[{"data":1,"prerenderedAt":71},["ShallowReactive",2],{"blog-post-security-questionnaire-from-your-documents":3,"blog-index":13},{"slug":4,"title":5,"description":6,"date":7,"updated":7,"tags":8,"image":10,"html":11,"reading_minutes":12},"security-questionnaire-from-your-documents","Answering a vendor security questionnaire from your own documents","A customer sent a long security questionnaire. How small teams answer it from the policies they already have, consistently, without starting from scratch.","2026-11-05",[9],"text extraction","https:\u002F\u002Fcontent.presentr.me\u002Fanalyze\u002Fassets\u002Fog.a534d1a7a7.png","\u003Cp>If you sell to larger companies, schools or public bodies, it arrives sooner or later: a security questionnaire. Sometimes it's a standard one, such as the SIG, the CAIQ or, in higher education, the HECVAT. Sometimes it's the customer's own spreadsheet. It can run to hundreds of questions, much of it written in language that assumes you have a security team.\u003C\u002Fp>\n\u003Cp>Without a system, it's easy to answer each one from scratch, under deadline, and the answers drift from one customer to the next. Here is a way to answer from what you already have, and to make the next one faster.\u003C\u002Fp>\n\u003Ch2 id=\"1-gather-what-you-already-have\">1. Gather what you already have\u003C\u002Fh2>\n\u003Cp>You probably have more than you think: an information security policy, a privacy policy, an incident response plan, a backup or business continuity note, your hosting provider's security documentation, an earlier questionnaire you already answered, maybe a penetration test summary. Put them in one folder.\u003C\u002Fp>\n\u003Cp>Many of these exist only as PDFs or scans. Getting their text out makes them searchable, so you can find \"encryption at rest\" across all of them in seconds. \u003Ca href=\"https:\u002F\u002Fanalyze.presentr.me\u002Ftools\u002Fextract-text\" rel=\"noopener\">Presentr Analyze's text extractor\u003C\u002Fa> turns a PDF or image into plain text, Word and JSON. If you use Claude, Presentr Analyze is also in the \u003Ca href=\"https:\u002F\u002Fclaude.ai\u002Fdirectory\u002Fconnectors\u002Fpresentr-analyze\" rel=\"noopener\">Claude connector directory\u003C\u002Fa>, so you can ask Claude to pull the text out of a policy PDF or image from a direct HTTPS link.\u003C\u002Fp>\n\u003Ch2 id=\"2-build-an-answer-bank-not-a-single-answer\">2. Build an answer bank, not a single answer\u003C\u002Fh2>\n\u003Cp>Questionnaires ask many of the same things in different words: who can access production data, whether data is encrypted in transit and at rest, how you handle an incident, how often you back up and test restores, how staff are onboarded and offboarded, which subprocessors you use.\u003C\u002Fp>\n\u003Cp>Write one short, honest answer for each of those themes, with a pointer to the document that backs it up (\"Information security policy, section 4\"). Store it in a spreadsheet with three columns: theme, answer, evidence. Every new questionnaire then becomes matching questions to themes, not writing.\u003C\u002Fp>\n\u003Ch2 id=\"3-answer-what-is-true-and-say-what-isn-t-in-place-yet\">3. Answer what is true, and say what isn't in place yet\u003C\u002Fh2>\n\u003Cp>The temptation under deadline is to write \"yes\" to everything. Don't. A reviewer would rather see \"Not yet: planned for Q2, compensating control: …\" than discover later that a \"yes\" wasn't true. An honest \"partially\" with a plan reads as a mature answer, and it is the one you can defend.\u003C\u002Fp>\n\u003Ch2 id=\"4-keep-it-consistent\">4. Keep it consistent\u003C\u002Fh2>\n\u003Cp>The risk with answering by hand is that two customers get two different answers to the same question. An answer bank fixes most of that. When an answer changes because you adopted a new control or changed hosting provider, change it once in the bank, and note the date.\u003C\u002Fp>\n\u003Ch2 id=\"5-send-evidence-not-essays\">5. Send evidence, not essays\u003C\u002Fh2>\n\u003Cp>Where a question asks for proof, attach the relevant document or excerpt instead of describing it. Keep a small evidence folder: current policies, certificates, the latest test summary. Each one should be dated, so you know what's out of date. Before anything leaves the company, get it approved, remove anything the customer doesn't need to see, and send it through a secure channel, under the NDA if there is one, rather than as a public link.\u003C\u002Fp>\n\u003Ch2 id=\"what-we-re-testing\">What we're testing\u003C\u002Fh2>\n\u003Cp>Getting the text out of your documents is what Presentr Analyze does today. The slow part people describe is the rest: matching each question to an answer and its evidence, and assembling the completed questionnaire. We're testing a way to do that: you upload the questionnaire and your documents, and get back a draft with each answer linked to the document it came from, ready for you to check. It is a draft for you to review, not answers you send unchecked.\u003C\u002Fp>\n\u003Cp>It isn't built yet. If you'd use it, \u003Ca href=\"https:\u002F\u002Fanalyze.presentr.me\u002Fdocuments\" rel=\"noopener\">tell us what you'd submit\u003C\u002Fa> and how you handle questionnaires today.\u003C\u002Fp>\n",3,{"site":14,"generated_at":15,"posts":16,"redirects":70},"analyze","2026-11-05T20:30:51.386Z",[17,20,29,41,50,61],{"slug":4,"title":5,"description":6,"date":7,"updated":7,"tags":18,"image":10,"url":19,"published_at":15},[9],"https:\u002F\u002Fanalyze.presentr.me\u002Fblog\u002Fsecurity-questionnaire-from-your-documents",{"slug":21,"title":22,"description":23,"date":7,"updated":7,"tags":24,"image":26,"url":27,"published_at":28},"scans-to-one-submission-pdf","Turn a pile of scanned documents into one submission-ready PDF","Grant, permit, claim or licence: how to get scans, phone photos and PDFs into one clean, ordered, searchable submission, and where it usually goes wrong.",[9,25],"ocr","https:\u002F\u002Fcontent.presentr.me\u002Fanalyze\u002Fassets\u002Fog.521cf37544.png","https:\u002F\u002Fanalyze.presentr.me\u002Fblog\u002Fscans-to-one-submission-pdf","2026-11-05T20:30:49.658Z",{"slug":30,"title":31,"description":32,"date":33,"updated":33,"tags":34,"image":38,"url":39,"published_at":40},"ai-dubbing-in-your-own-voice","New: AI dubbing, in your own voice, and text read aloud","Dub a video into 48 languages, in an AI voice or your own, or turn text into an MP3. How it works, what it costs, and what changed in our Terms.","2026-10-28",[35,36,37],"dubbing","video","subtitles","https:\u002F\u002Fcontent.presentr.me\u002Fanalyze\u002Fassets\u002Fog.44ac3e4fbb.png","https:\u002F\u002Fanalyze.presentr.me\u002Fblog\u002Fai-dubbing-in-your-own-voice","2026-10-28T19:21:01.314Z",{"slug":42,"title":43,"description":44,"date":45,"updated":45,"tags":46,"image":47,"url":48,"published_at":49},"one-newspaper-page-four-ocr-tools","Tried OCR on an old newspaper? Compare this page","One dense 1850 newspaper page, four OCR tools: one nearly right, one fluent but wrong. See the results, then run your own page.","2026-10-20",[25,9],"https:\u002F\u002Fcontent.presentr.me\u002Fanalyze\u002Fassets\u002Fog.088293acda.png","https:\u002F\u002Fanalyze.presentr.me\u002Fblog\u002Fone-newspaper-page-four-ocr-tools","2026-10-20T20:50:29.423Z",{"slug":51,"title":52,"description":53,"date":54,"updated":55,"tags":56,"image":58,"url":59,"published_at":60},"fix-progressive-subtitle-drift","Subtitles Offset or Slowly Drifting? Diagnose the Difference","Check subtitle sync at the beginning, middle, and end to distinguish a constant offset, progressive drift, or a re-edited video.","2026-10-19","2026-10-23",[37,57],"captions","https:\u002F\u002Fcontent.presentr.me\u002Fanalyze\u002Fassets\u002Fog.743e8292aa.png","https:\u002F\u002Fanalyze.presentr.me\u002Fblog\u002Ffix-progressive-subtitle-drift","2026-10-19T19:30:48.590Z",{"slug":62,"title":63,"description":64,"date":65,"updated":65,"tags":66,"image":67,"url":68,"published_at":69},"subtitle-file-out-of-sync","A subtitle file can look valid and still be out of sync","A subtitle file 2.5 seconds late scored the same as the in-sync one on our own check. Why a text check cannot see sync, and what the audio shows.","2026-10-15",[37,57,36],"https:\u002F\u002Fcontent.presentr.me\u002Fanalyze\u002Fassets\u002Fog.f3a05ee827.png","https:\u002F\u002Fanalyze.presentr.me\u002Fblog\u002Fsubtitle-file-out-of-sync","2026-10-15T15:51:57.159Z",{},1793912535876]