Frontier Makes TPRM AI Agents Compatible with Microsoft 'Copilot Cowork,' Launches Vendor Due Diligence as First Feature

■ Overview Frontier Advisory and Consulting Inc. (HQ: Shinjuku-ku, Tokyo; CEO: Yohei Shoda), a professional firm specializing in digital governance, announced that its suite of AI agents, 'Frontier TPRM Agents,' which helps automate Third-Party Risk Management (TPRM), is now compatible with Microsoft's agent function 'Copilot Cowork.' As the first phase, the company has begun offering a vendor due diligence (DD) function. Previously, the company provided this service as a plugin operating on Anthropic's 'Claude Cowork.' By now offering it as an AI agent that runs on the 'Copilot Cowork' agent function of Microsoft 365 Copilot, the company has established a system that allows customers to choose the delivery format according to the AI infrastructure they use. ■ Background In June 2026, Microsoft began the general availability of 'Copilot Cowork,' an agent function that automates complex and time-consuming business tasks from end to end. As the number of companies adopting Microsoft 365 Copilot as their business foundation grows, there is an increasing need to utilize AI agents within the security and compliance control framework of their existing Microsoft 365 environment. The company had previously offered 'Frontier TPRM Agents' as an AI agent based on Anthropic's 'Claude.' To respond to the diversification of AI platforms used by customers and to enable TPRM automation in more customer environments, the company has now made the service compatible with Copilot Cowork. ■ Features Offered in the Copilot Cowork Version (Phase 1: Due Diligence at Contract Time) As the first phase, the following six use cases are provided for the due diligence (DD) process at the time of contracting with a vendor: - UC-01 Supplier Corporate Evaluation: Create company profiles from public information and web searches. - UC-02 Materiality Rating: Automated Tier 1/2/3 determination based on a 5-axis evaluation. - UC-03 Market Evaluation: Research on market structure, alternative suppliers, and competitive strength. - UC-04 Control Framework Evaluation: Automated generation of evaluation sheets by tier and validation of response plausibility. - UC-05 Gap Analysis & Improvement Recommendations: Scoring, heatmaps, and formulation of improvement roadmaps. - UC-06 Integrated DD Report: Integrated analysis of all use case results and a decision-making report for management. The Copilot Cowork version operates within the customer's Microsoft 365 environment and can be used in conjunction with the security and compliance controls of Microsoft 365, such as access control and audit logs. Business users can operate it in a chat format, requiring no knowledge of command lines or programming. ■ Future Plans (Sequential Realization of Claude Version Features) The company plans to sequentially implement the features already available in the Claude version for the Copilot Cowork version as well. Specifically, this includes continuous monitoring functions during the contract period (5 use cases) and company-wide centralized risk analysis, evaluation, and TPRM report generation functions (3 use cases). Ongoing Monitoring Functions (5 Use Cases) - UC-07 Change Detection: Periodically detects changes in public information regarding a supplier's finances, management, incidents, etc. - UC-08 SLA Evaluation: Compares SLA reports with KPI benchmarks to detect deviations and analyze trends. - UC-09 Periodic Re-evaluation: Periodic re-evaluation of the control framework and analysis of differences from the previous evaluation. - UC-10 Incident Detection & Impact Assessment: Incident detection and impact assessment through analysis of reports. - UC-17 Cross-sectional Monitoring: Batch execution, prioritization, and cross-sectional view for multiple suppliers. Company-wide Analysis & Reporting Functions (3 Use Cases) - UC-16 Concentration Analysis: Visualizes concentration levels across three main axes (supplier, region, common services/infrastructure), providing an overall judgment and comparison with the previous period. - UC-16b Concentration Risk Evaluation: Conducts a structured evaluation of concentration points across 6 scenarios ('Probability x Impact x Existing Controls x Residual Risk') and proposes improvement measures. - UC-13 TPRM Report Generation: Generates an 8-chapter report integrating portfolio overview, KRI/KPI, risk type evaluation, concentration risk, trigger excesses, and emergency response items. By sequentially offering these features in the Copilot Cowork version, the company aims to cover the entire TPRM lifecycle—from initial DD to ongoing monitoring and company-wide risk assessment for management reporting—on the AI platform of the customer's choice. ■ About Frontier TPRM Agents 'Frontier TPRM Agents' is a solution that automates various TPRM tasks using AI agents. From supplier evaluation to ongoing monitoring, it significantly reduces manual workload while supporting the decision-making of staff. The following design philosophy and value proposition are common, regardless of the AI infrastructure or platform. - Human-in-the-Loop: The AI agent presents recommended judgments, but the final decision-maker is always the user (human). It is based on a 'semi-automated' model where AI handles routine collection, analysis, and documentation, while humans intervene when their judgment is required. - Complete Traceability: All processing steps are recorded to enable subsequent tracking. AI-generated results are given a confidence level (high/medium/low) to make the reliability of judgments transparent. Information that could not be retrieved is also explicitly stated. - Sub-Agent Review: A review agent, independent of the judgment agent, performs quality verification to detect hallucinations (generation of factually incorrect information by AI). - Efficiency: Reduction of man-hours compared to manual work by consultants. - Quality Homogenization: Consistent application of evaluation criteria and structural prevention of omissions and errors. - Lead Time Reduction: Shortening of the calendar days from work start to completion. ■ Service System The company offers four services to support customers' TPRM posture in multiple ways, centered on Frontier TPRM Agents. 1. TPRM Posture Assessment & Design We assess the customer's current TPRM posture against external regulations and industry standards, and design a target state (To-Be) and implementation roadmap. 2. TPRM Practical Support (DD & Monitoring) Our consultants directly support supplier screening (DD) and monitoring tasks while utilizing Frontier TPRM Agents, accommodating requests from spot support during busy periods to ongoing outsourcing.