TrustDesk
Synthetic demo data

Questionnaire Workspace

35 questions across 7customer questionnaires. Each answer's confidence, status, and reviewer is computed from the mapped evidence — search, filter, and open any row to see why.

Northwind Capital

Financial Services · Renewal

At Risk
5 questions$480K
1 awaiting a reviewerOpen

Meridian Health

Healthcare · New Logo

On Track
5 questions$1.2M
2 awaiting a reviewerOpen

Sterling Government Solutions

Public Sector · New Logo

Overdue
6 questions$2.1M
2 awaiting a reviewerOpen

Bluepeak Retail

Retail & E-commerce · Expansion

On Track
5 questions$150K
2 awaiting a reviewerOpen

Helios Energy

Energy & Utilities · New Logo

On Track
5 questions$640K
All answers automatedOpen

Lumen Analytics

Data & Analytics · New Logo

On Track
5 questions$320K
4 awaiting a reviewerOpen

Orbit Media

Media & SaaS · Renewal

On Track
4 questions$90K
All answers automatedOpen
QuestionEvidenceReviewer
Are AI vendors and subprocessors disclosed?
q-030 · 1 mapped control
Lumen AnalyticsPrivacy & Data Retention
Escalate47
ExpiredPrivacy / Data Protection
Are subprocessors disclosed and bound by data protection agreements?
q-009 · 1 mapped control
Meridian HealthPrivacy & Data Retention
Escalate56
ExpiredPrivacy / Data Protection
What human oversight exists for AI-generated outputs?
q-028 · 1 mapped control
Lumen AnalyticsAI & Model Governance
Needs Review64
Expiring SoonLegal
What are your patch remediation SLAs and how are they tracked?
q-012 · 1 mapped control
Sterling Government SolutionsVulnerability Management
Needs Review70
ExpiredSecurity SME
How quickly are critical patches applied to internet-facing systems?
q-020 · 1 mapped control
Bluepeak RetailVulnerability Management
Needs Review72
ExpiredSecurity SME
What is your patch management SLA for critical vulnerabilities?
q-004 · 1 mapped control
Northwind CapitalVulnerability Management
Needs Review75
ExpiredSecurity SME
What are your contractual breach notification timelines?
q-016 · 1 mapped control
Sterling Government SolutionsIncident Response
Suggested75
Expiring SoonSecurity Enablement
How does your AI functionality use customer data, and is it used for model training?
q-014 · 1 mapped control
Sterling Government SolutionsAI & Model Governance
Needs Review78
Expiring SoonLegal
What is your vendor and third-party risk management process?
q-019 · 1 mapped control
Bluepeak RetailVendor & Third-Party Risk
Suggested81
CurrentSecurity Enablement
Describe data retention for AI training datasets.
q-029 · 1 mapped control
Lumen AnalyticsPrivacy & Data Retention
Needs Review81
CurrentPrivacy / Data Protection
How are encryption keys managed and rotated?
q-002 · 1 mapped control
Northwind CapitalEncryption & Data Protection
Suggested83
Expiring SoonSecurity Enablement
Describe your incident response and breach notification process.
q-007 · 2 mapped controls
Meridian HealthIncident Response
Suggested83
Expiring SoonSecurity Enablement
How does your platform use AI, and is customer data used to train models?
q-027 · 1 mapped control
Lumen AnalyticsAI & Model Governance
Needs Review83
Expiring SoonLegal
Do you support customer-managed data deletion requests?
q-021 · 1 mapped control
Bluepeak RetailPrivacy & Data Retention
Needs Review84
CurrentPrivacy / Data Protection
How are encryption keys rotated and who has access to them?
q-025 · 1 mapped control
Helios EnergyEncryption & Data Protection
Suggested84
Expiring SoonSecurity Enablement
Describe vendor risk management for your subprocessors.
q-035 · 1 mapped control
Orbit MediaVendor & Third-Party Risk
Suggested84
CurrentSecurity Enablement
Is business continuity and disaster recovery tested regularly?
q-010 · 1 mapped control
Meridian HealthBusiness Continuity & Resilience
Auto-Approved91
CurrentAuto-Approved
Describe your incident response plan and testing cadence.
q-024 · 1 mapped control
Helios EnergyIncident Response
Auto-Approved91
CurrentAuto-Approved
Provide details on your vulnerability management and penetration testing cadence.
q-011 · 1 mapped control
Sterling Government SolutionsVulnerability Management
Auto-Approved95
CurrentAuto-Approved
Describe your cloud hosting architecture and tenant isolation.
q-018 · 1 mapped control
Bluepeak RetailCloud & Infrastructure Security
Auto-Approved95
CurrentAuto-Approved
What identity federation and MFA standards do you enforce?
q-023 · 1 mapped control
Helios EnergyAccess Control & Identity
Auto-Approved95
CurrentAuto-Approved
How is PHI encrypted at rest and how is access to it controlled?
q-006 · 2 mapped controls
Meridian HealthEncryption & Data Protection
Auto-Approved97
CurrentAuto-Approved
Do you hold current SOC 2 and ISO 27001 certifications?
q-034 · 1 mapped control
Orbit MediaCompliance & Certifications
Auto-Approved97
CurrentAuto-Approved
Describe how customer data is encrypted at rest and in transit.
q-001 · 2 mapped controls
Northwind CapitalEncryption & Data Protection
Auto-Approved100
CurrentAuto-Approved
Is multi-factor authentication enforced for administrative access?
q-003 · 1 mapped control
Northwind CapitalAccess Control & Identity
Auto-Approved100
CurrentAuto-Approved
Do you maintain a SOC 2 Type II report and ISO 27001 certification?
q-005 · 1 mapped control
Northwind CapitalCompliance & Certifications
Auto-Approved100
CurrentAuto-Approved
What is your data retention and deletion policy upon contract termination?
q-008 · 1 mapped control
Meridian HealthPrivacy & Data Retention
Needs Review100
CurrentPrivacy / Data Protection
Describe access provisioning, review, and deprovisioning controls.
q-013 · 1 mapped control
Sterling Government SolutionsAccess Control & Identity
Auto-Approved100
CurrentAuto-Approved
Confirm SOC 2 Type II and ISO 27001 certifications and availability of reports.
q-015 · 1 mapped control
Sterling Government SolutionsCompliance & Certifications
Auto-Approved100
CurrentAuto-Approved
How is cardholder data encrypted and segmented per PCI DSS?
q-017 · 2 mapped controls
Bluepeak RetailEncryption & Data Protection
Auto-Approved100
CurrentAuto-Approved
Describe encryption in transit for all external integrations.
q-022 · 1 mapped control
Helios EnergyEncryption & Data Protection
Auto-Approved100
CurrentAuto-Approved
Is there a documented business continuity plan with RTO/RPO targets?
q-026 · 1 mapped control
Helios EnergyBusiness Continuity & Resilience
Auto-Approved100
CurrentAuto-Approved
What encryption protects data processed by AI features?
q-031 · 1 mapped control
Lumen AnalyticsEncryption & Data Protection
Auto-Approved100
CurrentAuto-Approved
Confirm the TLS standards used for data in transit.
q-032 · 1 mapped control
Orbit MediaEncryption & Data Protection
Auto-Approved100
CurrentAuto-Approved
Is access reviewed periodically and revoked on offboarding?
q-033 · 1 mapped control
Orbit MediaAccess Control & Identity
Auto-Approved100
CurrentAuto-Approved

Showing 35 of 35 questions. Click any row to open the drafted answer, mapped evidence, and routing reasons.