From documents
Answers come from facts, not recall
Each answer is drafted from the client's confirmed facts and the documents already in their workspace, and shows which fact or quote supports it.
Loading…
Security questionnaires
Answers are drafted from your own confirmed documents and marked confirmed, to check, or a gap. Nothing is invented to fill a row, and every answer stays yours to sign off.
Doing this for clients rather than your own company? The same page for a practice.
Free · No sign-up · Up to ten websites
A security questionnaire is the spreadsheet a customer sends before signing: a few hundred questions about how you handle their data, their people and their incidents.
Most of what it asks you have already written down somewhere — in the record of processing, the retention schedule, the sub-processor list. The cost is finding it again under time pressure, and the risk is answering from memory something the documents contradict.
What it has to cover
From documents
Each answer is drafted from the client's confirmed facts and the documents already in their workspace, and shows which fact or quote supports it.
Honest statuses
An answer the facts support is marked confirmed. One that needs your eye is marked to check. One with nothing behind it is a gap with the question to ask — never a plausible yes.
Reusable
Wording you approve becomes part of your firm's library and is offered for the same question on the next client, so the second questionnaire costs less than the first.
Every vendor fact comes from our own registry: 225 vendors with the date each entry was checked.
Work from the questionnaire as it arrived, in the buyer's own format and order, rather than re-keying it.
Each drafted answer names the confirmed fact or quotes the document behind it, so a reviewer can check it without asking you.
Unsupported questions turn into a short list to put to the client, in plain language, instead of blocking the whole return.
Approved wording is reused across clients where the underlying facts match, and stays your firm's property.
Return the completed questionnaire as it came, under your brand.
Answers read the same confirmed facts as the client's documents, so the questionnaire and the DPA cannot disagree.
Add the buyer's file to the client's workspace. Questions are read in their original order and wording.
Answers are drafted from the client's confirmed facts and documents, each marked confirmed, to check, or a gap.
Read the drafts, put the short gap list to the client, and export the completed questionnaire under your brand.
Enter up to ten client websites. Free, no sign-up, the first report in about a minute.