The AI questions in a security questionnaire, and the evidence each one needs.
Paste up to ten questions. For each you get what it is really asking, the records a truthful answer rests on, and an example of a supported answer. No account, no email, nothing stored.
67 questions across 18 themes, drawn from what the common vendor questionnaires ask about AI. The wording is our own; no licensed questionnaire text is copied.
- Policy
- Accountability
- Inventory
- Third parties
- Risk
- Scope
- Frameworks
- Regulation
- Assurance
- Acceptable use
- Monitoring
- Data protection
- Training
- Oversight
- Legal
- Security
- Operations
- Incidents
Questions
- Is a language model writing these answers?
No. Each question is matched to an entry in a built-in library by its wording, and the entry's rule says what records would support an answer. The example answer is what that rule produces from the records of a fictional company. Nothing is generated freely.
- Whose data is in the example answers?
A demo workspace called Demo Corporation, which is fictional. The examples show the shape of a supported answer and the evidence it cites. They are not your answers and must not be sent to a customer.
- Do you keep what I paste?
No. Your questions are sent to our server, matched, and discarded. Nothing is stored and no email is asked for. Do not paste anything confidential all the same: a questionnaire's questions rarely are, its answers often are.
- Why did a question get no match?
The library covers 67 common AI-governance questions. A question about something else (encryption, business continuity, physical security) is outside it. In the product such a question is marked as needing your input, never guessed at.
- How is the product different from this page?
In GhostAudit you upload the whole spreadsheet, the AI questions are found for you, and each answer is drafted from your own inventory, documents and assessments with the evidence named. You approve every answer before anything is exported.