Before you send your first one.

Yes. Policies and procedures are enough to answer many questions. Answers based only on your own documents are marked for confirmation rather than presented as audited, and you'll see more blank answers where nothing describes the control.

Check your report's terms. Many allow sharing with service providers acting on your behalf. Turnflow uses the report only to complete your questionnaire and deletes it 14 days after delivery.

Scanned pages without a text layer can't be quoted, so they're flagged to the reviewer and treated as missing evidence. If you have the original digital PDF, send that instead.

It's disclosed. Rather than a clean "Yes", the answer is marked partial and the note quotes the auditor's finding, for example that 2 of 25 sampled terminations were handled late. Your customer finds out from you, accurately, instead of later.

No. The file is edited cell by cell, and only the cells meant for answers, comments or evidence are written. Every other part of the workbook is checked afterwards to make sure it's unchanged.

They stay blank, and the comment beside them names what's missing, for example "no document states the data retention period". Fill those in yourself, or add the document and send the questionnaire again.

That's the point of the citations. Each one names the document, control and page and quotes the exact sentence, so a reviewer can open your report and confirm it in seconds.

Most portals can export to Excel. Export it, send the export, and paste or import the completed answers back. Direct portal support isn't available yet.

24 hours from the moment your upload finishes. Your workspace shows the exact due time and current stage, and you get an email as soon as the file is ready.

You get half your fee back, automatically. If the completed file arrives after the due time shown in your workspace, we refund 50% to your card (or take 50% off your invoice) as soon as it's delivered. You don't need to ask.

Hundreds of questions per request, including the full CSA CAIQ with close to 300. If a request is unusually large, we'll tell you straight away if it needs longer.

$1,500 per questionnaire, up to 600 questions, whatever the number of evidence files. We invoice after delivery. See pricing.

Yes, from your workspace. You can add evidence until the file is delivered, and cancel any time before delivery except during the few minutes drafting is under way. Paid requests are refunded in full and their files deleted straight away.

Read the completed sample: a fictional company's questionnaire answered from its sample evidence, with every source quoted. You can download the Excel version from the same page.

It keeps your requests private to you without another password. Your workspace lists only the requests you sent, and finished files can only be downloaded after signing in or from the private link we email you.

No. Your documents are used only to complete your questionnaire. They aren't shared with other clients, sold, or used to train models, and they're deleted 14 days after delivery. See Security & data and the privacy policy.