Selling software to enterprise customers? Then you know this spreadsheet.
Before every deal closes, your customer's security team sends a questionnaire: 50–300 questions, days of work. This tool answers it for you — backed by citations from your own documents, reviewed by you, returned in the exact same file.
Enterprise customer — vendor assessment
24 of 31 answers human-reviewed
- Do you encrypt customer data at rest?Library match
- List all subprocessors that process customer data, including their location.Strong evidence draft
- Have you experienced a data breach in the last 36 months?Needs evidence
Built for the questionnaires you actually receive
See how each standard is structured and what it takes to answer it →
The AI is the assistant, not the authority. Drafts are grounded in your own policies with visible citations, a second model re-checks every claim against the evidence, and answers it cannot back up are left for a human instead of being invented.
100%
of answers pass mandatory human review before anything is exported
1 file
same spreadsheet in, same spreadsheet out — answers land in the right cells
0
answers invented without evidence — unsupported questions are flagged, not filled
From inbox to reviewed export in three steps
No sales call, no onboarding project. Upload, review, export — your first questionnaire is free.
Try it with your own filesUpload your evidence
Security policies, SOC 2 report, certificates — as PDFs. We chunk and index them in Frankfurt; nothing is used for model training.
Upload the questionnaire
Excel or CSV. The question column is detected automatically, even with ID columns, title rows or cover sheets in the way.
Review cited drafts, then export
Each draft shows the exact source snippets it relies on. Approve or edit every answer, then download the original file with answers filled in.
Everything the review actually needs. Nothing it doesn’t.
Evidence-cited drafts
Every draft names its source file and shows the snippets it used. Reviewers check the evidence, not the vibes.
Customer data is encrypted at rest using AES-256…
security-policy.pdf · “All production databases use AES-256 encryption at rest”
Original-format export
The export writes answers back into the file you received — formatting, extra columns and other sheets stay untouched.
A library that compounds
Reviewed answers feed your library. Near-identical questions on the next questionnaire are pre-answered from work a human already approved.
Honest about the gaps
A second model verifies each draft against its citations. Claims without evidence become “needs evidence” — a to-do for a human, not a hallucination for your customer.
Public trust center
Publish a trust center from your reviewed answers — deflect questionnaires before they arrive.
Try it before you sign up. No account required.
NIS2 Readiness Check
26 questions based on Section 30(2) BSIG — see where you stand in about 5 minutes. Free, no signup.
Policy Generator
Generate a practical first-draft ISMS policy tailored to your company — ready to review and adapt.
Your documents are processed in the EU
The US platforms in this category process your policies on US infrastructure. We don’t. Full subprocessor list on the trust page.
Questions, answered
Anything else? Write us — replies go to the founder, not a ticket queue.
“I built this because guessed compliance answers are a liability, not a shortcut. That’s why the AI here is allowed to say it doesn’t know.”— Kristian, founder
Is my data used to train AI models?
No. Documents are processed via Mistral AI, an EU company (Paris, France) with EU-hosted inference. Mistral does not use API customer data to train its models. Storage and database are hosted in Frankfurt, Germany.
What happens when there is no evidence for a question?
The answer is marked “needs evidence” and left to a human. The system never fills gaps with plausible-sounding text.
Which file formats are supported?
Questionnaires as .xlsx or .csv, evidence as PDF. The export returns your original spreadsheet with answers written into the right cells.
Do you charge per seat?
No. Plans are priced by questionnaires per month, not per seat.
How fast can we start?
Self-serve, no sales call. Sign in with your email, upload documents, and review your first drafted questionnaire the same hour — the first one is free.
What doesn’t it do yet?
Honest limits: no browser extension for portal auto-fill yet (on the roadmap), and drafting works best with English and German questionnaires. If you need either today, we’d rather tell you now than after signup.
Send back the questionnaire while the deal is still warm
One free questionnaire, up to 300 questions — a full CAIQ v4 or SIG Lite. No credit card, no sales call.
Start free