Challenge

M&A Due Diligence Compliance Analyzer with Mastra AI

Financial institutions conducting bank M&A and private equity acquisitions struggle to audit acquired portfolio companies for hidden regulatory and cybersecurity risks. Build an automated due diligence agent using Mastra AI in TypeScript to ingest data rooms, audit compliance documentation, and flag unmitigated vulnerabilities. Achieve 90%+ recall on hidden regulatory non-compliance findings.

CybersecurityHosted by Vera
Challenge brief

What you are building

The core problem, expected build, and operating context for this challenge.

Build an automated M&A compliance audit workflow using Mastra AI in TypeScript to inspect virtual data room filings and detect regulatory risk exposures.

Delivery guide

How work is evaluated

Evaluation

Evaluates due diligence audit accuracy and completeness of flagged compliance deficiencies.

Datasets

Shared data for this challenge

Review public datasets and any private uploads tied to your build.

Evaluation rubric

How submissions are scored

These dimensions define what the evaluator checks and which criteria separate a passable run from a strong one.

Dimensions
2 scoring checks
Binary
2 pass or fail dimensions
Ordinal
0 scaled dimensions
Dimension 1

unencrypted_pii_flag_test

Verifies that unencrypted storage finding is caught and results in HIGH risk classification

Binary check

This dimension contributes its full weight only when the submission satisfies the requirement. Partial credit is not awarded.

Dimension 2

finding_recall

Recall score of ground-truth non-compliance issues identified • target: 0.9 • range: 0-1

Binary check

This dimension contributes its full weight only when the submission satisfies the requirement. Partial credit is not awarded.

Learning goals

What you should walk away with

  • Configure Mastra AI Agent workflows with TypeScript schema definitions

  • Parse multi-document virtual data room repositories containing audit records

  • Build compliance rule evaluation nodes for detecting unmitigated AML/SOC2 deficiencies

  • Generate actionable audit executive summary reports with structured risk metrics

Resources and assets

Reference links and supporting material

Dataset notes

Dataset of 50 virtual data room document bundles containing disguised regulatory audit findings and compliance logs.

How this agent runs

Evaluates due diligence audit accuracy and completeness of flagged compliance deficiencies.

Challenge input

JSON data room object with document titles, text chunks, and category labels

Mastra AI

TypeScript-native agent framework

Evaluated output

JSON summary with aggregate_risk, non_compliance_findings array, and pass_recommendation

Checks for
  • Verifies that unencrypted storage finding is caught and results in HIGH risk classification
  • Recall score of ground-truth non-compliance issues identified • target: 0.9 • range: 0-1
Proof of success
  • Benchmark: AuditRisk-Eval
  • Finding Recall target: 0.9
  • 1 public reference case
Runtime evidence
  • JavaScript execution harness
  • javascript sandbox (unavailable on Versalist)
View technical recipe

Configured tools

Action Space
  • Mastra AI · Required
Orchestration
  • Mastra AI · Required

Evaluation contract

  • unencrypted_pii_flag_test · Weight 1
  • finding_recall · Weight 1

Recipe state

This is a preview. The configuration can change before the evaluation recipe is locked.

Frequently Asked Questions about M&A Due Diligence Compliance Analyzer with Mastra AI