For small B2B SaaS teams
Send us the SIG Lite, CAIQ, or custom spreadsheet your buyer sent you, plus whatever docs you have. We return every answer drafted and cited to your own documents, with the gaps flagged, in the original file format. You review and approve every answer before it goes anywhere.
No calls, no software to learn. Full refund if the draft isn't usable.
| Question | Draft | Status |
|---|---|---|
| Is data encrypted at rest? | Yes. AES-256 via AWS KMS. [Security Policy ยง4.2] | High |
| Is MFA enforced for all staff? | Yes, via Google Workspace SSO. [Trust page] | High |
| Annual penetration test? | Most recent test: March. [SOC 2 summary] | Medium |
| Do you have cyber insurance? | No evidence found. | Needs you |
Pick a size, pay at checkout, and upload the questionnaire plus your security docs. Five minutes, no call.
Each answer is drafted from your own documents, with a confidence level and a citation to the source. Anything we can't support from your docs is flagged, not guessed.
Within 24-48 hours you get the filled file in its original format, plus a review sheet listing the questions only you can answer. You approve, then you submit.
One price per questionnaire. No subscription, no seats.
Up to ~150 questions
$299
Up to ~400 questions (SIG Lite, CAIQ)
$599
400+ questions, portals, multiple files
Quote
Repeat orders get cheaper. We keep a private answer library for your company (deleted on request), so your next questionnaire starts from answers you've already approved.
Standard orders come back within 24-48 hours of receiving your files, and Large orders within 48 hours. If we miss the deadline, or the draft isn't usable as a starting point for your submission, tell us within 14 days and we'll refund the order in full.
You're trusting us with sensitive material, so here's exactly what we do and don't do. We are a small company. We do not hold a SOC 2 report or ISO 27001 certification ourselves, and we won't pretend otherwise.
Your files are used to draft your answers and to maintain your private answer library. Never shared with other customers, never sold, never used to train AI models.
Email us and we'll delete your files and answer library within 30 days and confirm in writing. Happy to sign your NDA before you upload.
Drafting uses an AI model provider under terms that bar training on your data. Our full list of subprocessors is in our privacy notice.
Yes, mostly. Drafts are produced by an AI system working from your documents, with a citation for each answer so you can check where it came from. It isn't a substitute for your judgment: answers in a security questionnaire become commitments to your buyer, so you review and approve every answer before you submit anything. Questions your documents don't answer are flagged for you, not guessed.
Answers are only as accurate as the documents you give us, and we can't verify your actual controls. That's why every answer carries a source and a confidence level, and why you approve each one.
Excel (.xlsx), Word (.docx), and CSV, returned in the same format with answers filled in. For web portals (OneTrust, Whistic, etc.), send us an export or copy of the questions and we'll return a sheet you can paste from.
Yes. Policies, a trust page, or even a short description of your setup is enough to start. You'll just have more items on the review sheet.
No. We send the draft to you; you review it and submit it to your buyer.
Tell us within 14 days and we'll refund the order in full.
Checkout will be handled securely by Stripe. You'll get an order number by email.
Secure upload links are opening soon. For now, send your questionnaire and documents to hello@vendorclerk.com once we've confirmed your order.
Upload files · opening soonWithin 24-48 hours: the filled questionnaire in its original format, plus a review sheet of anything that needs your input.