Skip to content
Clairn— home

Unblock the questionnaire.Save CTO, engineering, founder and IT time.

Get your SIG Lite, CAIQ, or other security questionnaire answered fast and reliably.

See pricingHow it works

Flat price per questionnaire. If you would not send our answers, tell us within 14 days of delivery, before any are submitted to your buyer, and we refund you in full.

Vendor Security Questionnaire148 questions · due FridayIs customer data encrypted at rest?Yes — AES-256, keys in AWS KMSIs MFA enforced for all employees?Yes — SSO with hardware keysDo you hold a current SOC 2 Type II?Yes — report dated March 2025

How it works

Three steps. You are involved for about an hour of them.

  1. 01

    Send us the questionnaire

    Send it as xlsx, Word or PDF (export a Google Sheet to xlsx first), or give us a seat in your buyer's portal. Attach whatever policies, architecture notes and past questionnaires you already have, even if they are messy.

  2. 02

    We fill it out

    Every question gets an answer or an explicit flag where we need a decision from you. Answers are written to match what you have already told other buyers, in the language a procurement reviewer expects.

  3. 03

    You review and send

    You get the original file back, filled in, plus a short list of anything we flagged. Revisions are included for 30 days after delivery.

What we need from you: copies of the policies and past answers you already have. We do not need production access, credentials for your systems, or customer data.

Scope

What you get, and what you do not.

Written plainly so there is nothing to argue about later. If something you need is on the right-hand list, say so before you buy and we will tell you whether it is work we can do.

Included

  • Every question answered, or explicitly flagged where the answer is a decision only you can make.
  • Answers matched against your existing documented answers: trust page, prior questionnaires, MSA, and your SOC 2 report if you have one.
  • Delivered in the original file format and structure, ready to send once you have reviewed it, or entered in your buyer's portal if you grant us a seat.
  • Where one buyer sends overlapping questionnaires, answers cross-checked so they agree.
  • A gap list of anything you would be claiming but cannot currently evidence, written plainly enough to hand to your board.
  • Revisions on our answers for 30 days after delivery, and follow-up rounds for 60 days after delivery if your buyer comes back with questions on something we wrote.

Not included

  • Writing policies you do not have. We tell you which ones are missing and why they were asked for; drafting them is separate work.
  • SOC 2, ISO 27001, or any audit or readiness engagement. We are not an auditor and we do not issue attestations.
  • Claiming controls you do not actually operate. We will not write “yes” where the honest answer is “not yet”.
  • Calls or meetings with your buyer. We draft written responses to follow-up questions; you send them.
  • Legal review. We answer security questions; your counsel owns contract language.

Pricing

Priced per questionnaire, by question count.

One flat price for the questionnaire in front of you. No retainer, no seat license, no annual contract.

Lite

Up to 75 questions

$450per questionnaire

5 business days turnaround

A short vendor questionnaire or a trimmed SIG Lite.

  • Every question answered, or flagged with exactly what we need from you
  • Answers matched to what you have already told other buyers
  • Returned in the file format you sent, or entered in your buyer's portal if you grant us a seat
  • Gap list of anything you would be claiming but cannot yet evidence
  • Cross-checked across frameworks where a buyer sends overlapping sets
  • Revisions for 30 days and follow-up rounds for 60 days after delivery
Start with Lite — $450, 5 business days

Standard

Most common

76 to 200 questions

$950per questionnaire

5 business days turnaround

A full SIG Lite, or the spreadsheet a mid-market buyer sent over.

  • Everything in Lite
Start with Standard — $950, 5 business days

Complex

201 to 350 questions

$1,750per questionnaire

5 business days turnaround

A CAIQ, or an enterprise questionnaire with control-level detail.

  • Everything in Standard
  • Evidence index mapping each answer to the document it came from
Start with Complex — $1,750, 5 business days

Full money-back guarantee. If you would not be willing to send our answers to your buyer, tell us within 14 days of delivery, before any of them have been submitted, and we refund you in full.

Prices are per questionnaire, in USD. Every item that needs its own answer counts as a question. If the questionnaire lands in a different tier than you bought, we move you and settle the difference either way. For questionnaires over 350 questions, such as a full SIG, we quote before starting.

By ordering, you agree to our Terms of Service.

What you'll need

Two things to start. Everything else just helps.

To answer your questionnaire accurately we need the questionnaire and something that documents how you actually run security. If you have both of the items below, we can start.

  • The questionnaire itself

    The file your buyer sent, or a link to their portal and access to it.

  • At least one of these, whichever you have

    Your SOC 2 report or ISO 27001 certificate; a written security policy, such as information security, access control or incident response; or a questionnaire you have answered before.

Other documents help and speed things up: a disaster recovery plan, a data retention policy, an architecture diagram, a subprocessor list, a penetration test summary.