Attestly
Log inCreate an account

For B2B software teams of 20 to 200 people

Answer security questionnaires from the policies you already have

Upload the spreadsheet your customer sent. Attestly drafts each answer from your own policies and the answers you approved before, shows the source for every claim, and flags what needs a closer look. You review, approve, and download the file in its original layout.

Create an accountSee pricing

Set up your workspace in a few minutes.

How it works

  1. 1

    Add what you already have

    Upload your security policies as PDF, Word, text, or Markdown, and import the answers from a questionnaire you completed before.

  2. 2

    Upload the questionnaire

    Drop in the Excel or CSV file as you received it. Attestly finds the question and answer columns, including SIG Lite and CAIQ layouts, and lets you correct them.

  3. 3

    Review, approve, export

    Each draft shows its sources and a confidence score. Approve the strong ones in bulk, fix the rest, and download the original file with your answers filled in.

Built for the person who signs the answers

A wrong answer in a security questionnaire is a commitment your company made. Attestly is designed around review, not around replacing it.

  • Every answer shows its source

    Drafts cite the policy section or past answer they rely on, with the quoted passage. Citations that do not match the source are removed.

  • Confidence you can sort by

    Each draft is rated high, medium, or low. Questions with no supporting evidence are left blank and marked for you instead of guessed.

  • The file comes back as it was

    Approved answers are written into the original workbook. Formatting, dropdowns, merged cells, and other sheets stay as they were.

  • An answer library that grows

    Every approved answer is saved. The next time a customer asks the same question, the answer is reused before anything else.

  • Review with your team

    Invite teammates, assign questions to reviewers, and keep a record of who approved what.

  • Nothing goes out unreviewed

    Drafts are never approved automatically, and only approved answers are exported.

Pricing

Published prices, monthly or yearly. Plans are metered by questions: a questionnaire of up to 250 questions counts as one, and a larger one uses more of the allowance.

Starter

For a founder or lone security lead answering a few questionnaires a month

$99per month

Billed yearly at $1,188

Get started
  • 3 questionnaires a month of up to 250 questions each (750 questions)
  • 2 seats
  • 40 knowledge base documents, up to 25 MB each
  • 1 workspace
  • Drafted answers with source citations and a confidence score
  • Review queue for low-confidence answers
  • Export in the original spreadsheet layout
  • Approved answers saved to your answer library
  • Column detection for SIG Lite and CAIQ layouts
  • Email support

Growth

Most teams

For teams with a steady flow of enterprise deals

$279per month

Billed yearly at $3,348

Get started
  • 12 questionnaires a month of up to 250 questions each (3,000 questions)
  • 5 seats
  • 150 knowledge base documents, up to 25 MB each
  • 1 workspace
  • Everything in Starter
  • Reviewer assignment and approval workflow
  • Role-based access (admin, reviewer, viewer)
  • Answer library version history and stale-answer flags
  • Activity log with 12 months of history
  • Priority email support

Scale

For companies with several products or a dedicated security team

$719per month

Billed yearly at $8,628

Get started
  • 36 questionnaires a month of up to 250 questions each (9,000 questions)
  • 15 seats
  • 500 knowledge base documents, up to 25 MB each
  • Multiple workspaces
  • Everything in Growth
  • Separate workspaces for each product, on one subscription
  • Activity log export, 36 months of history
  • Usage and accuracy reporting
  • Shared Slack or email channel support

Enterprise

Custom volumes and terms, arranged with our team

Custom

Annual contract, invoiced

  • Everything in Scale
  • Custom volumes, seats and documents
  • DPA and security review support
  • Custom retention and data residency discussion
  • Invoicing

Questions

Do I still need to review answers?
Yes. Attestly drafts, you decide. Drafts are never approved automatically, every draft shows the passages it is based on, and only answers you approve are written into the exported file. Questions with no supporting evidence are left blank for you to answer.
Where is my data sent?
Your documents, answer library, and questionnaires are stored by the Attestly instance you use. When AI drafting is on, each question is sent to Anthropic together with the passages retrieved for it, and nothing else. With AI drafting off, Attestly only reuses answers from your answer library and no content leaves the server.
Which questionnaire formats work?
Excel (.xlsx) and CSV files with one question per row, including SIG Lite and CAIQ spreadsheets and custom vendor assessments. Attestly detects the question and answer columns and lets you correct them. Web portals and legacy .xls files are not supported.
What counts toward my plan?
Questions. Each question counts once when drafting starts, and redrafting a single question counts one more. Rows that already had an answer in the file, section headings, and blank rows do not count.
What happens to answers I approve?
They are saved to your answer library. When the same or a very similar question appears in a later questionnaire, Attestly reuses your approved answer before drafting anything new.