| Secureframe | Secureframe lists Advanced Questionnaire Automation among Complete features.[1] | Secureframe lists Automated Evidence Collection and Continuous Control Monitoring.[1] | Secureframe lists Advanced Trust Center among Complete features.[1] | Secureframe lists SOC 2, ISO 27001, HIPAA, PCI DSS, CCPA, and GDPR.[1] |
|---|
| Drata | Drata lists AI Questionnaire Assistance Standard in Foundation.[2] | Drata lists automated evidence collection in its plan features.[2] | Drata lists Trust Center Standard in Foundation.[2] | Drata Foundation includes one pre-mapped framework selected from SOC 2, ISO 27001, Cyber Essentials, HIPAA, and GDPR.[2] |
|---|
| HyperComply | AI completes questionnaires in XLS, DOC, PDF, and web portal formats.[3] | A security profile and knowledge base centralize security details and documents.[4] | Trust Page shares security information and documents.[4] | See vendor[4] |
|---|
| Responsive | Automates Word, Excel, and PDF intake, drafts responses, and flags items for review.[5] | Centralizes security questionnaire content with access controls and AI safeguards.[5] | Shares completed questionnaires, supporting documents, and certificates with buyers.[5] | Supports SIG, VSAQ, CAIQ, VSA, NIST 800-171, and CIS Controls.[5] |
|---|
| Apptega | Security Questionnaire Automation automates responses, maps evidence to controls, and accelerates vendor reviews.[6] | Audit Manager shares evidence and validates controls during audit preparation.[6] | See vendor[6] | Apptega supports more than 30 frameworks, including CMMC, NIST CSF, SOC 2, PCI DSS, HIPAA, and ISO 27001.[6] |
|---|
| Vanta | Vanta automates security questionnaire responses.[7] | Vanta describes automated audit preparation and evidence collection.[8] | Vanta Trust Center showcases compliance status and documentation.[9] | Vanta lists SOC 2, ISO 27001, GDPR, HIPAA, HITRUST, USDP, NIST AI Risk Management Framework, and ISO 42001.[8] |
|---|
| Whistic | AI-driven Smart Response answers customized questionnaires from documents, questionnaires, and certifications in the Knowledge Base.[10] | Whistic Compliance helps teams define controls, automate tests, and build evidence that shows controls are actually working.[11] | Manage security and compliance information from one platform in Whistic Trust Center.[10] | Whistic lists 50+ standardized frameworks.[12] |
|---|
| Conveyor | Conveyor automates questionnaire intake, cited answers, portal handling, and team collaboration.[13] | Conveyor syncs drives, wikis, support sites, documents, and past questionnaires into an AI-managed knowledge library.[13] | Conveyor hosts customer Trust Centers for self-service security information and questionnaire answers.[13] | See vendor[13] |
|---|
| Knowally | Questionnaire imports support Excel (.xlsx), CSV, Word (.docx) and text-based PDF, up to 10 MB and 300 extracted questions per upload.[14] | Knowally processes uploaded documents into a private, searchable knowledge base tied to the account.[14] | See vendor[14] | See vendor[14] |
|---|
| Loopio | Automates security questionnaire responses using vetted expert answers for SIG, CAIQ, and HECVAT.[15] | Centralizes expert-approved answers and security artifacts in an audit-ready library.[15] | See vendor[15] | Supports security questionnaire responses for SIG, CAIQ, and HECVAT.[15] |
|---|
| SecurityPal AI | SecurityPal automates security questionnaire responses across portals, spreadsheets, and RFPs with human-verified accuracy.[16] | SecurityPal grounds questionnaire responses in validated documentation, previous answers, policies, controls, and security artifacts, with analyst review.[17] [17] | Public and NDA-gated sharing[18] | See vendor[16] |
|---|
| Centraleyes | Uses AI to auto-answer questionnaires.[19] | Preloaded smart questionnaires and automated workflows support data collection.[19] | See vendor[19] | Maps shared controls across more than 180 frameworks, standards, and regulations.[19] |
|---|
| Compyl | Questionnaire Assist provides AI-drafted answers.[20] | Evidence Studio provides automated, live evidence.[20] | Trust Center shares the security posture.[20] | Compyl supports frameworks and regulations across financial services, healthcare, legal, energy, and higher education.[21] |
|---|
| Scrut Automation | Security questionnaire responses are automated.[22] | Evidence collection connects AWS, GitHub, Okta, and 150+ integrations.[22] | The branded trust center stays fresh from live compliance data.[22] | Scrut supports SOC 2, ISO 27001, GDPR, PCI DSS, HIPAA, NIST AI RMF, and 70+ frameworks.[22] |
|---|
| Scytale | AI security questionnaires are available.[23] | Evidence is pulled from connected tools to keep controls backed by live data.[23] | Trust Center is available.[23] | Custom frameworks are supported.[24] |
|---|
| Sprinto | Security questionnaires are answered within seconds.[25] | Evidence is captured autonomously and kept up to date.[25] | A live, buyer-ready security page can be published in minutes.[25] | Sprinto supports SOC 2, ISO 27001, PCI DSS, CSA STAR, NIST CSF, HIPAA, GDPR, ISO 42001, and additional frameworks.[25] |
|---|
| Strike Graph | Security questionnaires are supported.[26] | Integrations automate compliance evidence collection.[27] | Trust Center is supported.[27] | Strike Graph supports SOC 2, HIPAA, GDPR, ISO 27701, CMMC, DORA, ISO 27001, ISO 42001, and additional frameworks.[26] |
|---|
| Thoropass | Audit and assessment workflows include direct auditor collaboration.[28] | Evidence is centralized and validated across frameworks.[29] | See vendor[28] | Thoropass supports SOC 1, SOC 2, ISO 27001, PCI DSS, HIPAA, HITRUST, CMMC Level 1, NIST CSF 2.0, and GDPR.[28] |
|---|
