Questionnaires

Pre-answered + custom on request

We maintain pre-answered versions of the most common third-party-risk questionnaires. All are released under NDA. Turnaround on custom questionnaires: under 5 business days. Source data: packages/trust-portal/src/data/questionnaires.json (last updated 2026-04-29).

Questionnaire Version Status Description

CAIQ (Cloud Security Alliance) v4.0.3 available under nda Consensus Assessments Initiative Questionnaire — 261 questions across 17 control domains.

SIG Core (Shared Assessments) 2025 available under nda Standard Information Gathering questionnaire — full risk profile.

SIG Lite (Shared Assessments) 2025 available under nda Abbreviated SIG — first-tier vendor risk assessment.

VSA-Full (Vendor Security Alliance) 2024 available under nda Full vendor security questionnaire.

Custom security questionnaire — answered under nda Org-specific questionnaires answered case-by-case. Email security@fastpace.net with the questionnaire attached.

How to request

Three options, in order of preference:

1. Self-serve evidence package

Use the request form — pick "Security questionnaire" and tell us which one. Signed delivery to a verified contact at your org within 5 business days.

2. Direct email

Email security@fastpace.net with the questionnaire attached (or a link to your TPRM platform). Encrypt sensitive parts with our PGP key (fingerprint published on the GitHub repo).

3. TPRM platform integration

We respond directly inside Whistic, Vendict, ProcessUnity, OneTrust Vendorpedia, and similar TPRM platforms — invite us as the vendor contact and we'll complete the assessment in-platform.