Your customer's security questionnaire, answered.
Send us the questionnaire: SIG Lite, CAIQ-Lite, or a custom sheet. We complete it with answers that match how you actually operate, and flag what needs your review. Up to 125 questions for a flat fee, three business days after the day we have your file and answers.
Who it’s for. For small companies with a customer's security questionnaire due.
$85
Flat fee, paid once. Up to 125 questions; +$45 for 50 more.
You pay on Stripe’s secure page. We never see your card details.
Refunds. If we decline your order or can't finish the work, you get a full refund. Ask before we have your answers and you get one too. The refund policy has the cases.
Who reads it. An AI model helps draft the documents we write. A human security professional reads every custom deliverable before it goes out. Who we are.
- Delivery
- 3 business days after the day we have your file and answers
- Format
- Completed .xlsx or .csv, plus a summary
- Revisions
- 1, within 3 business days of delivery
Vendor security questionnaire, up to 125 questions
What you get
- Your questionnaire returned as a completed .xlsx or .csv spreadsheet, whichever format you prefer.
- Answers grounded in your real tooling and practices, based on your intake.
- Gaps handled honestly: real controls described accurately, work in progress described as in progress.
- Anything that needs your check flagged for your review, plus a plain Markdown summary of your posture, the flagged items, and any documentation gaps.
- One revision, if your customer's reviewer sends follow-up questions. Ask within three business days of delivery.
Vendor questionnaire
What we need from you
- The questionnaire file: .xlsx, .csv, or Word (.docx). We can't work from a PDF. If it lives in Google Sheets, download it as .xlsx. We don't work from shared links.
- Short answers on your cloud provider, identity setup and MFA, existing policies or reports, and your deadline.
- A longer written intake on your actual controls, such as encryption, logging, and incident response.
- We email the questions after you pay. You answer by reply.
- Your confirmation that you may share the questionnaire and your answers with us and with our service providers, including an AI provider. If the questionnaire is under an NDA, redact your customer's name and any other third-party names first, and check what the NDA allows.
- An AI model helps draft the documents we write. A human security professional reads every custom deliverable before it goes out.
Add-on: Extra 50 questions
+$45
Adds 50 questions, up to 175, and one more business day. A full-length SIG Lite or CAIQ-Lite can run past 125 questions, so count yours before you order. Over 175? Email us the file first and we'll quote it.
What this is not
- Documentation and readiness work only. Never an audit, an attestation, or a certification. SOC 2 attestation comes from an independent CPA firm.
- We don't invent answers. If you don't run a control, we won't say you do.
- No guarantee that your customer approves. Every risk team sets its own thresholds.
- Not penetration testing or vulnerability scanning.
Practical rigor · No manufactured claims
How it works
From payment to delivery.
Step 01
You pay
On Stripe's page, for a flat fee. Tick the extra-50-questions add-on there if your questionnaire runs long.
Step 02
We send the intake
We email you the intake questions after your order comes in, and ask for your questionnaire file. After we read your file, we may send one follow-up email with questions it raises, within one business day of getting it; the days you take to answer it move your date, and our time to send it does not.
Step 03
The clock starts
Three business days after the day your completed intake and questionnaire file come back to us. The day they arrive is not one of the three. Four with the add-on.
Step 04
We deliver, and revise once
The completed questionnaire comes by email. Ask for your one revision within three business days.
Order the vendor questionnaire.
$85
Flat fee, paid once. Up to 125 questions; +$45 for 50 more.
You pay on Stripe’s secure page. We never see your card details.
Questions
Questions about the vendor questionnaire.
- What file formats can you work from?
- A .xlsx, a .csv, or a Word (.docx) file. We can't work from a PDF, and we don't work from shared links. If yours lives in Google Sheets, download it as .xlsx first.
- What if my questionnaire has more than 125 questions?
- Add the extra 50 questions for $45 and we cover up to 175, so $130 in all. It adds one business day. Over 175, email us the file first and we'll quote it.
- Will you answer yes to controls we don't run?
- No. We describe what you actually do and say plainly what is in progress. We won't invent an answer, and no one can promise your customer will approve.
- Can I send a questionnaire that is under an NDA?
- Check what the NDA allows first, and redact your customer's name and any other third-party names. You also confirm that you may share the file and your answers with us and our service providers, including an AI provider.
- How many questions does mine have?
- Count the rows that need an answer. The 2025 SIG Lite has 128 questions and CAIQ-Lite has 138, so either usually needs the add-on. Shorter custom sheets often fit in 125.
- What if we don't have all the controls asked about?
- That is normal for growing companies. We describe what you actually do, and say plainly what is in progress. Reviewers generally respond better to honest gaps than to answers the company can't back up.
- Can you do faster than three business days?
- Not at the moment. Check that three business days works for your customer's deadline before you order.
- Do you take every order?
- We may decline an order before work starts, including for a conflict of interest, or end one if we can't finish the work. If we do, you get a full refund.
Your order is covered by our terms, refund policy, and privacy notice. Questions first? Email us.
Pricing
Other orders.
- Security policies$85Information Security, Access Control, Incident Response, Acceptable Use, and Data Classification, tailored to your stack.
- 12 security policies$195The core five plus Risk Management, Vendor Management, Business Continuity and Disaster Recovery, Change Management, Encryption and Key Management, Logging and Monitoring, and Vulnerability and Patch Management.
- Template bundle$29Five editable security policy templates and a fill-in guide, as Word and PDF files. Instant download.
Need something bigger? Control matrices, gap analyses, and policy work beyond our 21-policy set are quoted.