Skip to main content
Assessment settings let you define default behavior for how assessments are initiated, managed, and completed, across your entire organization or for individual relationships. Consistent defaults reduce repetitive configuration and ensure automation behaves predictably.

​
Where to configure settings

You can apply settings at three levels, from broadest to most specific: More specific settings override broader ones. A relationship-level setting overrides the organization default; an assessment-level setting overrides both.
Organization and relationship defaults also apply to assessments started by automation, such as scheduled recertifications and artifact update requests.

​
Available settings

​
Instant Assessment (organization level only)

When enabled, VISO TRUST automatically runs an instant assessment for every newly created relationship, analyzing publicly available data to generate an immediate risk profile. You can toggle this setting on or off per relationship at creation time.

​
Timeline

Collection request expiration: how long the vendor has to respond before the request expires. Select 7, 14, 30, 60, 90, or 120 days; the default is 30 days. Configurable per assessment via Advanced Settings. The vendor’s final reminder email states how many days remain before the request expires. No vendor response: what happens when the collection deadline passes without a vendor response:
  • Notify me (default) — send an alert to the Business Owner and assessment creator
  • Close collection request — automatically close the request when the deadline passes

​
Automate follow-up

Controls whether VISO TRUST sends follow-up questionnaires automatically when controls remain unvalidated:
  • Always ask before following up (default) — prompt the reviewer to decide whether to follow up after each assessment
  • Conditional based on residual risk — automatically follow up when residual risk reaches a threshold you set: Low, Medium, High, or Extreme
  • Use assessment concierge service — VISO TRUST manages the follow-up on your behalf

​
Analysis method

Controls whether AI alone reviews submitted artifacts, or AI plus an expert auditor:
  • AI Assessment — faster; uses Artifact Intelligence to analyze and map controls
  • AI Assessment + Auditor Review — a VISO TRUST analyst supplements the AI analysis by reviewing high-assurance artifacts (SOC 2 reports, ISO certificates, penetration tests, etc.) for qualified opinions, exceptions, and coverage gaps
You can configure the analysis method at the organization or relationship level and override it per assessment.

​
Follow-up questionnaire timeline

How long the vendor has to respond to a follow-up questionnaire before it’s considered expired. Select 7, 14, 30, 60, or 90 days; the default is 7 days. Configurable at the organization and relationship level.

​
Required artifacts

The artifact types VISO TRUST asks for by default when you send a collection request. See Artifact Type Configuration.