NowSquare’s security response workspace helps companies answer customer security and AI-use questionnaires with reusable answers, supporting evidence, company approval and optional adviser review. Explore a product under your brand, a service or distribution partnership, investment or a joint venture with NowSquare.
What customer problem does it solve?Partnership options
NowSquare develops the software. Your company might bring a brand, access to customers, services or investment.
Work in security, AI or business software and want a new product line or division? We can explore a partnership where you bring your brand, market access and funding, and we lead product design and development with the freedom to shape the product.
Explore offering the workspace alongside your company’s client services. The product supports review of specific answer and evidence versions, while the client controls its information.
You may already support companies facing these requests. We can explore introducing the workspace alongside your services, helping clients get started or working with a group of members.
You might bring a client network, investment or experience growing a software business. Let’s discuss how we could develop the commercial opportunity together.
These are examples. If your company sees another commercial opportunity, we’d like to hear it.
Tell us about your company, the commercial opportunity you see in the security response workspace and what you would bring to a partnership.
Know a company this could suit? Share this page with them.
A tender, a new customer or a contract renewal can lead to questions about a company’s security practices and AI use. The workspace keeps its answers, supporting evidence and approvals together, including who approved each version.
A customer assessing a supplier needs answers and supporting documents. The supplier’s team can collect them in the workspace, resolve missing information with colleagues and send an approved response. For the next request, it can reuse what still applies and check what has changed.
If a customer asks how a company uses AI responsibly, the company can document which tools it uses, what data it shares and who checks the output. Policies, agreements or review records support those answers. The report records the company’s stated practices and supporting evidence. The recipient assesses them against their own requirements.
For EU AI Act questions, useful starting points are AI literacy (Article 4) and transparency for certain AI systems (Article 50). Which duties apply depends on your role, the system and how you use it. Your report records the answers and supporting evidence; it does not establish legal compliance.
An invited adviser can review a company’s answers and evidence, flag gaps and record what they reviewed. The company owns the record and approves what it shares. Each recorded review identifies the answer and evidence versions reviewed, its scope and its limitations.
The company issues a PDF report of the approved version, with a list of supporting evidence, the approver’s name and any recorded adviser review. It shares the report through a controlled link with a named recipient. Customers and supply-chain partners can keep that report. Public verification shows who issued it, its reference and its status. The recipient assesses its answers and evidence. Later changes in the workspace do not change the issued report.
A company records a customer questionnaire or starts with a prepared set of questions. The person preparing the response selects answers from the library, checks their versions and supporting evidence, and asks colleagues for missing information.
The company’s named approver reviews the fixed version prepared for approval. Approval and issuing are separate actions. The customer receives the issued report through a link limited to the intended recipient and permitted files, with a one-time code.
Candidate awaiting approval
The company’s approver reviews the fixed version awaiting approval, including its recipient, validity, content identifier and every answer. Approval requires a fresh identity check.
Issued edition
The issued report keeps a fixed record of its reference, issuer, validity and exact output files, with a link to its public verification page.
Recipient view
After a one-time code, the customer's contact downloads the frozen edition files, without an account, and can check them against the public verification page.
These screens show different fictional customer requests at the approval, issuing and recipient-access stages.
Brightwater Payroll B.V. supplies payroll software. Its team is answering six customer requests at different stages. Follow Maren, Daan, Tomás and the people they ask for help.
Just started
33 Readiness score
4 of 12 drafted · 4 of 12 settled · 4 of 12 supporting evidence current
Collecting
63 Readiness score
9 of 14 drafted · 9 of 14 settled · 8 of 13 supporting evidence current
Under Adviser review
78 Readiness score
9 of 11 drafted · 9 of 11 settled · 7 of 11 supporting evidence current
Awaiting approval
100 Readiness score
10 of 10 drafted · 10 of 10 settled · 10 of 10 supporting evidence current
Approved, not yet issued
100 Readiness score
9 of 9 drafted · 9 of 9 settled · 8 of 8 supporting evidence current
Issued and verifiable
Public referenceSee how report verification works ↓
The frozen edition has its own reference and public verification.
The Readiness score measures preparation, not security. Its counts explain what is missing. It never decides approval or issue and never appears on anything the customer receives. An invited adviser can see the score only when their access covers the whole working response and allows them to review its answers.
1
A new questionnaire arrives. Maren records the customer’s questions, then checks each proposed answer, where it applies and its supporting evidence.
Home
The Security Lead's home: the one task that needs them next, open work by kind, and recent activity that never shows what an Answer says.
Home
The Security Lead's home: the one task that needs them next, open work by kind, and recent activity that never shows what an Answer says.
Responses
The Security Lead sees every customer Response in one list, with its state, deadline, and Readiness score. No approval or issue ever depends on the score.
Responses
The Security Lead sees every customer Response in one list, with its state, deadline, and Readiness score. No approval or issue ever depends on the score.
Response just started
A new questionnaire from a prospective customer, a day after it arrived: four of twelve questions answered from the library so far, and a Readiness score of 33 that shows exactly what is missing.
Response just started
A new questionnaire from a prospective customer, a day after it arrived: four of twelve questions answered from the library so far, and a Readiness score of 33 that shows exactly what is missing.
One question
The Security Lead proposes a library answer and checks where it applies, whether it is current, its limitations, its wording and what may be shared with this customer.
One question
The Security Lead proposes a library answer and checks where it applies, whether it is current, its limitations, its wording and what may be shared with this customer.
Answer Library
The Answer Library holds the Organization's reusable Answers, each versioned, owned, and dated for its next review.
Answer Library
The Answer Library holds the Organization's reusable Answers, each versioned, owned, and dated for its next review.
One Answer
One Answer with its scope, stated limitation, linked Proof, and version history.
One Answer
One Answer with its scope, stated limitation, linked Proof, and version history.
2
Altamar’s request still has five open questions. Maren sends one to Jonas. He answers on his phone, without joining Brightwater’s workspace.
Response collecting input
A Response two weeks before its deadline: nine of fourteen questions settled from the library, and validation names exactly which five are still missing.
Response collecting input
A Response two weeks before its deadline: nine of fourteen questions settled from the library, and validation names exactly which five are still missing.
Request List
The Request List sends one question to a colleague with its purpose, the Proof expected, and a due date. The colleague needs no account.
Request List
The Request List sends one question to a colleague with its purpose, the Proof expected, and a due date. The colleague needs no account.
Request introduction
A colleague opens the link from their Request email. They see who asked, why, and by when, before confirming their address.
Request introduction
A colleague opens the link from their Request email. They see who asked, why, and by when, before confirming their address.
Answering the Request
After a one-time code, the Contributor answers the one question and attaches Proof on a phone or laptop. They see nothing else of the Organization.
Answering the Request
After a one-time code, the Contributor answers the one question and attaches Proof on a phone or laptop. They see nothing else of the Organization.
3
Pellworm’s proposed report waits for Tomás’s approval. Marlow’s has approval but has not been issued. Noordkade’s customer can open the issued report and check its reference.
Candidate awaiting approval
The company’s approver reviews the fixed version awaiting approval, including its recipient, validity, content identifier and every answer. Approval requires a fresh identity check.
Candidate awaiting approval
The company’s approver reviews the fixed version awaiting approval, including its recipient, validity, content identifier and every answer. Approval requires a fresh identity check.
Approved, ready to issue
An approved candidate, not yet issued. Approval and issue are separate, named actions, and the approval remains valid only while the answers and evidence used for that approval remain unchanged.
Approved, ready to issue
An approved candidate, not yet issued. Approval and issue are separate, named actions, and the approval remains valid only while the answers and evidence used for that approval remain unchanged.
Issued edition
The issued report keeps a fixed record of its reference, issuer, validity and exact output files, with a link to its public verification page.
Issued edition
The issued report keeps a fixed record of its reference, issuer, validity and exact output files, with a link to its public verification page.
Recipient introduction
The customer's contact opens the link from the issue email and confirms their address with a one-time code.
Recipient introduction
The customer's contact opens the link from the issue email and confirms their address with a one-time code.
Recipient view
After a one-time code, the customer's contact downloads the frozen edition files, without an account, and can check them against the public verification page.
Recipient view
After a one-time code, the customer's contact downloads the frozen edition files, without an account, and can check them against the public verification page.
Public verification
Anyone holding the verification reference can confirm that the edition exists, who issued it, and that it was not withdrawn, without seeing its content.
Public verification
Anyone holding the verification reference can confirm that the edition exists, who issued it, and that it was not withdrawn, without seeing its content.
4
Daan gives Lindqvist & Maas Advisory access to a specific customer response. Eva reviews specific answer versions and records what Brightwater must follow up.
Review is optional. Each decision identifies the specific answer and evidence versions reviewed. The report states how many of its answers an adviser reviewed. The adviser’s access can expire or be revoked.
Adviser access
Every Access Grant to an Adviser Practice, with its purpose, permissions, named Advisers, and expiry. The Owner decides every scope.
Adviser access
Every Access Grant to an Adviser Practice, with its purpose, permissions, named Advisers, and expiry. The Owner decides every scope.
Practice portfolio
An independent Adviser Practice sees the Organizations that granted it access, its open review work, and when each grant ends.
Practice portfolio
An independent Adviser Practice sees the Organizations that granted it access, its open review work, and when each grant ends.
Granted Response
The Adviser reads only the Response the grant names, read-only, with its Readiness score and a link to review coverage and Findings.
Granted Response
The Adviser reads only the Response the grant names, read-only, with its Readiness score and a link to review coverage and Findings.
Review inbox
The review inbox: each Answer awaiting the Adviser's decision, most urgent first, under its current grant.
Review inbox
The review inbox: each Answer awaiting the Adviser's decision, most urgent first, under its current grant.
Findings
The Adviser raises a Finding against one exact Answer, says what Proof would resolve it, and later verifies the follow-up.
Findings
The Adviser raises a Finding against one exact Answer, says what Proof would resolve it, and later verifies the follow-up.
Adviser Finding
A Finding from the independent Adviser arrives in the Organization's own workspace with an owner, a due date, and the Proof that would resolve it.
Adviser Finding
A Finding from the independent Adviser arrives in the Organization's own workspace with an owner, a due date, and the Proof that would resolve it.
5
A restore test report expires in September. Veldhoven’s working response shows the gap. The issued Noordkade report keeps the facts and files it contained when issued.
Noordkade’s working response now scores 98 because a supporting file expired. Its issued report remains unchanged. Updating the library never rewrites what the customer received.
Response progress
Further down the home, open Responses are listed by deadline, each with its own Readiness score and the counts behind it. The working response now scores 98 because a supporting file has expired. The issued report remains unchanged.
Response progress
Further down the home, open Responses are listed by deadline, each with its own Readiness score and the counts behind it. The working response now scores 98 because a supporting file has expired. The issued report remains unchanged.
Response under Adviser review
A Response under independent Adviser review. Its Readiness score is 78: two questions are still open and two answers rely on a backup restore report that expired in September.
Response under Adviser review
A Response under independent Adviser review. Its Readiness score is 78: two questions are still open and two answers rely on a backup restore report that expired in September.
Proof library
The Proof library: private files and references, each scanned before use, classified, versioned, and dated with its expiry.
Proof library
The Proof library: private files and references, each scanned before use, classified, versioned, and dated with its expiry.
One Proof record
One Proof record: its type, issuer, classification, and expiry, a private download, and its version history.
One Proof record
One Proof record: its type, issuer, classification, and expiry, a private download, and its version history.
6
Daan manages people, billing and access. Noor operates the service from a separate console. Each person’s permissions determine what they can see and do.
Billing
The Owner sees the plan, renewal date, member usage, payer, and billing contact. Amounts are synthetic demo values.
Billing
The Owner sees the plan, renewal date, member usage, payer, and billing contact. Amounts are synthetic demo values.
Invoices
Invoices with number, state, and amount including VAT, plus an encrypted export of the billing records.
Invoices
Invoices with number, state, and amount including VAT, plus an encrypted export of the billing records.
Members
Members and their roles. Owner, Security Lead (shown as Response manager), Organization Approver, and Contributor are separate authorities.
Members
Members and their roles. Owner, Security Lead (shown as Response manager), Organization Approver, and Contributor are separate authorities.
Organization settings
The Organization profile: legal name, verified domain, and contact details. Issued editions keep the identity they carried when issued.
Organization settings
The Organization profile: legal name, verified domain, and contact details. Issued editions keep the identity they carried when issued.
Notification defaults
Organization-wide defaults for reminders, freshness prompts, and approval and issue notices.
Notification defaults
Organization-wide defaults for reminders, freshness prompts, and approval and issue notices.
Support access
The Owner decides whether support may open a read-only, time-limited session for one support case. None has been requested here.
Support access
The Owner decides whether support may open a read-only, time-limited session for one support case. None has been requested here.
Console overview
The service operator's console, with its own sign-in and a second factor. It shows service health and the areas the operator's permissions open, never customer content. This demo server does not run scheduled tasks, so the console shows ‘Degraded’.
Console overview
The service operator's console, with its own sign-in and a second factor. It shows service health and the areas the operator's permissions open, never customer content. This demo server does not run scheduled tasks, so the console shows ‘Degraded’.
Support cases
Support cases assigned to the operator, with state, first-response due time, and only a safe diagnostic reference. The Security Lead's question sits here.
Support cases
Support cases assigned to the operator, with state, first-response due time, and only a safe diagnostic reference. The Security Lead's question sits here.
Health and backups
Health, storage, backups, and restore tests in one place, each with its operating instructions. This demo server does not run scheduled tasks, and the console reports that condition.
Health and backups
Health, storage, backups, and restore tests in one place, each with its operating instructions. This demo server does not run scheduled tasks, and the console reports that condition.
In the screens, Organization means the company. A Response contains a customer questionnaire and the answers being prepared. A Request asks a colleague for information. Proof means supporting files and references. Findings are issues raised by an adviser.
All organizations, people, documents, and amounts shown are synthetic demo data.
Daan manages members, billing, company details and permissions granted to advisers or support.
The Organization Owner role alone does not give access to answers or supporting evidence.
Members
Members and their roles. Owner, Security Lead (shown as Response manager), Organization Approver, and Contributor are separate authorities.
Maren, shown as Response manager in the interface, prepares customer responses and maintains the answer and evidence libraries.
Preparing responses does not by itself give permission to approve them or record an independent adviser review.
One Answer
One Answer with its scope, stated limitation, linked Proof, and version history.
Tomás approves a specific, fixed version and authorises its separate issue as a report.
The approver role does not permit editing the fixed version or recording an independent adviser review.
Candidate awaiting approval
The company’s approver reviews the fixed version awaiting approval, including its recipient, validity, content identifier and every answer. Approval requires a fresh identity check.
Jonas uses a one-time code to answer one assigned question and attach permitted supporting evidence.
This access does not let him browse Brightwater’s workspace or send a customer response.
Answering the Request
After a one-time code, the Contributor answers the one question and attaches Proof on a phone or laptop. They see nothing else of the Organization.
The customer uses a one-time code to open one issued report and download its permitted files.
This access does not let the recipient browse the workspace, hidden evidence or another report.
Recipient view
After a one-time code, the customer's contact downloads the frozen edition files, without an account, and can check them against the public verification page.
Lindqvist & Maas organises the reviews it has permission to perform. Eva reviews specific answer versions and records issues to follow up.
Belonging to the advisory firm does not automatically give access to a client’s information. Adviser permissions do not authorise approval of what the client shares.
Practice portfolio
An independent Adviser Practice sees the Organizations that granted it access, its open review work, and when each grant ends.
A Sponsor pays for the company’s plan. A Billing Contact receives the billing records shared with them.
Payment gives neither role membership, access to answers or evidence, approval rights or ownership.
The screen shows the Owner’s view of the payer and billing contact.
Billing
The Owner sees the plan, renewal date, member usage, payer, and billing contact. Amounts are synthetic demo values.
Noor monitors the service and handles assigned support cases using separate Operator permissions.
The Operator role does not by itself give access to customer answers and evidence or permission to approve a customer’s report.
Console overview
The service operator's console, with its own sign-in and a second factor. It shows service health and the areas the operator's permissions open, never customer content. This demo server does not run scheduled tasks, so the console shows ‘Degraded’.
Open any screen to view it in full.
No screens match these filters. Choose another role or device.
Prepare customer responses, reuse answers and collect supporting records.
Home
The Security Lead's home: the one task that needs them next, open work by kind, and recent activity that never shows what an Answer says.
Home
The Security Lead's home: the one task that needs them next, open work by kind, and recent activity that never shows what an Answer says.
Home · navigation open
The Security Lead's home: the one task that needs them next, open work by kind, and recent activity that never shows what an Answer says. The phone navigation is open in this view.
Response progress
Further down the home, open Responses are listed by deadline, each with its own Readiness score and the counts behind it. The working response now scores 98 because a supporting file has expired. The issued report remains unchanged.
Response progress
Further down the home, open Responses are listed by deadline, each with its own Readiness score and the counts behind it. The working response now scores 98 because a supporting file has expired. The issued report remains unchanged.
Responses
The Security Lead sees every customer Response in one list, with its state, deadline, and Readiness score. No approval or issue ever depends on the score.
Responses
The Security Lead sees every customer Response in one list, with its state, deadline, and Readiness score. No approval or issue ever depends on the score.
Response just started
A new questionnaire from a prospective customer, a day after it arrived: four of twelve questions answered from the library so far, and a Readiness score of 33 that shows exactly what is missing.
Response just started
A new questionnaire from a prospective customer, a day after it arrived: four of twelve questions answered from the library so far, and a Readiness score of 33 that shows exactly what is missing.
Response collecting input
A Response two weeks before its deadline: nine of fourteen questions settled from the library, and validation names exactly which five are still missing.
Response collecting input
A Response two weeks before its deadline: nine of fourteen questions settled from the library, and validation names exactly which five are still missing.
Response under Adviser review
A Response under independent Adviser review. Its Readiness score is 78: two questions are still open and two answers rely on a backup restore report that expired in September.
Response under Adviser review
A Response under independent Adviser review. Its Readiness score is 78: two questions are still open and two answers rely on a backup restore report that expired in September.
One question
The Security Lead proposes a library answer and checks where it applies, whether it is current, its limitations, its wording and what may be shared with this customer.
One question
The Security Lead proposes a library answer and checks where it applies, whether it is current, its limitations, its wording and what may be shared with this customer.
Request List
The Request List sends one question to a colleague with its purpose, the Proof expected, and a due date. The colleague needs no account.
Request List
The Request List sends one question to a colleague with its purpose, the Proof expected, and a due date. The colleague needs no account.
Answer Library
The Answer Library holds the Organization's reusable Answers, each versioned, owned, and dated for its next review.
Answer Library
The Answer Library holds the Organization's reusable Answers, each versioned, owned, and dated for its next review.
Answer Library · navigation open
The Answer Library holds the Organization's reusable Answers, each versioned, owned, and dated for its next review. The phone navigation is open in this view.
One Answer
One Answer with its scope, stated limitation, linked Proof, and version history.
One Answer
One Answer with its scope, stated limitation, linked Proof, and version history.
Proof library
The Proof library: private files and references, each scanned before use, classified, versioned, and dated with its expiry.
Proof library
The Proof library: private files and references, each scanned before use, classified, versioned, and dated with its expiry.
One Proof record
One Proof record: its type, issuer, classification, and expiry, a private download, and its version history.
One Proof record
One Proof record: its type, issuer, classification, and expiry, a private download, and its version history.
Adviser Finding
A Finding from the independent Adviser arrives in the Organization's own workspace with an owner, a due date, and the Proof that would resolve it.
Adviser Finding
A Finding from the independent Adviser arrives in the Organization's own workspace with an owner, a due date, and the Proof that would resolve it.
Ask for missing information and follow the colleague’s response.
Request introduction
A colleague opens the link from their Request email. They see who asked, why, and by when, before confirming their address.
Request introduction
A colleague opens the link from their Request email. They see who asked, why, and by when, before confirming their address.
Answering the Request
After a one-time code, the Contributor answers the one question and attaches Proof on a phone or laptop. They see nothing else of the Organization.
Answering the Request
After a one-time code, the Contributor answers the one question and attaches Proof on a phone or laptop. They see nothing else of the Organization.
Approve a version, issue the report and see what the recipient receives.
Candidate awaiting approval
The company’s approver reviews the fixed version awaiting approval, including its recipient, validity, content identifier and every answer. Approval requires a fresh identity check.
Candidate awaiting approval
The company’s approver reviews the fixed version awaiting approval, including its recipient, validity, content identifier and every answer. Approval requires a fresh identity check.
Approved, ready to issue
An approved candidate, not yet issued. Approval and issue are separate, named actions, and the approval remains valid only while the answers and evidence used for that approval remain unchanged.
Approved, ready to issue
An approved candidate, not yet issued. Approval and issue are separate, named actions, and the approval remains valid only while the answers and evidence used for that approval remain unchanged.
Issued edition
The issued report keeps a fixed record of its reference, issuer, validity and exact output files, with a link to its public verification page.
Issued edition
The issued report keeps a fixed record of its reference, issuer, validity and exact output files, with a link to its public verification page.
Recipient introduction
The customer's contact opens the link from the issue email and confirms their address with a one-time code.
Recipient introduction
The customer's contact opens the link from the issue email and confirms their address with a one-time code.
Recipient view
After a one-time code, the customer's contact downloads the frozen edition files, without an account, and can check them against the public verification page.
Recipient view
After a one-time code, the customer's contact downloads the frozen edition files, without an account, and can check them against the public verification page.
Public verification
Anyone holding the verification reference can confirm that the edition exists, who issued it, and that it was not withdrawn, without seeing its content.
Public verification
Anyone holding the verification reference can confirm that the edition exists, who issued it, and that it was not withdrawn, without seeing its content.
Review client responses, record findings and manage granted access.
Practice portfolio
An independent Adviser Practice sees the Organizations that granted it access, its open review work, and when each grant ends.
Practice portfolio
An independent Adviser Practice sees the Organizations that granted it access, its open review work, and when each grant ends.
Practice portfolio · navigation open
An independent Adviser Practice sees the Organizations that granted it access, its open review work, and when each grant ends. The phone navigation is open in this view.
One client Organization
One client Organization from the Practice side: the Access Grant, its scope and expiry, and the Reviews under it.
One client Organization
One client Organization from the Practice side: the Access Grant, its scope and expiry, and the Reviews under it.
Granted Response
The Adviser reads only the Response the grant names, read-only, with its Readiness score and a link to review coverage and Findings.
Granted Response
The Adviser reads only the Response the grant names, read-only, with its Readiness score and a link to review coverage and Findings.
Review inbox
The review inbox: each Answer awaiting the Adviser's decision, most urgent first, under its current grant.
Review inbox
The review inbox: each Answer awaiting the Adviser's decision, most urgent first, under its current grant.
Findings
The Adviser raises a Finding against one exact Answer, says what Proof would resolve it, and later verifies the follow-up.
Findings
The Adviser raises a Finding against one exact Answer, says what Proof would resolve it, and later verifies the follow-up.
Manage members, plans, permissions and support access.
Billing
The Owner sees the plan, renewal date, member usage, payer, and billing contact. Amounts are synthetic demo values.
Billing
The Owner sees the plan, renewal date, member usage, payer, and billing contact. Amounts are synthetic demo values.
Billing · navigation open
The Owner sees the plan, renewal date, member usage, payer, and billing contact. Amounts are synthetic demo values. The phone navigation is open in this view.
Invoices
Invoices with number, state, and amount including VAT, plus an encrypted export of the billing records.
Invoices
Invoices with number, state, and amount including VAT, plus an encrypted export of the billing records.
Plans
The Owner compares plans and sees the consequence of a change before anything is charged.
Plans
The Owner compares plans and sees the consequence of a change before anything is charged.
Organization settings
The Organization profile: legal name, verified domain, and contact details. Issued editions keep the identity they carried when issued.
Organization settings
The Organization profile: legal name, verified domain, and contact details. Issued editions keep the identity they carried when issued.
Organization settings · navigation open
The Organization profile: legal name, verified domain, and contact details. Issued editions keep the identity they carried when issued. The phone navigation is open in this view.
Members
Members and their roles. Owner, Security Lead (shown as Response manager), Organization Approver, and Contributor are separate authorities.
Members
Members and their roles. Owner, Security Lead (shown as Response manager), Organization Approver, and Contributor are separate authorities.
Adviser access
Every Access Grant to an Adviser Practice, with its purpose, permissions, named Advisers, and expiry. The Owner decides every scope.
Adviser access
Every Access Grant to an Adviser Practice, with its purpose, permissions, named Advisers, and expiry. The Owner decides every scope.
Notification defaults
Organization-wide defaults for reminders, freshness prompts, and approval and issue notices.
Notification defaults
Organization-wide defaults for reminders, freshness prompts, and approval and issue notices.
Support
The support page: Help search, a request form, and a plain statement of what support can and cannot see.
Support
The support page: Help search, a request form, and a plain statement of what support can and cannot see.
Support · navigation open
The support page: Help search, a request form, and a plain statement of what support can and cannot see. The phone navigation is open in this view.
Support access
The Owner decides whether support may open a read-only, time-limited session for one support case. None has been requested here.
Support access
The Owner decides whether support may open a read-only, time-limited session for one support case. None has been requested here.
The operator’s separate views for support, billing and reliability.
Console overview
The service operator's console, with its own sign-in and a second factor. It shows service health and the areas the operator's permissions open, never customer content. This demo server does not run scheduled tasks, so the console shows ‘Degraded’.
Console overview
The service operator's console, with its own sign-in and a second factor. It shows service health and the areas the operator's permissions open, never customer content. This demo server does not run scheduled tasks, so the console shows ‘Degraded’.
Console overview · navigation open
The service operator's console, with its own sign-in and a second factor. It shows service health and the areas the operator's permissions open, never customer content. This demo server does not run scheduled tasks, so the console shows ‘Degraded’. The phone navigation is open in this view.
Support cases
Support cases assigned to the operator, with state, first-response due time, and only a safe diagnostic reference. The Security Lead's question sits here.
Support cases
Support cases assigned to the operator, with state, first-response due time, and only a safe diagnostic reference. The Security Lead's question sits here.
Billing reconciliation
Payment activity that needs someone to review it. Nothing needs review in the demo.
Billing reconciliation
Payment activity that needs someone to review it. Nothing needs review in the demo.
Health and backups
Health, storage, backups, and restore tests in one place, each with its operating instructions. This demo server does not run scheduled tasks, and the console reports that condition.
Health and backups
Health, storage, backups, and restore tests in one place, each with its operating instructions. This demo server does not run scheduled tasks, and the console reports that condition.
Product information, account creation and sign-in.
Home
The public home page explains what the workspace is for: answering customer security questions with controlled Proof and a frozen edition the customer can verify.
Home
The public home page explains what the workspace is for: answering customer security questions with controlled Proof and a frozen edition the customer can verify.
Home · navigation open
The public home page explains what the workspace is for: answering customer security questions with controlled Proof and a frozen edition the customer can verify. The phone navigation is open in this view.
Product
The product page walks through the flow from a customer request to an issued, verifiable edition.
Product
The product page walks through the flow from a customer request to an issued, verifiable edition.
For suppliers
The supplier page speaks to the company that receives security questionnaires from its customers.
For suppliers
The supplier page speaks to the company that receives security questionnaires from its customers.
For advisers
The adviser page explains how an independent Adviser Practice reviews a client's exact Answers under a scoped, revocable Access Grant.
For advisers
The adviser page explains how an independent Adviser Practice reviews a client's exact Answers under a scoped, revocable Access Grant.
Pricing
The pricing page lists the plans from the plan catalogue; the amounts shown here are synthetic demo values.
Pricing
The pricing page lists the plans from the plan catalogue; the amounts shown here are synthetic demo values.
Create an Organization
Creating an Organization starts with a work email address and a six-digit code; no password is ever set.
Create an Organization
Creating an Organization starts with a work email address and a six-digit code; no password is ever set.
Sign in
Members sign in with their email address and a one-time code.
Sign in
Members sign in with their email address and a one-time code.
One-time code
The code step: the member types the six-digit code from the email they just received.
One-time code
The code step: the member types the six-digit code from the email they just received.
Tell us about your company, the commercial opportunity you see in the security response workspace and what you would bring to a partnership. Enquiries sent from a company email address get priority.