Evidra
Sign in
Examples

Real questionnaires, answered by Evidra

Every example here is real output from the product. The documents were indexed, the questionnaire was uploaded as a file, and each answer was drafted only from those documents, with the passages it cites.

  • Halvorn

    Vendor security questionnaire

    Word file, 11 questions, drafted from Halvorn's security policy, data protection standard and continuity plan.

    • 10 drafted with evidence
    • 1 marked No evidence found
  • Evidra

    Vendor security assessment

    Excel file, 13 questions, drafted from Evidra's security overview, privacy policy, terms and acceptable use policy.

    • 12 approved after review
    • 1 marked No evidence found
    • 31 passages cited in the export
  • Evidra

    Due diligence questionnaire

    Word file, 3 questions, drafted from answers approved in the security assessment and the same documents.

    • 2 reused from the answer library
    • 1 drafted from the documents
Browse

Open a folder to read the answers

One folder per questionnaire. Hover or tap to fan the answers out, and open one to read it with its evidence and its trail.

Halvorn

3 examples

Hover or tap

Evidra security assessment

3 examples

Hover or tap

Answer reuse

2 examples

Hover or tap
Example 1

Halvorn: a vendor security questionnaire

Halvorn is a fictional payroll software company created for this demonstration. We wrote its information security policy, data protection standard and continuity plan, indexed them, and uploaded a 11 question security questionnaire as a Word file.

Evidra drafted 10 answers from those three documents, each citing the passages it used. The question on ISO 27001 was marked No evidence found, because none of the documents mentions a certification. These are machine drafts, shown before review.

EvidraHalvorn, vendor security questionnaire, question B1, drafted
B1Data protectionHigh confidence82%Drafted

Is customer data encrypted at rest and in transit? Describe the algorithms used.

Format: Yes or no with detailLimit: 500 characters
Answer

Yes. Customer data is encrypted at rest with AES-256 and in transit with TLS 1.2 or higher. Encryption keys are held in a cloud key management service and rotated annually.

Evidence1 source
  • Halvorn information security policy v3.1page 1relevance 77%
    ... Encryption Customer data is encrypted at rest with AES-256 and in transit with TLS 1.2 or higher. Encryption keys are held in a cloud key management service and rotated every year. Vulnerability management Production systems are scanned for vulnerabilities every week. ...
EvidraHalvorn, vendor security questionnaire, question D2
D2AssuranceNo evidenceNo evidence found

Do you hold ISO 27001 certification?

Format: Yes or noLimit: 500 characters
Answer

No evidence found in your knowledge library.

Nothing was drafted, because no source document supports an answer. The certification or audit report, or a statement of planned certifications, would answer this question.

No evidence attached.
Example 2

Evidra: its own vendor security assessment

Evidra's security overview, privacy policy, terms of service and acceptable use policy, all published on this site, were indexed, and a 13 question security assessment was uploaded as an Excel file.

12 answers were drafted with evidence and approved after review. The reviewer tightened 2 of them, kept their evidence and left a comment on one. The question on cyber liability insurance was marked No evidence found and left blank in the exported workbook.

Source documents: Security overview, Privacy policy, Terms of service, Acceptable use policy.

EvidraVendor security assessment, question 2.1, approved
2.1Data protectionHigh confidence80%Approved

Is customer data encrypted in transit and at rest?

Format: Yes or no with detail
Answer

Yes. Connections between browsers and the platform, and between the platform and each managed service, use TLS. Data at rest, including the database, the passages and the files, is encrypted by Google Cloud with provider managed keys.

Show the original draft

Yes. Connections between browsers and our platform, and between the platform and each managed service, use TLS for encryption in transit. Data at rest is encrypted by Google Cloud for the database, passages, and files, and by our storage providers.

Evidence2 sources
  • Evidra security overviewpage 1relevance 78%
    ... Encryption Connections between browsers and the platform, and between the platform and each managed service, use TLS. Data at rest is encrypted by Google Cloud for the database, the passages and the files. Provider managed keys are used throughout; customer managed keys are not offered today. ...
  • Evidra privacy policypage 2relevance 67%
    ... Where data is processed Authentication, the application database and uploaded files are held on Google Cloud in the European Union multi region. Embeddings, question extraction and drafting run on Vertex AI on Google Cloud in the Netherlands region. ...
Activity trail
  1. Evidra teamdrafted this answer from the knowledge library: 2 sources, high confidence
  2. Evidra teamedited the answer
  3. Evidra teamcommented
  4. Evidra teamapproved the answer
  5. Evidra teamsaved the approved answer to the answer library
EvidraVendor security assessment, question 4.2
4.2AssuranceNo evidenceNo evidence found

Do you carry cyber liability insurance? Provide the coverage limit.

Format: Yes or no with detail
Answer

No evidence found in your knowledge library.

Nothing was drafted, because no source document supports an answer. A certificate of insurance or a summary of insurance coverage would answer this question.

No evidence attached.
Example 3

The next questionnaire starts from approved answers

A 3 question due diligence questionnaire followed, as a Word file. 2 of its questions matched answers approved in the security assessment, so they were reused with their evidence. The rest was drafted from the documents.

EvidraDue diligence questionnaire, question 1.1, reused from the answer library
1.1AIHigh confidence100%Drafted

Is customer data used to train or fine tune AI models?

Format: Yes or no with detailReused from the answer library
Answer

No. Customer documents, questionnaires, answers, and comments are not used to train or fine-tune any model, neither by our platform nor by our providers. We do not use customer content for model training or fine-tuning, and we do not share it with other customers. The models run on Vertex AI under Google Cloud's terms, which state that Google does not use customer data for training or fine-tuning without permission, and our platform gives no such permission.

Evidence3 sources
  • Evidra security overviewpage 2relevance 78%
    ... page or by request to the security contact below. No model training on customer data Customer documents, questionnaires, answers and comments are not used to train or fine tune any model, by the platform or by its providers. The models run on Vertex AI under Google ...
  • Evidra privacy policypage 1relevance 63%
    ... Customer content: to index your documents, draft answers strictly from them, attach evidence, run the verification workflow and export the completed response. Customer content is never used to train or fine tune any model, by us or by our providers. ...
  • Evidra terms of servicepage 1relevance 52%
    ... We do not use customer content to train or fine tune any model and we do not share it with other customers. You are responsible for having the right to upload the content you upload, including any personal data it contains. Drafts, evidence and human review
EvidraDue diligence questionnaire, question 1.2, drafted
1.2AIHigh confidence79%Drafted

How does the platform prevent AI generated answers that are not supported by the customer's documents?

Format: Free text
Answer

Our platform prevents AI-generated answers not supported by customer documents by ensuring that for each question, only passages retrieved from the organization's own document library are sent to the drafting model. Drafted answers are produced from these retrieved passages and are shown with the passages they came from. If no supporting passage is found, the question is marked "No evidence found." Additionally, drafted answers are a starting point for reviewers, and organizations are responsible for reviewing every answer before it is sent to a third party, with evidence attached for human checking.

Evidence4 sources
  • Evidra security overviewpage 2relevance 79%
    ... What each model receives: document text goes to the embedding model to build the organization's index, the text of a Word or PDF questionnaire goes to the drafting model to extract its questions, and for each question only the passages retrieved for it go to the drafting model. Subprocessors ...
  • Evidra security overviewpage 1relevance 71%
    ... organization, with public access prevented. - Vertex AI on Google Cloud, in the Netherlands region, runs the models: Google's text embedding model for passages and questions, and a Gemini model that drafts answers and reads the questions out of Word and PDF questionnaires. ...
  • Evidra terms of servicepage 1relevance 59%
    ... A question with no supporting passage is marked No evidence found. Drafts are a starting point for your reviewers: your organization is responsible for reviewing every answer before it is sent to a third party, and for the accuracy of what it sends. ...
  • Evidra acceptable use policypage 1relevance 54%
    ... Answers and evidence The evidence attached to an answer is there so a person can check it. Do not present an answer marked Unverified, or an answer edited beyond what its evidence supports, to a third party as a verified statement without reviewing it. ...

Answer your next questionnaire with evidence

Upload the documents you already trust and one questionnaire. Evidra drafts every answer from them, cites the passages it used and shows you where your library is thin.

Start your response libraryTalk to sales