Pick ready-made steps from the Teddy library and click them together into the processes your program needs: access reviews, vendor onboarding, incident reports. Build it once, and your team or Teddy’s agents run it every time, with each step logged as evidence.
Workflows is coming soon
Quarterly access reviewEvery quarter · queuedStep 2 of 4 · owners confirming in Slack4 of 4 steps · evidence attached to A.5.18QueuedRunningDoneVendor onboarding · Bluefin Systems LtdNew vendor in the registerStep 3 of 5 · checking the security clausesWaiting for your approval · breach notice clauseApproved · vendor logged in the registerQueuedRunningApprovalDoneApproveIncident in 24 hours · NIS2Incident reported at 09:12Step 1 of 4 · classifying the incidentEarly warning drafted · due in 21 hoursQueuedRunningReviewAnnual policy review · ISO 27001, TISAX®Every year · queuedStep 2 of 3 · 11 of 18 policies checked3 of 3 steps · 18 policies currentQueuedRunningDoneNew AI system · support chatbotAdded to the AI registerStep 1 of 5 · collecting system detailsStep 3 of 5 · classified as limited riskQueuedRunningRunningAccess reviews, vendor onboarding, incident reports, policy reviews. Every team has its own recurring processes, with its own steps, owners, tools and approvals. Rigid templates don’t fit them, and checklists and tickets don’t run anything.
Your steps, your owners, your approvals. Not a vendor’s template you have to bend your company around.
On a schedule or when something happens, even when the person who set it up has moved on.
Every run is logged and attached to the controls it proves. No reconstructing evidence before the audit.
The checklist is from 2023, the ticket has been open since June and its assignee has left, and a chatbot writes a procedure but runs nothing. With Teddy, you click your own process together from library steps, it runs every quarter and leaves its evidence behind.
Workflows are made of small, ready-made steps. You click them together in the builder, people approve where it matters, and every run leaves a record.
Choose steps from the library and put them in order: pull an access list, ask an owner, request approval, check a contract clause, update a register, attach evidence. Or start from a ready-made workflow.
Agents do the work, people decide where it matters. Each step shows who runs it: an agent, a person or a named approver.
Every quarter, when a new vendor is added, when an incident is reported. Anyone on the team can start a workflow, and it runs the same way every time.
Each step is logged with who did what and when. The result is attached to the controls it proves, ready for your auditor.
Each workflow is built from library steps and mapped to the requirement it serves. Use it as it is or adapt it to your company.
Collect the agreement, check the security clauses and the transfer basis, log the vendor.
DORAISO 27001Pull access lists, ask owners to confirm, revoke stale accounts, attach evidence.
ISO 27001SOC 2Classify the incident, draft the early warning, get approval, notify the authority.
NIS2DORADocument the activity, link vendors and assets, check the legal basis.
GDPRRegister the system, classify it under the AI Act, name an owner, set up monitoring.
EU AI ActISO 42001Check each policy against current controls, collect owner sign-off, publish the new version.
ISO 27001TISAX®In the Teddy CISO Panel, CISOs and GRC managers decide which workflows and steps come next. Share the processes you run every quarter, and we build them into the library.
Workflows is coming soon. Early access is available today, together with a demo. Teddy’s agents already run evidence collection, policies, questionnaires, contract checks and gap audits.
Yes. We give early access to Workflows together with a demo. Book a demo and tell us which processes you want to model first.
Agents do individual pieces of work, such as collecting evidence or checking a contract. Workflows chain those pieces together with human decisions into a complete process that runs on repeat.
Yes. In the builder you pick steps from the library, put them in order and decide who runs each one. You can start from a ready-made workflow or from an empty canvas.
You decide which steps need a person or an approval. Nothing irreversible happens without sign-off, and every step is logged.
Workflows is coming soon. Book a demo and ask for early access.
