Vendor security-review reminder from a maintained review register

Each scheduled run sends one focused reminder per due, incomplete vendor review and ignores completed or future-dated records.

Starter: On a schedule (e.g. every Monday morning)

1. Read the vendor-review registerSheetsUse Sheets 'Get sheet contents' to read each vendor's internal owner, review due date, data-use note, and review status.
2. Filter to due, incomplete reviewsUse 'Filter a list' to keep vendors whose review date is inside the reminder window and whose status is not complete.
3. Remind each internal ownerGmailUse 'Repeat for each' with Gmail 'Send an email' to send the owner the vendor name, due date, approved checklist link, and request to record a decision in the Sheet.

• Vendor — Vendor name from the review Sheet. (e.g. Acme Support)
• Review due date — The manually maintained deadline. (e.g. 2026-10-15)
• Internal owner — Person accountable for the review. (e.g. security-owner@example.com)
• Checklist link — The approved internal review checklist. (e.g. https://docs.google.com/document/d/example)

Paste this draft into Google Workspace Studio's Describe it with AI box, then review and adjust the flow it builds. This is Google's Gemini feature — CertPilot does not run any AI.

• An eligible Google Workspace edition with Workspace Studio and Gemini enabled by your admin.
• Access to Sheets and Gmail (subject to your admin's Studio step controls).
• A maintained vendor-review Sheet with owner, due date, status, and approved checklist-link columns.

Security notes

• Keep detailed assessment evidence in your controlled review system; the reminder email should include only the minimum routing context.
• Restrict the Sheet because vendor risk notes and ownership can be sensitive.
• Subject to your admin's Studio controls and DLP policy.

What it does not do

• Does NOT assess the vendor, fetch external evidence, approve the vendor, or verify review completion.
• The flow relies entirely on dates, owners, and statuses maintained in the Sheet.
• No CertPilot connector or vendor integration is involved.

• Workspace Studio test runs take real actions — this test really sends reminder emails.
• Use a test Sheet with one completed review and one due review, both assigned to your own address.
• Confirm that only the due, incomplete review sends an email and that the checklist link is correct.

Primary source

Last verified 26 August 2026

Related recipes

• Vendor intake register with owner notification and requester receipt
• External-sharing register review reminder (from a maintained Sheet)
• Renewal reminder from a renewals Sheet

← All Workspace Studio recipesBuild your own flow blueprint