BLUEFLEX Your client sent a security questionnaire. You have no security team.
PROVE IT walks you through answering it honestly, including the questions where the answer is no. You finish with a reusable answer library, so the next one takes an afternoon instead of two weeks.
Built for Canadian service firms. No audit needed, no security team needed.
You did not do anything wrong.
Your business grew faster than its paperwork. That is what growth looks like.
But now a client with a real procurement function wants to know how you control access to their data, what happens if you have a breach, and which vendors touch their information. Someone on your team started filling it in and stopped partway down, because the honest answer to half of it is no.
So you have three bad options. Guess. Overstate. Or stall until the deal cools.
Reviewers approve gaps with a date and an owner far more often than firms expect. What they almost never forgive is a control they later discover was overstated.
And your questionnaire answers often end up referenced in the contract that follows.
You do not need to have everything. You need to be clear about what you have, what you do not, and when you will close the difference. That is not a compliance skill. It is a communication skill, and it can be taught.
Eight tabs. One afternoon.
An Excel workbook, a Google Sheets copy and two short walkthrough videos. Yellow cells are yours to fill in. Everything else is there to read when you need it.
Quick Start
The seven-step first run. Read this before you touch the questionnaire.
Response Workspace
One row per question. Judgement, answer, evidence, gap, owner, date. Counts your Yes, Partial and Not yet as you go.
Answer Decision
The four judgements, the challenge questions, the four-part structure for writing a Not yet, and the five phrasings that backfire.
Evidence Library
The six documents that answer most of what a client asks, plus your approved reusable answers.
Gap Tracker
What a questionnaire becomes once it stops being a fire drill. Owners, dates, overdue flags.
Canadian Context
Prompts for the privacy questions Canadian clients ask. PIPEDA, Law 25, vendors, transfers.
Before You Send
The last twenty minutes, plus a covering email that frames your gaps before the reviewer finds them.
Two walkthrough videos
Under five minutes each: answering the questions, then evidence and sending. Watch both before you start.
A look inside, before you buy.
Three minutes: the triage step, how a Not yet answer is written, and what the reviewer sees.
Who this is for.
A fit if
- You are a Canadian service firm, roughly 10 to 75 people: consultancy, agency, IT vendor, professional services, small legal or finance practice.
- A client has sent you a security, privacy or vendor due diligence questionnaire.
- Nobody internally owns the answer.
- You would rather understand this than outsource it.
Not a fit if
- You are pursuing SOC 2 or ISO 27001 certification. That is a different job, and our readiness service handles it.
- You have a CISO or a compliance lead. They already know this.
- You want someone else to complete the questionnaire for you. Book a call instead.
- You want a certificate. This is not one, and nothing at this price is.
Answer it honestly. Keep the answers.
Instant download. Yours permanently, including updates.
- PROVE IT workbook, eight tabs, Excel and Google Sheets
- Two short walkthrough videos
- The six-document evidence starter set
- Covering email template
- Reusable answer library you keep for every questionnaire after this one
- The scored Enterprise Questionnaire Readiness Checklist, self-totalling
- $250 off a Snapshot if you decide you want help
EXCEL + GOOGLE SHEETS
$250 OFF A SNAPSHOT
WITHIN 90 DAYS
Secure checkout via Payhip.
Questions people ask first.
How is this different from a free template?
Free templates give you an empty answer library. The blocker was never structure, it was not knowing what to write in the boxes. PROVE IT is the judgement layer: which questions matter, what good enough looks like, and how to phrase the ones where the answer is no.
Will this make my answers acceptable to the client?
Nobody can promise that, and be suspicious of anyone who does. What this does is make your answers accurate, supportable and clearly written. That is what reviewers actually score.
Can you just fill it in for me?
Not at this price, and you are better off learning it once anyway. If you want it done with you, the Compliance Exposure Snapshot is the right step and PROVE IT credits toward it.
Do I need to buy software?
No. Excel or Google Sheets, both included. There is nothing to install and nothing to connect.
What if I find more gaps than I can close?
That is the normal result, and it is useful to know. The Gap Tracker turns the pile into an owned, dated list. If that list is longer than a quarter of your capacity, a Snapshot is usually the cheaper way through.
PROVE IT is the first rung, not the whole ladder.
It handles one questionnaire and teaches you the method. When the gaps turn out to be wider than a spreadsheet, or a buyer wants your evidence scored by someone other than you, the Compliance Exposure Snapshot scores 21 criteria across five domains against evidence, in two weeks, at a fixed price.
PROVE IT buyers take $250 off that Snapshot. Not a token discount. If you arrive with your Evidence Library and Gap Tracker filled in, we already know where your documents live and what you have flagged, so the engagement starts from your work instead of a blank page. The saving reflects that.
The credit is $250 off the Compliance Exposure Snapshot or the AI Readiness Snapshot, valid for 90 days from purchase, one per organization, and applied when you bring your completed workbook to intake. It does not stack with the two-Snapshot bundle price.
See the Snapshot Book 15 minutesThe Questionnaire Decoder
The 15 questions Canadian clients ask most, what the reviewer is actually checking behind each one, and the evidence that settles it. Read it before your next questionnaire arrives.