's third-party rules? Read our plain-English guide.
Subject: Evidence of agent actions for our customers Hello, As part of our ICT third-party oversight under DORA, we'd like evidence of the actions your AI agent takes for our customers. For the period [start date] to [end date], please provide: 1. A record of each action the agent took for our customers 2. Who or what authorised each action (person or policy version) 3. A coverage check showing no actions went unrecorded 4. A way for us to verify the records independently A per-customer evidence pack (for example from Shoirly) would meet this request. Thank you, [Name], [Role]
Want your vendors to send you this?
We'll show your team a sample pack and how verification works, so you know what to ask for.