Security questionnaires

From 20 hours
to 23 minutes.

Drop in your security policies. TrustReply maps every question to the right clause, pulls the evidence, and hands you a reviewed draft — cited, scored, ready to send.

Start free →

⬆

Drop your KB here to get started

Drag files or click to browse

SOC2ISO 27001AI Risk RegisterPrivacy PolicyPDFDOCX

Acme Vendor Security Review · Q12

12 of 87

Do you encrypt data at rest, and if so, what algorithm and key length?

Yes. All customer data is encrypted at rest using AES-256-GCM. Encryption keys are managed via AWS KMS with automatic 90-day rotation. Key access is restricted to least-privilege IAM roles.

📎 SOC2-Encryption-Policy.pdf · §3.2

Confidence

87%

How it works

Three steps.
One fewer weekend lost.

No training runs. No setup fees. Upload, review, send.

01 —

Upload your KB once.

Drag in your security policies, SOC2 reports, AI risk register, privacy policies. URLs work too. We chunk, embed, and index in seconds.

02 —

Upload a questionnaire.

PDF, Excel, or paste a URL. TrustReply extracts every question and shows you what it found before drafting starts.

03 —

Review and ship.

Get drafted answers with citations and a confidence score per question. Accept, edit, or flag for follow-up. Export to PDF, Excel, or JSON.

minutes avg. review time

% avg. confidence score

questions handled per questionnaire

Features

Every step of the workflow, done right.

No black boxes. Every part of TrustReply is inspectable, editable, and yours to control.

⬆

Drop security docs here

📄SOC2-Report-2025.pdf✓ 47 chunks

📄AI-Risk-Register.docx✓ 23 chunks

📄Privacy-Policy-v3.mdindexing… 12 chunks

KB Ingestion

Upload once. Reference forever.

PDF, DOCX, Markdown, URLs. Chunked, embedded, and indexed. Every answer traces back to the exact source.

Do you encrypt data at rest, and if so, what algorithm and key length?

Yes. All customer data is encrypted at rest using AES-256-GCM. Keys are managed via AWS KMS with automatic 90-day rotation.

📎 SOC2-Encryption-Policy.pdf · §3.2

Confidence

87%

Cited Drafts

Every answer. Every source. No guessing.

Answers are drafted from your KB and pinned to the exact clause they came from. If we can't cite it, we flag it — we don't invent it.

87%

Data encryption at rest

91%

Access control policy

88%

Incident response plan

72%

Pen test cadence

41%

Confidence Scoring

Know what to ship, know what to review.

Per-question scores 0–100. Red flags surface instantly so you don't waste time on answers you'd accept anyway.

{
  "answer": "Yes. AES-256-GCM...",
  "confidence": 87,
  "citation": "SOC2 §3.2",
  "status": "accepted"
}

Export

Send it however they need it.

PDF for portals. Excel for grid-lovers. JSON for programmatic workflows. One click, any format.

Zero training on your data

stateless · isolated · encrypted

Security

Your policies never leave your account.

Stateless API calls. AES-256 at rest. Row-level isolation. Nothing trains any model.

Security

Your policies stay yours.

No training. No sharing. No surprises. Your KB is isolated, encrypted, and never used to improve any model.

AES-256 at rest. TLS 1.3 in transit.

End-to-end encryption. A baseline, not a boast.

Single-tenant isolation.

Row-level security in Postgres. Your KB and questionnaires are visible to your account only — full stop.

Zero training on your data.

Stateless API calls only. Your security policies never train any model, including ours.

Read our security architecture →

Pricing

Pricing that pays for itself in one questionnaire

One questionnaire = ~$2K–$15K of founder time. TrustReply is $79/mo.

Free

Try it out

✓1 questionnaire ever
✓Watermarked export
✓5 KB docs
✓1 user

Get started

Questions founders actually ask

Early access

Get your weekends back.

Join the waitlist. First 50 founders get the Solo plan free for 90 days.

A note on payments: TrustReply is solo-built and bootstrapped. The first batch of customers will be invoiced manually via Wise or PayPal while Stripe is wired up. Pricing above is what you'll pay.

From 20 hours to 23 minutes.

Three steps.One fewer weekend lost.