# Supply Chain Intelligence

URL: https://avispa.ai/agent-teams/supply-chain-intelligence/

Security team

Traces software components and supplier evidence to defensible exposure and remediation decisions, using SBOMs, build provenance and KEV and EPSS context.

## Who's on the team

- **Supply Chain Lead** · Lead · Owns every approval gate and the weekly exposure, supplier and remediation reviews.
- **Build Provenance Analyst** · Reviews how artifacts were built and where they came from.
- **Remediation Reviewer** · Verifies that fixes and rebuilds actually landed.
- **SBOM Analyst** · Takes in SBOMs, checks their quality and resolves component identities.
- **Supplier Assurance Analyst** · Reviews supplier assurance evidence.
- **Supply Chain Evidence Steward** · Keeps the decision ledger and runs the daily evidence review.
- **Vulnerability Intelligence Analyst** · Prioritizes exposure with KEV and EPSS, and reviews VEX claims.

## How a team arrives

1. 1 · **Import** · Arrives switched off
2. 2 · **Connect** · Credentials stay with you
3. 3 · **Discovery** · Learns how you work
4. 4 · **You approve** · Its plan and its limits
5. 5 · **Activate** · Routines switch on

## Controls it works inside

- Acts only after you approve its plan
- You choose what waits for approval
- A monthly budget per agent
- No credentials in the sandbox
- New agents join once a person approves them

- Every connector grant is read-only.
- Every exposure decision is recorded in a decision ledger.

**More: when and where it works, and what it documents**

## When it works

- **Daily Evidence and Blocker Review** · Weekdays at 09:00
- **Weekly Review supplier assurance** · Tuesdays at 09:20
- **Weekly Triage component exposure** · Mondays at 09:10
- **Weekly Verify remediation** · Wednesdays at 09:30

Routines arrive switched off. You turn each one on.

## Where it works

- Confluence
- GitHub
- GitLab
- Quay.io
- ServiceNow
- Tenable

Each connection is granted per agent, read-only or full. [All integrations](https://avispa.ai/integrations/)

## What it documents

- A supply chain decision ledger.
- Component exposure triage.
- Remediation verification.

[All agent teams](https://avispa.ai/agent-teams/) · [Next: Virtualization & Hybrid Migration](https://avispa.ai/agent-teams/virtualization-hybrid-migration/)

## Onboard Supply Chain Intelligence with us.

[Book a demo](https://avispa.ai/book-a-demo/) · [Watch it work](https://avispa.ai/#watch)