New Questionnaires · the high-touch motion

The 214-question review, answered in minutes.

Upload any security questionnaire and AI drafts every answer from your approved library — sourced, confidence-scored, and ready for your one click of approval. Your biggest deals stop waiting on security.

Any format — Excel, portal export, PDFEvery answer cites its source
app.oathly.ai / questionnaires
206 / 214 answeredDue Fri
#41Do you maintain a documented information security policy?
#42Is customer data encrypted at rest and in transit?
#43Describe your incident response and notification timelines.
#44Do you perform annual penetration testing?
#45How is access to production systems controlled?
Incident managementHigh confidence · 91%
Describe your incident response and notification timelines.
AI suggested answer

Incidents follow a documented IR plan with severity-based triage. Affected customers are notified within 72 hours of confirmation, per our Incident Response Plan §3.1.

Incident Response Plan §3.1 · approved May 2026

What changes for sales

Stop trading deal momentum for security homework.

Every week a SIG Lite sits in a queue, your enterprise deal ages. AI answers from the library your security team already approved — so the review moves at the speed of your pipeline.

4h → 20mto turn around a typical security questionnaire
0questions drafted in one "Fill all with AI" run
0of answers cite an approved source document
0faster on the average security-gated deal

Figures illustrate SIG Lite, CAIQ and custom Excel questionnaires answered from a mature library.

Any format in

Drop in whatever the buyer sent.

SIG Lite in Excel, a CAIQ export, a procurement portal's PDF, a bespoke Word doc — oathly.ai parses the file, extracts every question, and matches each one against your library before you've made coffee.

  • Parse & extract — questions pulled from spreadsheets, PDFs and docs
  • Auto-match — each question mapped to your closest approved answer
  • Pipeline view — pending, in progress, completed, with due dates
.xlsx.csv.pdf.docx
app.oathly.ai / questionnaires
All7Pending1In progress2Completed4
SIG Lite — Meridian Health214 questions · 206 answered · due Friday
CAIQ v4 — Northwind Logistics261 questions · parsed · matching answers
Vendor assessment — Initech88 questions · uploaded 2 min ago · parsing

AI drafting

One click drafts every answer. With receipts.

"Fill all with AI" answers the whole questionnaire from your approved library. Every draft carries a confidence band and cites the exact source it came from — so your team reviews, not researches.

  • Confidence bands — High, Medium, Low; review effort goes where it's needed
  • Provenance on every answer — the policy section it's grounded in, linked
  • Export it back — answers patched into the original spreadsheet, or a clean xlsx, csv or PDF
Why nothing ships unsourced
fill all with AI · running
Q112 — Data retention & deletionDrafted from Data Retention Policy §2 · High · 94%
High
Q113 — Sub-processor managementDrafted from Sub-processor Register · High · 88%
High
Q114 — Business continuity RTO/RPODrafted from BCP 2025 · needs a human look · 52%
Medium
Filling… 187 of 214 doneEvery answer traces to a source you approved

The answer library

Answer it right once. Reuse it forever.

Every approved answer becomes a reusable, governed asset — categorized, source-linked, and usage-tracked. The library compounds: your hundredth questionnaire is faster than your tenth.

  • Approval workflow — draft, in review, approved; nothing ships silently
  • Test a question — paste any buyer question, see how the library scores
  • Usage counts — see which answers carry your reviews
See it on your own documents
app.oathly.ai / answer library
Answer library412 reusable answers
Do you maintain a SOC 2 report and can you share it?Approved
Yes. We hold a current SOC 2 Type II report covering security, availability and confidentiality. It is available under NDA via our Trust Center.
2 sourcesused 63×Compliance
How is customer data segregated between tenants?Approved
Logical isolation with per-tenant encryption keys; access enforced at the application and database layers per Architecture Overview §5.
1 sourceused 41×Security
What is your vulnerability management SLA?In review
Critical vulnerabilities patched within 48 hours, high within 7 days — updated to reflect the new policy pending approval.
1 sourceused 27×Security

Two motions, one library

The best questionnaire is the one that never arrives.

SME & mid-market deals

Deflect it with the Trust Center

Most buyers just need proof. A self-serve Trust Center answers the standard questions before anyone thinks to send a spreadsheet — zero trust hours spent, deal keeps moving.

Explore Trust Centers
Enterprise deals

Answer it in minutes, not weeks

When procurement insists on their format, AI drafts the whole thing from the same governed library — complete, consistent, and professional enough for your largest buyers.

Book a demo

Get started

Send back the next questionnaire this week.

Connect your documents, upload the review that's sitting in your inbox, and watch it answer itself — with a source on every line.