Vendor Security Questionnaire Response Audit
Check what a supplier told us against what they proved.
Added October 15, 2026. Written with AI assistance and checked for clarity and placeholders; not reviewed by a lawyer, accountant, clinician or other professional. How these prompts are made
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it (what [VERIFY] means).
Review a vendor's security questionnaire answers. Paste the questions and answers: [QUESTIONNAIRE]. Documents the vendor supplied: [VENDOR_DOCUMENTS]. What data they will handle for us: [DATA_HANDLED]. Check for vague answers, answers that point to policies without evidence, certifications cited without scope or date, missing items relevant to our data, and inconsistencies between answers. Do not accept assurances without proof. Return a table with Question, Answer, Evidence, Concern (red, amber, green) and Follow-up question, an overall rating from 1 to 10, and a list of conditions to put in the contract. Contract and regulatory points are [VERIFY] for [JURISDICTION]. Also suggest which unresolved items are acceptable risks with compensating controls and which should block onboarding, written as a decision for the business owner. Add a review date for the vendor. Where wording is ambiguous, show both readings and tag the point [VERIFY] rather than choosing one. Recommend that a qualified person reviews anything I plan to sign, pay or send.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.