Send and Review Security Questionnaires

Learn how to upload, send, and review vendor security questionnaires in Sprinto to evaluate third-party data security practices.

Security questionnaires are essential for evaluating a vendor’s data protection practices. Sprinto enables you to upload, send, and manage security questionnaires as part of your vendor due diligence and risk assessment workflows.

You can choose to use Sprinto’s predefined templates or create your own questionnaire in a CSV format.

---

1. Upload a Security Questionnaire Template

You can upload your own template or customise Sprinto’s predefined version.

Steps:

1. Navigate to Vendor security questionnaire tab.

2. Click Add questionnaire.

3. Download Sprinto’s template (or edit the existing Sprinto CSV).

4. Populate the template with:

   • Question

   • Description (optional)

   • Response type (single/multi-select, free text)

   • Answer options

   • Mandatory flag

   • Category

5. Click Upload file and select your CSV.

6. Enter a name and click Preview & Add Questionnaire.

7. Review and click Add Questionnaire to finalise.

Sprinto validates the structure and flags errors if the file format is incorrect.

---

2. Send Security Questionnaire to a Vendor

Once the template is uploaded, you can send it to any vendor listed in Sprinto.

Steps:

1. Go to All vendors and click on a vendor name.

2. Navigate to the Vendor documents tab.

3. Click Send questionnaire.

4. Select the questionnaire you want to send.

5. Enter the vendor’s email address.

6. Click Send.

Vendors receive a secure link to complete the questionnaire without needing to log in.

---

3. Review Questionnaire Responses

You’ll be notified when a vendor submits their response.

Steps:

1. Go to Vendor documents tab of the respective vendor.

2. Click on the submitted questionnaire.

3. Review responses in-line or click Download to export a copy.

4. Use filters to quickly navigate through long questionnaires or identify unanswered mandatory questions.

You can add internal notes or mark responses for follow-up if required.