How to answer a vendor security questionnaire
The process end to end: triaging questions into four buckets, answering from cited evidence, handling real gaps honestly, and making the next questionnaire cheaper than this one.
Read the guide →
Guides
Answering security questionnaires
Practical guides for the teams who actually fill these in — what the reviewer is checking, which format you have been sent, and what to have ready before the next one lands.
CAIQ vs SIG vs VSA: which questionnaire is which
Who publishes each format, how they differ in scope, length and cost, why VSA and VSAQ are not the same thing, and where SOC 2 and ISO 27001 actually fit.
Read the guide →The evidence you need before answering
The six core documents, what each must contain to settle a question, the specifics reviewers ask for most often, and what to do about documents you do not have yet.
Read the guide →Answers you can prove
citeproof answers questionnaires from your own evidence documents and cites the exact passage behind every answer — so a reviewer asking "where is that documented?" gets an answer in seconds.
See how citeproof works →