Security questionnaires answered from your own policies
Essentials and upWhen a customer or buyer sends you a security questionnaire, upload it and SimpleAudit drafts each answer from what you have already recorded. SIG Lite, CAIQ v4 and VSAQ are supported, along with Word and PDF questionnaires and any CSV or XLSX file with a question column. Every answer is marked as taken from your records, quoted from your policy, or AI-suggested and needing you, and you review and approve before anything is exported. Where SimpleAudit cannot back an answer, the assistant asks you about it in plain words, one question at a time, and saves your reply. If your answer means a policy has to change, it adds that update to your to-do list. When you approve a questionnaire, its answers are saved and reused on the next one.
2 a year on Essentials. Unlimited on Pro.
Updated
Read the transcript
The deal is waiting on a spreadsheet. A prospect sends a SIG Lite, and the deal waits until it comes back. Someone copies last year's answers and promises a few things you don't actually do. Your auditor finds the mismatch later. Each answer cites your policy or your records. Questions SimpleAudit can't back become plain questions for you, and any new promise puts a policy update on your to-do list. The questionnaire goes back in days, your answers match what your auditor sees, and saved answers make the next one faster.
A prospect just sent you a security questionnaire
The deal is waiting on a spreadsheet
The moment
A prospect sends a SIG Lite, and the deal waits until it comes back.
Without SimpleAudit
Someone copies last year's answers and promises a few things you don't actually do. Your auditor finds the mismatch later.
With SimpleAudit
Each answer cites your policy or your records. Questions SimpleAudit can't back become plain questions for you, and any new promise puts a policy update on your to-do list.
The outcome
The questionnaire goes back in days, your answers match what your auditor sees, and saved answers make the next one faster.
How it works
Upload the questionnaire
Drop in the file your customer sent. Pick the question column if it is not obvious, and SimpleAudit reads every question.
Review the sources and fill the gaps
See each answer next to where it came from: taken from your records, quoted from your policy, or AI-suggested and needing you. For each flagged question, the assistant asks you in plain words and saves your reply.
Approve and export
Fix what needs fixing, approve the questionnaire, and export the completed file to send back to your customer.
Key capabilities
Common formats and your own
Upload SIG Lite, CAIQ v4 or VSAQ, a Word or PDF questionnaire, or any CSV or XLSX file with a question column. A fillable PDF comes back filled in; any other PDF comes back with a Word document of your answers.
Every answer shows its source
Each answer is marked as taken from your records, quoted from your policy, or AI-suggested and needing you. You always know how far to trust it.
Unproven answers become plain questions
When SimpleAudit cannot back a question with your records or policies, it flags it instead of inventing an answer. The assistant then asks you, one at a time: "What should we tell this customer: Yes, No, or N/A?" Reply in your own words and it saves the answer.
Answers and policies stay in step
If you tell a customer something your policy does not say yet, SimpleAudit adds the policy update to your to-do list with the question, your answer and suggested wording. What you promised and what your policy says match when your auditor compares them.
You review and approve
Nothing leaves your account until you have reviewed the answers and approved the questionnaire. Then you export the finished file with a list of sources alongside it.
Approved answers are saved for next time
When you approve a questionnaire, each answer is saved to your answer library. The next questionnaire reuses it after checking it against your current policies, and you can edit or retire any saved answer.
For questionnaires you receive
This is for the questionnaires your customers send you. Vendor Management works in the other direction: it sends questionnaires to your own vendors.
Why we built it this way
“Security questionnaires eat days of a small team's time, and half the answers are ones you gave last quarter. I wanted answers that come from what you have actually recorded, with a clear label on anything that does not. If SimpleAudit cannot back an answer, it says so and leaves it to you. That honesty is the product.”
Joe, Founder
Frequently asked questions
Can’t I just paste the questionnaire into ChatGPT?
You can, and with a project folder holding your policies it will do a fair job on the easy questions. Three things are still missing. Your proof is not in the folder, so it cannot tell when a policy says one thing and your evidence shows another. The policies in it are copies, so nothing marks which one is approved or which version a customer was told about. And the model picks what to read, so it can answer from the wrong file or from memory with no way to check. SimpleAudit works in a fixed order: a fact you already confirmed, a commitment in an approved policy, then the matching sections of approved policies and nothing else. The AI may answer only with a quote from those sections, the server checks the quote is really there, and anything it cannot back is flagged for you instead of invented. If your policy and your proof disagree, it stops and asks which one you want to tell the customer. If you promise a customer something your policy does not say yet, the policy update goes on your to-do list. What you confirm is saved and used on the next questionnaire. AI with receipts.
Related Resources
Ready to try Security Questionnaires?
Included on Essentials and up. 2 a year on Essentials. Unlimited on Pro. Start a 7-day free trial on Pro to use Security Questionnaires during your trial. On Essentials, your yearly allowance starts when your subscription does. No credit card required.