Compliance · Vendor due diligence

Security questionnaires, answered with evidence.

Enterprise customers send security questionnaires such as SIG, CSA CAIQ or their own spreadsheet before they buy. Cognivus helps SaaS vendors answer them accurately, assembles the evidence pack buyers ask for, and closes the gaps that would otherwise stall the deal.

What we do

  1. Answer the questionnaire in front of you, truthfully, with notes on each answer that needs a caveat
  2. Build a reusable answer library and evidence pack: policies, architecture diagram, access-control description, encryption, backup and incident response summaries
  3. Fix the gaps the questionnaire exposed, such as MFA, logging or vendor agreements, so the next answer is “yes”
  4. Publish a trust page on your site so buyers find the basics before they ask

Why accuracy matters

Questionnaire answers often become contract commitments. An optimistic “yes” can turn into a breach of contract later. We would rather help you answer “partially, with a dated plan” than overstate.

Frequently asked questions

Which questionnaires do you handle?

Standard formats such as SIG and CSA CAIQ, and custom spreadsheets and portals from individual buyers.

Can you provide a SOC 2 report?

No. A SOC 2 report is issued by an independent CPA firm. We can prepare you for a SOC 2 audit and help you answer questionnaires while you do not yet have one.

How fast can you turn one around?

Typically 3–10 business days, depending on the length of the questionnaire and how much documentation you already have.

Have a product to build or a system to secure?

Tell us what you need. You will receive a written proposal within one business day.