Actigy BPO · Software, security and customer operations
Security questionnaire evidence register for SaaS vendors
Actigy BPO helps SaaS vendors answer customer security questionnaires from approved evidence. Use this register to tie each answer to a product, source version and approver. Your security owner decides which wording and attachments the customer may see.
Free to use · No email required · Calculations stay in your browser
Make the assumptions visible
Check whether an answer is ready for client approval
Start with the fictional example or enter your own planning assumptions. Use the Excel download for a multi-row record.
Check the initial worked example
A security control applies to the product, but the date of the last test is unclear and its report has not been cleared for sharing. Keep the answer open, route the date question to the control owner and request sharing approval. Final release stays with the vendor.
A repeatable method
How to use the worksheet
For security, trust and sales engineering teams that receive repeated customer questionnaires across products, regions or hosting environments.
Download the editable workbookRecord the question, product, environment and customer deadline. Identify which control owner can confirm the answer.
Attach an approved internal source reference and review date. Distinguish a written policy from evidence of an actual test. Leave unsupported claims open.
Record approved wording, approval status and attachment-sharing permission separately. Recheck scope and freshness before reusing any answer.
Illustrative · Not a client result
A second worked example
A policy calls for quarterly backup tests, but the only test record supplied is from last year. Record the policy and test evidence separately. Ask infrastructure to confirm the latest completed test before stating a frequency to the customer.
Keep the decision with its owner
What this tool can establish
The register does not perform an audit, certify controls, assess supplier risk or authorize a disclosure. Use reference labels instead of actual reports, vulnerabilities, credentials or confidential customer questions in a public worksheet.
Check the method
Sources and reuse
The examples and calculations are original Actigy BPO material. These sources explain the underlying workflow.
- Vanta: managing source information and the answer library
- Cloud Security Alliance: questions for a security questionnaire
Suggested citation: Actigy BPO, Security questionnaire evidence register for SaaS vendors. Link to this page so readers can check the method and download the current version.
Published · Updated
Move from planning to delivery
Get help with this workflow
Describe the workload, operating system and decisions your team will retain. Review the service scope and discuss a defined pilot.