Vinmar — Customer Success Report

1. Legal Document Automation & AI Review

Category: GRC — AI / HR compliance automation

Description: A full legal operations automation suite covering self-service NDA generation, AI-powered contract review, and a governed approval workflow. Requestors submit an NDA request via a branded web form; the system formats the document, routes it for approval, and generates a countersigned PDF — without requiring manual legal team involvement for standard agreements.

Business Problem Solved: Legal and compliance teams spend significant time on routine contract requests and document review. This use case automates the end-to-end NDA lifecycle and uses an AI Corporate Paralegal agent to triage and analyze third-party documents, freeing legal staff for higher-value work.

Integrations: Blink Web Forms, Blink AI Agents (Vinmar Legal Triage Agent), PDF generation, Email (Blink native)

2. Endpoint & Asset Inventory

Category: Other — Endpoint hygiene & MDM ops

Description: A multi-source endpoint inventory automation that pulls device records from Absolute, SentinelOne, Tanium, Entra, and ThreatLocker, normalizes and deduplicates the data against Blink Tables, and produces a unified asset registry. Each source runs as a discrete workflow feeding a shared data model; a consolidated device table, an HTML compliance dashboard widget, and scheduled email reporting distribute inventory and registration-change insights to IT and management.

Business Problem Solved: Enterprises managing endpoints across multiple security and MDM tools lack a single authoritative device inventory. This use case aggregates device data from five distinct platforms into one normalized view, enabling accurate asset coverage analysis, identifying unmanaged or orphaned endpoints, and surfacing device registration changes and compliance status to both IT and management on a recurring basis.

Integrations: Absolute, SentinelOne, Tanium, Entra, ThreatLocker, Blink Tables, Email (Blink native), PDF Generation

3. Agentic Data-Driven Investigation

Category: SOC — Agentic SOC

Description: An on-demand agentic investigation workflow where analysts submit a natural-language question and receive an AI-generated HTML report. The underlying agent has access to data query tooling (SQL) and email capabilities, enabling autonomous multi-step investigation without predefined logic paths.

Business Problem Solved: Security analysts face high cognitive load when correlating data across disparate sources. This use case deploys a conversational AI investigator that can autonomously query structured data, reason over findings, and produce formatted investigation reports — reducing time-to-insight for ad hoc security questions.

Integrations: Blink AI Agents (Data Assistant), Blink Tables (via SQL query agent tool), Email

4. Utilities & Subflows

These workflows are infrastructure components — subflows invoked by parent workflows, test data generators, or standalone agent tools. They do not represent end-to-end business outcomes and are excluded from KPI counts.

5. Tanium Vulnerability Reporting

Category: Vulnerability Mgmt — Vuln scanning ingest & report

Description: A scheduled pipeline that queries Tanium for vulnerability findings counted by severity, records the results in Blink Tables for trending, refreshes an HTML dashboard widget showing vulnerability counts over time, and distributes a PDF vulnerability dashboard to management on a recurring basis.

Business Problem Solved: Security and IT leadership need a recurring, trackable view of vulnerability exposure by severity without manually pulling reports from Tanium. This use case automates weekly vulnerability data collection, historical trending, and executive-ready reporting in a single chained workflow.

Integrations: Tanium, Blink Tables, Email (Blink native), PDF Generation

Strengths

• Differentiated AI-native use case: The legal automation suite (NDA generation + agentic contract review) is a non-standard Blink deployment that extends automation into legal operations — a high-value, underserved domain. The "Vinmar Legal Triage Agent | AI Corporate Paralegal & Contract Analyst" is a purpose-built AI agent, reflecting real investment in agentic capability.
• Multi-source endpoint inventory architecture: Building a unified asset registry from Absolute, SentinelOne, Tanium, Entra, and ThreatLocker simultaneously demonstrates a mature understanding of how to use Blink Tables as a normalization layer across heterogeneous security tooling.
• Governed self-service via Web Forms: The NDA Secure Submission Workflow uses a branded web form with an approval gate — a production-ready pattern that enables business users to self-serve without bypassing legal controls.
• Security-conscious agent tooling: The Agent SQL Query Data subflow includes a Python-based SQL injection threat analysis step before execution — showing deliberate attention to safe agentic tool design.
• Endpoint use case matured into a full reporting pipeline: What began as three device-ingestion workflows has grown into a nine-playbook pipeline — adding Entra and ThreatLocker as sources, a consolidated device table, an HTML compliance widget, and scheduled email distribution to both IT and management. The daily Device Registration Type Changes Report (26 executions/12mo) is the account's highest-volume workflow.
• First production vulnerability metrics pipeline: The new Tanium Vulnerability Reporting use case chains data collection, historical recording, dashboard refresh, and executive email distribution into one weekly scheduled flow — establishing a repeatable pattern that could extend to other vulnerability or EDR data sources.

Gaps

• Low production execution volume: 14 of 23 workflows have zero executions in the last 12 months. Legal operations, agentic investigation, and infrastructure subflows are well-designed but not yet in active production use. The priority should be identifying what is blocking go-live across the legal and SOC workspaces.
• Scheduled triggers now live for device workflows: The Device Registration Type Changes Report (daily) and Tanium - Vulnerability Count By Severity (weekly) now run on scheduled triggers, driving the bulk of the account's execution volume. Extending scheduled triggers to the remaining on_demand device inventory workflows (SentinelOne, Tanium, ThreatLocker device syncs) would further increase asset hygiene coverage.
• SOC coverage is nascent: The Agentic Data-Driven Investigation workflow is the only SOC-category automation, and it has no executions. With SentinelOne already connected in the endpoint workspace, there is a clear opportunity to extend into alert triage and EDR response.
• Metric tracking infrastructure is idle: The Calculate/Update Metrics subflow tracks Protection_Rate, Automation_ROI, and MTTR — but the parent workflows feeding it have zero executions, meaning the metrics dashboard has no data.

Integration Ecosystem