Security Questionnaire Response
Security questionnaire holding up a deal?
We prepare clear answers using your existing policies and documents, flag anything that needs your input, and return a response package for your approval.
From CAD $1,490 for up to 150 questions
24-hour priority work is available for eligible projects, after we review your documents and confirm availability.
We confirm scope, price, and timing before you pay.
Work with us by email, phone or video. Choose the way that suits you.
How it works
- Tell us about the questionnaire and your deadline.
- If it's a fit, we confirm scope and price, then send secure instructions for the questionnaire and your documents.
- We return a response package for your review and approval.
What you receive
- Draft answers wherever your documents support them
- The source document behind each answer, where available
- A clear list of questions that need your input
- A status for every answer, so you can see what is supported and what is open
- Your review and sign-off before anything is sent
Every answer is based on your own documents. Where they don't support an answer, we flag it for you instead of guessing.
A sample response package
Illustrative example. Fictional company and documents. Not client work.
Example Co. responding to a customer's vendor security questionnaire
| Question | Draft answer | Evidence reference | Status |
|---|---|---|---|
| Is customer data encrypted at rest? | Draft from the supplied policy: production databases use hosting-provider encryption at rest. Please confirm this describes your current environment. | Fictional Information Security Policy, section 5.2 | Evidence supplied; customer confirmation required |
| Is MFA required for administrative access? | Draft from the supplied standard: MFA is required for administrative accounts. Please confirm coverage and exceptions. | Fictional Access Control Standard, section 3.1 | Evidence supplied; customer confirmation required |
| Have you completed a penetration test in the last 12 months? | No report was supplied. Please confirm whether testing was performed and provide the report if available. | None supplied | Evidence gap; no yes/no claim drafted |
| Do you hold a SOC 2 Type II report? | No report was supplied. Please confirm whether a current report exists before an answer is drafted. | None supplied | Evidence gap; customer input required |
What we need from you
Common formats and evidence: SOC 2, ISO 27001, SIG Lite, CAIQ, and vendor security assessments.
- The questionnaire
- The security policies, procedures, or reports you already have
If you have little documentation, say so in the form. We'll tell you what we can realistically prepare.
Scope and pricing
- Up to 150 questions: from CAD $1,490
- 151 to 300 questions: from CAD $2,400
- More than 300 questions: quoted after review
Priority is confirmed in your quote, after we review your documents.
Before you inquire
What if our documentation is incomplete?
Tell us what you have. We flag questions that need your input and confirm what can be prepared before you pay.
Who approves and sends the answers?
You review and approve the response package and remain responsible for the final answers you send.
Is 24-hour priority guaranteed?
No. Please include your deadline so we can assess whether a priority slot is available.
What this does not include
- Certifications, audits, or penetration tests
- Claims your documents don't support
Request a quote
Tell us about the questionnaire. No documents needed yet.
Leave out documents and sensitive details. Name and email are required. "Not sure" is fine.