Evidra
Enterprise Response Intelligence

Every answer.
Backed by evidence.

Turn your company's existing knowledge into verified responses for RFPs, security questionnaires, DDQs and enterprise requests.

Now onboarding design partners.

Knowledge to evidence to verified response
The product in one frame

One answered question, with its evidence

A drafted answer, the passages it was drafted from with document names and page numbers, a confidence signal, a verification status and the trail of who did what. This is what every question in a questionnaire looks like.

EvidraSecurity questionnaire, question 4.2
4.2Data protectionHigh confidence91%Drafted

Describe how customer data is encrypted at rest and in transit, and how encryption keys are managed and rotated.

Format: Free textLimit: 1200 characters
Answer

Customer data is encrypted at rest with AES-256 using platform managed keys, and in transit with TLS 1.2 or higher. Encryption keys are held in a managed key vault with hardware backed protection. Keys are rotated every 12 months, and immediately if a compromise is suspected. Access to key material is restricted to the platform service identity and is logged.

Evidence2 sources
  • Information security policy v4.1page 12relevance 93%
    All customer data stored by the platform is encrypted at rest using AES-256. Data in transit between customers and the platform, and between platform services, is protected with TLS 1.2 or higher.
  • Key management standardpage 3relevance 88%
    Encryption keys are generated and stored in the managed key vault with hardware backed protection. Keys are rotated on a 12 month schedule and immediately upon suspected compromise. Access to key material is limited to the platform service identity and all access is logged.
Activity trail
  1. Sep 18, 2026, 9:12 AM UTCDrafting jobdrafted this answer from the knowledge library: 2 sources, high confidence
  2. Sep 18, 2026, 10:03 AM UTCSecurity reviewercommented

Illustrative sample. Design partner content will replace this with permission.

How it works

From your documents to a verified response

Five steps, run as a background job with progress per question. The model only ever sees passages from your own library.

Step 01 of 05

Company knowledge

Past responses, policies, product documentation and compliance records, uploaded once.

Each document carries a category, an owner, an effective date and an optional expiry date, so an answer drafted from an expired policy is visible as such.

Step 02 of 05

Ingestion

Each document is read page by page and split into passages that keep their page numbers.

Each page is read and split into passages that keep their page numbers, so evidence can point back to the exact place in the document.

Step 03 of 05

Retrieval

Every question is matched against your passages only, never against the open web.

Hybrid vector and keyword search over one index per organization. No query from another organization can reach it.

Step 04 of 05

Evidence

The passages that support the answer are attached with document name and page.

The drafting prompt receives only retrieved passages and must cite them. No citation, no answer: the question is marked No evidence found.

Step 05 of 05

Verified response

A reviewer confirms the answer, an approver signs it off, and the export carries the evidence.

Approved answers join the answer library with their evidence, so the next questionnaire reuses them first.

Integrity

When there is no evidence, it says so.

The platform never invents an answer. If no passage in your library supports a response, the question is marked No evidence found and the platform suggests which kind of document would answer it.

This is what makes the AI claim honest. A drafted answer can only contain what a cited passage contains, so a reviewer can check every sentence against the source in seconds, and the absence of an answer is a signal your team can act on rather than a guess a buyer will find later.

EvidraSecurity questionnaire, question 7.4
7.4Business continuityNo evidenceNo evidence found

Provide the recovery time objective and recovery point objective for the service, and the date of the last full disaster recovery test.

Format: Free text
Answer

No evidence found in your knowledge library.

Nothing was drafted, because no source document supports an answer. A business continuity or disaster recovery plan with stated RTO and RPO values, and the report from the most recent DR test, would answer this question.

No evidence attached.

Illustrative sample. Design partner content will replace this with permission.

Verification workflow

Verified by people who own the answer

Drafting is the start. Every answer moves through the people responsible for it, and the product records each step.

  • Evidence linked
  • Reviewer roles
  • Activity trail
  • Answer library

Contributor

Uploads documents, corrects extracted questions and comments on drafts. Sees every answer and its evidence, changes none of the verification state.

Reviewer

Edits drafts, keeps or removes evidence passages, flags answers that need another owner and approves answers that have evidence attached.

Approver

Signs off the questionnaire, exports it, and is the only role that can approve an answer without evidence, which the activity trail records as an override.

EvidraSecurity questionnaire, question 4.2, approved
4.2Data protectionHigh confidence91%Approved

Describe how customer data is encrypted at rest and in transit, and how encryption keys are managed and rotated.

Format: Free textLimit: 1200 characters
Answer

Customer data is encrypted at rest with AES-256 using platform managed keys, and in transit with TLS 1.2 or higher. Encryption keys are held in a managed key vault with hardware backed protection. Keys are rotated every 12 months, and immediately if a compromise is suspected. Access to key material is restricted to the platform service identity and is logged.

Evidence2 sources
  • Information security policy v4.1page 12relevance 93%
    All customer data stored by the platform is encrypted at rest using AES-256. Data in transit between customers and the platform, and between platform services, is protected with TLS 1.2 or higher.
  • Key management standardpage 3relevance 88%
    Encryption keys are generated and stored in the managed key vault with hardware backed protection. Keys are rotated on a 12 month schedule and immediately upon suspected compromise. Access to key material is limited to the platform service identity and all access is logged.
Activity trail
  1. Sep 18, 2026, 9:12 AM UTCDrafting jobdrafted this answer from the knowledge library: 2 sources, high confidence
  2. Sep 18, 2026, 10:03 AM UTCSecurity reviewercommented

Illustrative sample. Design partner content will replace this with permission.

Editing an answer keeps its evidence link: the reviewer chooses which passages still support the new text. Removing all evidence marks the answer Unverified, and it stays that way until an Approver overrides it, which the activity trail records.

Security and data handling

Practices, stated plainly

No certification is held at MVP and no badges are shown. SOC 2 Type II is planned. These are the practices in place today.

  • Isolated index per organization

    Your passages live in their own search index. No query from another organization can reach them.

  • No training on customer data

    Documents, answers and questionnaires are used to answer your questions and for nothing else.

  • Deletion propagates within minutes

    Deleting a document removes its chunks from the index and its file from storage within minutes.

  • Encryption in transit and at rest

    TLS on every connection. Storage providers encrypt files, rows and index data at rest.

  • Data residency options coming

    Data is held on Google Cloud in the European Union multi region today. Customer selected regions and dedicated environments are planned.

Read the security page
Security overviewIsolation, encryption, deletion and the no training rule, written as practices you can check.
For teams and enterprises

Built for the teams that answer, and the teams that check

Presales, security and bid teams work in one organization with named seats and explicit roles. Larger organizations get audit export today and dedicated environments as a planned option.

Talk to sales

Seats

Named seats per plan, with invitations by email and role changes recorded in the activity trail.

Roles

Contributor, Reviewer and Approver on every organization, enforced on the server, not only in the interface.

Audit export

Every action on an answer, document or member is exportable as a dated record for your own audit files.

Single sign on

Single sign on with SAML and Microsoft Entra is planned for a later phase.

Coming soon

Dedicated environments

A separate deployment with its own storage and index for organizations that require it.

Coming soon
Founder and team

Who is building this

A technical founder building the product with two or three design partners who answer questionnaires every month.

UE

Ugbaja Emmanuel Michael

Founder

Ugbaja Emmanuel Michael is a technical founder who builds the product end to end, from the ingestion pipeline to the review workflow. Design partners test the product against real questionnaires each month, and their feedback sets the roadmap.

Design partners will be named here with their permission.

Now onboarding design partners.

Plans for every size of team

Four tiers in USD, from a single team to an organization with a dedicated environment. Prices are per organization per month.

Starter

For one team answering a handful of questionnaires a month.

$149per month
Seats
3
Pages indexed
2,000

Team

Trial available

For presales and security teams with a steady questionnaire load.

$499per month
Seats
10
Pages indexed
20,000

Business

For larger organizations with big document libraries.

$1,499per month
Seats
30
Pages indexed
100,000

Enterprise

Custom seats and pages, with a dedicated environment.

Custom
Seats
Custom
Pages indexed
Custom

Priced in USD for every region. Now onboarding design partners.

See full pricing and the comparison table

Start your response library

Upload the documents your team already trusts. Every answer that follows is drafted from them, cited and reviewed before it leaves.