Trust pack and starter security questionnaire
What a buyer's security team wants to see before they say yes, answered once and kept current: a trust pack to send ahead, and a starter security questionnaire with your answers.
Part A is the trust pack you send a customer’s security or procurement team before they ask. Part B is a starter security questionnaire with your answers, including the AI-specific questions buyers now ask first. Part C is for you: delete it before you send the pack.
What’s inside
- Part A, the trust pack: company and product overview, security overview, architecture, data handling, sub-processors, AI governance statement, compliance and certifications, insurance, business continuity
- Part B: a starter security questionnaire
- Part C: notes for you, to delete before sending
Start here. Fill in the security overview, data handling (including whether customer data trains models) and the AI-specific questions in Part B. Those are the questions every buyer asks first.
It comes filled in with a worked example for Northlight AI Ltd, a fictional company. Blue cells are yours: answer only what is true today, and where a control is planned, write the date.
