CitelodeThe enterprise deal is ready. The security spreadsheet isn't.
Citelode drafts answers to vendor security questionnaires only from your own policies, architecture notes and past answers. It cites every source, leaves blank anything it can't prove, and hands back your buyer's original Excel file, filled in.
No signup for the demo or the free check. Files in the free tools never leave your browser.
The deal stalls on question 1 of 240
The buyer's procurement team sends a spreadsheet of security, privacy and AI-risk questions. The answers are scattered across old questionnaires, policies, cloud settings and the CTO's memory. So the CTO stops building product for two days, and the answers still come out inconsistent with last quarter's.
Most questions are repeats
Most of it is the same encryption, access, backup and incident questions, reworded. Approve an answer once, and Citelode reuses it everywhere the buyer means the same thing.
A wrong answer costs more than a slow one
"Yes, annual pen tests" without a report becomes a contract problem. Citelode will not draft a claim your documents don't contain.
You don't need a $10k/year platform yet
The large trust platforms are built for companies doing hundreds of reviews a year. If you get 1–10 a year, pay per questionnaire.
How it works
- Add what you already have. Policies, architecture notes, your DPA, a subprocessor list. Or just upload your last completed questionnaire, check its answers, and you have a starting library.
- Upload the buyer's questionnaire. XLSX (multi-sheet, dropdowns, merged cells), CSV, DOCX tables, PDF or text. Citelode finds the question, answer, comment and ID columns. You can correct its guesses.
- Review the exceptions, not 240 rows. Each answer shows its confidence and source. Missing evidence, conflicting sources and stale documents are listed first.
- Export the original file. Answers go into the buyer's own workbook. Formatting, formulas, dropdowns and other sheets stay as they were. Approved answers are saved for the next deal.
The no-invention rule
Citelode's answers are extractive. Every drafted answer is either an answer you approved or verbatim sentences from your own documents, with document code, version and section. A second check blocks any certification, number, frequency or vendor that isn't in the cited source. If you edit an answer to add a claim the sources don't support, Citelode asks you to confirm before approving it.
If the evidence isn't there, the answer is NO SUPPORTED ANSWER, and you get a note of exactly what to upload or write.
What you get on every questionnaire
Source citations
"SEC-POL-003 v1.4 §4.2" or "QA-ENC-07" on each answer, so reviewers can check it in seconds.
Gold Answer Library
Approved answers with owner, review date and expiry. Paraphrased questions find them, and a scope check stops a laptop answer being reused for the database.
Conflict detection
Your 2025 answer said 90-day retention; your 2026 policy says 30. Citelode flags it instead of quietly picking one.
Staleness warnings
Expired certificates, policies past their review date and answers nobody has re-checked in a year are marked CURRENT, REVIEW_SOON, STALE or EXPIRED.
Missing-evidence list
One list of what's blocking you (pen-test summary, insurance letter, SLA), grouped so you can ask the right person once.
Original-format export
The buyer's XLSX comes back with your answers in their columns, plus an internal review report with every citation.
Your security documents stay yours
You're uploading the documents attackers would most like to read, so we built for that.
- Processing runs in your browser. Parsing, matching, drafting and export all happen on your machine.
- No third-party AI models. Citelode doesn't send your documents to an LLM provider, and nothing is used for training.
- Encrypted at rest with a separate AES-256-GCM key per workspace. Every record is bound to its workspace, and requests for another workspace's data are refused and logged.
- Short-lived signed download links, an access log, configurable retention and one-click deletion of the whole workspace.
Honest limits
Citelode drafts answers; a human at your company approves them. It isn't a GRC platform, auditor or compliance certification, and it doesn't promise to close the deal. It makes the security review faster and more consistent, and it makes clear which answers are backed by evidence.
Pay per questionnaire. No annual contract.
The workspace, document library, Gold Answers, free analyser and a 10-answer preview of every questionnaire are free. Unlock a questionnaire to review all its answers and export it.
- Up to 60 questions
- All answers, review, export
- Up to 150 questions
- SIG Lite / CAIQ-Lite size
- Up to 400 questions
- Multi-sheet workbooks
- 3 questionnaires a month
- Up to 400 questions each
- Cancel anytime
- Unlimited questionnaires
- Up to 1,000 questions each
- For consultants and teams
Prices in USD. Payments are processed by Polar (merchant of record), which handles sales tax and VAT. 30-day money-back guarantee on one-time purchases.
FAQ
Is this "ChatGPT for questionnaires"?
No. Citelode doesn't generate answers with a language model. It finds and reuses what you have already written and approved, cites it, and refuses to fill gaps. That's slower to impress in a demo, and much safer to send to a buyer's security team.
What if my documents don't cover a question?
You get NO SUPPORTED ANSWER and the evidence that would answer it. Write the answer yourself once, approve it, and it joins your Gold Answer Library for next time.
Will it break the buyer's spreadsheet?
No. Citelode never rebuilds the workbook. It writes only into the answer cells of a copy and leaves formulas, formatting, merged cells, dropdowns, hidden rows and other sheets as they were. The original upload is never modified.
Which formats work?
XLSX is best: multiple sheets, dropdowns, Yes/No columns, comments and IDs. CSV and Word tables are returned in their own format. PDF and plain-text questionnaires return a clean answer workbook. Legacy .xls needs re-saving as .xlsx.
Do you have SOC 2 yourselves?
No. Citelode is a small, new product and we won't claim certifications we don't have. Our security page sets out exactly what we do and don't do with your data.
Can I delete everything?
Yes. You can delete documents, questionnaires or the whole workspace at any time. Questionnaires and exports are deleted automatically after your retention period (90 days by default, adjustable from 7 to 730).
Got a questionnaire due this week?
See its size, topics and likely gaps in 30 seconds, free.