Security questionnaires, answered from your own records.
Before they sign, customers send a list of questions on hosting, vendors, access and incidents. Privacyboard reads their Excel or PDF file, suggests each answer from what you already recorded and the answers you approved before, and returns their own workbook filled in once you have approved every answer.
Free to set up · No credit card · About 5 minutes
In short
- Files
- Excel (.xlsx) or PDF, up to 4 MB
- Answers
- From your records and approved answers only, never invented
- Review
- Every answer approved by a person before it is exported
- Plan
- Business
Each answer says where it comes from
Suggestions are written from your vendors, security practices, register and documents, and name their sources so you can check them quickly.
Approved once, reused next time
Every answer you approve, and the reviewed answers of your workspace, feed the next questionnaire. If your records changed since, the records win.
Where it fits
Everything sits in one workspace: say a thing once, and every document that depends on it follows.
What is a security questionnaire?
A security questionnaire, or vendor assessment, is the list of questions a customer sends before buying from you: where data is hosted, whether it is encrypted, who your subprocessors are, how access is controlled, whether you had a breach. Larger customers send one with every contract, often as a spreadsheet of dozens of questions.
Most answers already sit in your privacy records: your vendors and their regions, your security practices, your processing register, your incident register and your validated documents. Answering from those records keeps every questionnaire consistent with what your privacy center and your agreements say.
How it works
- 1
Import their file
Choose the Excel or PDF file the customer sent. For a workbook, Privacyboard finds the sheet, the question column and the answer column; you can change them.
- 2
Review the suggestions
Answers are suggested 25 at a time from your records and approved answers. Each one says where it comes from; questions your records do not cover are left for you.
- 3
Approve and send back
Approve each answer, then download the customer’s own workbook with your answers in the answer column, its layout untouched.
What you get
Their file, their layout
Answers are written into the customer’s own workbook. Formatting, other sheets and formulas stay as they sent them.
Answers from your records
Vendors, security practices, register, incidents, assessments, documents and cookie banner feed each suggestion.
Nothing invented
A certification, a test or a policy you did not record is never claimed. Uncovered questions are marked for you to answer.
A library that grows
Approved answers, and the reviewed answers of your workspace, are reused for the next questionnaire.
Sensitive answers flagged
Suggestions that may share sensitive details must be approved one by one.
Progress you can follow
A progress bar shows how many questions are done and the time left; answers appear as they are written.
Why customers ask
Suggested answers describe what your records say. You remain responsible for each answer you approve and send; this is not a certification or legal advice.
- GDPR Article 28(1)
- A controller may only use processors that provide sufficient guarantees: questionnaires are how your customers check yours.
- GDPR Article 32
- Security measures appropriate to the risk, which questionnaires ask you to describe.
- NIS2 Article 21(2)(d)
- Companies in scope must manage the security of their supply chain, including their suppliers.
Go online for free. Grow when you need to.
Free puts you online. Pro adds requests, monitoring and your team; Business, security questionnaires and only your brand.
Free
$0 forever
No card, no time limit
For getting compliant and going online on your own.
Start for freeKey features:
- Privacy and cookie policies
- Vendor and processing registers
- Requests and breaches tracked
- Impact assessment screening
- AI Act screening
- Privacy center on privacyboard.io
- Cookie banner on 1 domain
- 1 person
- And 1 more on the pricing page
No card needed
ProRecommended
$20 per month
Billed $240 a year Save $48
For founders who want to be compliant in a few clicks and stay that way.
Start with ProEverything in Free, plus:
- DPA for your clients
- Vendor monitoring
- Reminders for documents and reviews
- Request form and replies
- Your own domain
- Banner on 3 domains, every choice logged
- Weekly site scan
- Complete DPIAs and TIAs
- AI assistant connector
- 2 people
- And 1 more on the pricing page
Cancel any time
Business
$109 per month
Billed $1,308 a year Save $240
For the person in charge of privacy: every detail in order, a team with roles, and proof for audits and customers.
Start with BusinessEverything in Pro, plus:
- Up to 50 people, with roles
- PDF and Excel exports
- Signed agreements on vendors
- Activity log kept 3 years
- Security questionnaires answered for you
- No Privacyboard mention
- Center in English and French
- Evidence pack in one click
- Banner on 10 domains, daily scan
- Two-step verification required
- And 3 more on the pricing page
Bank transfer on request
Questions, answered.
Which files can I import?
Excel workbooks (.xlsx) and PDF files up to 4 MB. With Excel, you get the customer’s own workbook back; with a PDF, an Excel file with each question and its answer.
Does the AI make up answers?
No. Suggestions use only your records and the answers you approved before. When a question goes beyond them, such as a penetration test or a certificate you did not record, it is left for you to answer.
Is our data used to train AI models?
No. The questions and your records are sent to Anthropic, our AI provider, which does not use them for training. Requesters’ identities and the details of your incidents are never sent.
Which plan includes it?
Security questionnaires are part of the Business plan.
Can my team work on the same questionnaire?
Yes. Editors, admins and owners can answer and approve; viewers can read and download.
Works with
Privacy center
A public page under your name where customers read your policy, see your vendors and send requests.
Learn moreVendor list
Document every tool that handles personal data, prefilled for 1,290+ common tools.
Learn moreImpact assessments
Screen each activity for a DPIA, and assess transfers outside the EEA.
Learn more
