Skip to content

The Assureform response standard

Never invent
a security claim.

A polished response only matters if it is supported. We distinguish what the evidence establishes, what needs an answer, and what your team has approved.

Trace the answer
back to its source.

A buyer’s question sets the scope. An approved source supports the draft. Review resolves the gaps. Your team approves the final representation.

Evidence status and client approval are separate. A verified draft is not yet an approved answer.

  1. Question
  2. Source
  3. Draft
  4. Review
  5. Approval

Four handling states.
No assumed answers.

An item can be evidence-supported and still await client approval. Each state makes the next responsibility clear.

Verified

Approved client evidence supports the proposed response, within the scope and limitations of that source.

Ready for client review.

Client input

The materials do not establish an answer. The missing information is made explicit and routed to a named client owner.

A gap to resolve, not a yes.

Expert review

The question needs qualified technical, legal, privacy, or compliance judgment. It is flagged for the appropriate specialist.

Specialist judgment required.

Client approved

Your team has reviewed and accepted the final wording. The client remains responsible for representations about its organization.

Final client sign-off recorded.

If a policy requires a control, that does not by itself prove the control is implemented everywhere. Responses must preserve that distinction.

Limited pilot engagements

Start with what you can support.

We’ll discuss the questionnaire and the materials already approved for use, then agree the scope of a limited pilot.

Discuss a pilot