Questionnaires
Security questionnaire automation
Answer inbound security questionnaires with AI grounded in your own controls (included on every paid plan), and send auto-scored ones to your vendors.
Security questionnaires eat days on both sides of a deal. Keel automates both: when a prospect sends you one, it drafts honest answers grounded in your own controls and policies; when you need to assess a vendor, it assembles a structured, auto-scored questionnaire from a library of 100+ questions.
The problem
A questionnaire is a day of copy-paste, twice
Answering a prospect’s 200-row spreadsheet from memory and old docs is a day gone. Building one to send a vendor, then hand-grading the replies, is another. Both are repetitive work that should be grounded in what you already have.
Capabilities
What Security questionnaire automation does
Answer inbound questionnaires (sell-side)
Paste a prospect’s questions and Keel drafts answers from your own frameworks, controls, and policies: honest, grounded, and flagged where you should confirm internally rather than guess.
Grounded, not guessed
Every answer runs retrieve → draft from your own material → faithfulness check → abstain. If nothing relevant is retrieved, no model is called at all. If the draft cites a source that was not retrieved, or says more than that source supports, it is held for review instead of sent.
It tells you when it does not know
A question your evidence cannot answer comes back marked “needs review”, not filled in confidently. That behaviour is enforced by tests, not by a prompt: no answer can ship without at least one citation, and a near-match from your answer bank is only ever suggested, never auto-filled.
Build and send assessments (buy-side)
Assemble a structured vendor questionnaire from a curated library of 100+ questions, describe the vendor and your concerns, and send it, consistent and on-brand.
Auto-scoring
Vendor responses are auto-scored so you get a consistent risk read without grading every answer by hand.
Collaborative portal
Vendors answer in a portal and can invite colleagues to help, so responses aren’t bottlenecked on a single contact.
Outcomes
Why it matters
- Turn a day of questionnaire copy-paste into minutes of review
- Answer prospects from your real posture, not your memory
- Send consistent, auto-scored questionnaires to vendors
- No fixed annual questionnaire cap: AI answering is metered by credits and included on every paid plan
- Keep humans in the loop: every AI draft is reviewed before it’s sent
Get audit-ready, and prove it
Security questionnaire automation is one module of a full GRC platform: controls crosswalked across every framework, so you collect evidence once and comply everywhere. Start free, no credit card, no sales call.
Frequently asked questions
Will the AI make up answers?
No. It drafts from your own controls and policies and flags anything uncertain to confirm internally. You review and approve every answer before it’s sent.
Does this handle both answering and sending questionnaires?
Yes. Sell-side (answer prospects’ questionnaires) and buy-side (build, send, and auto-score vendor questionnaires) are both covered.
Is there a limit on how many questionnaires I can answer?
There’s no fixed annual questionnaire quota. AI answering is included on every paid plan and metered by AI credits (1,500 a month on Starter, 5,000 on Pro, 15,000 on Enterprise), and you can top up any time, so a heavy quarter isn’t rationed against a yearly limit.
Where do the vendor questions come from?
From a curated library of 100+ questions you assemble into a structured, auto-scored assessment.
Related features: Vendor risk management · Trust center · AI tools
Works with: SOC 2 · ISO/IEC 27001