Vendor security questionnaires
Your deal is stuck on a security questionnaire.Back to you in five business days.
Send us the SIG Lite, the CAIQ, or the 300-row spreadsheet your prospect's security team emailed over. You get back reviewed, internally consistent answers in the original file, ready to send without rewriting a line.
Flat price per questionnaire. Full money-back guarantee if the draft is not something you would send.
How it works
Three steps. You are involved for about an hour of them.
- 01
Send us the questionnaire
Any format: xlsx, Word, PDF, Google Sheets, or a login to your buyer's portal. Attach whatever policies, architecture notes and past questionnaires you already have, even if they are messy.
- 02
We fill it out
Every question gets an answer or an explicit flag where we need a decision from you. Answers are written to match what you have already told other customers, in the language a procurement reviewer expects.
- 03
You review and send
You get the original file back, filled in, plus a short list of anything we flagged. Revisions are included until it goes out the door.
What we need from you: read access to the policies and past answers you already have, and a 20-minute kickoff call if anything is ambiguous. We do not need production access, credentials, or customer data.
Scope
What you get, and what you do not.
Written plainly so there is nothing to argue about later. If something you need is on the right-hand list, say so before you buy and we will tell you whether it is work we can do.
Included
- Every question answered, or explicitly flagged where the answer is a decision only you can make.
- Answers matched against your existing documented answers: trust page, prior questionnaires, MSA, and your SOC 2 report if you have one.
- Delivered in the original file format, in the structure it arrived in, so you can forward it as-is.
- A gap list of anything you would be claiming but cannot currently evidence, written plainly enough to hand to your board.
- Revisions on our answers until you send the questionnaire, including follow-up rounds if procurement comes back on something we wrote.
Not included
- Writing policies you do not have. We tell you which ones are missing and why they were asked for; drafting them is separate work.
- SOC 2, ISO 27001, or any audit or readiness engagement. We are not an auditor and we do not issue attestations.
- Attesting to controls you do not actually operate. We will not write yes where the honest answer is not yet.
- Entering answers into your buyer's portal unless you grant us a seat. Without access we deliver a document you paste in.
- Legal review. We answer security questions; your counsel owns contract language.
Pricing
Priced per questionnaire, by question count.
One flat price for the questionnaire in front of you. No retainer, no seat licence, no annual contract.
Adds 50% to the price and delivers in 48 hours instead.
Lite
Up to 75 questions
$89per questionnaire
5 business days turnaround
A short vendor questionnaire or a trimmed SIG Lite. One file, one round.
- Every question answered or explicitly flagged
- Answers matched to what you have already told other customers
- Returned in the file format you sent
- Revisions until you send it
Standard
Most common76 to 200 questions
$149per questionnaire
5 business days turnaround
A full SIG Lite, a CAIQ, or the spreadsheet a mid-market buyer sent over.
- Everything in Lite
- Gap list of anything you would be claiming but cannot yet evidence
- 20-minute kickoff call to settle anything ambiguous
- Follow-up rounds on our answers if procurement comes back
Complex
201 to 400 questions
$329per questionnaire
7 business days turnaround
A full SIG, a HECVAT, or an enterprise questionnaire with control-level detail.
- Everything in Standard
- Cross-checked across frameworks where a buyer sends overlapping sets
- Answers entered directly in your buyer's portal if you grant access
- Evidence index mapping each answer to the document it came from
Custom
400+ questions, portal-based reviews, or several at once
Send the file or a screenshot of the portal. You get a fixed quote and a start date back, usually same day.
- Questionnaires over 400 questions
- Portal-only reviews: Whistic, OneTrust, Vanta Trust Center, SecurityScorecard
- Several questionnaires from different buyers in the same week
- Recurring annual reassessments for an existing customer
Full money-back guarantee. If the draft is not something you would be willing to send to your customer, tell us and we refund you in full.
Prices are per questionnaire, in USD. Question count is whatever the file actually contains — if it lands in a different tier than you bought, we move you and settle the difference either way.