Security questionnaires, answered from what your owner signed off.

01In practice

The buyer's own file, filled in.

Their Excel or Word questionnaire comes back complete, in their format. Anything still open reads "Answer to follow" for the buyer, while your rep sees who owns it.

02What Girard handles

Every question, answered and signed off.

• Every question answered. Matched to signed-off statements, with AI drafting the rest for the owner to sign off.
• Standard questionnaires mapped. SIG Lite and SIG Core 2026, CAIQ 4.1, HECVAT 4 and the new AI questionnaires, plus any custom form.
• A trust page. Your published security posture, with a click-through confidentiality agreement before the audit report downloads.
• A chat that invents nothing. The trust page chat returns signed-off answers word for word.
• Stale-answer alerts. You hear when evidence expires or a source document changes.
• Portal filling. A browser extension fills OneTrust, Whistic, ServiceNow, Coupa and Ariba questionnaires.
• Security terms you can negotiate. Data location, penetration test frequency, subprocessor objections and AI training on customer data.
• Notices where you work. Slack, Teams and your sales system.
• Other languages. For buyers who send questionnaires in their own language.

03Where Girard goes further

Beyond the questionnaire.

• Answers that can't contradict the contract. "72 hours" can't go out when the signed addendum says 48.
• Commitments after signing. When a subprocessor changes, Girard lists which customers must be told and by when, and drafts the notices.
• An evidence date on every answer. So each answer holds up in the buyer's own review.
• Fix-it promises, tracked. Shown to the buyer with the date your company committed to, and chased inside your company until done.
• The yearly re-review, as changes. Buyers get only what changed since last year's answers.
• Scope pushback. For a smaller deal, Girard suggests your rep offer the trust page and SIG Lite instead of a 400-question form.
• An answer pack for buyers' tools. Machine-readable and keyed to SIG and CAIQ question numbers.