Security Questionnaires and Vendor Reviews
We fill in your organization’s own security questionnaire. We do not keep a pre-filled questionnaire such as CAIQ or SIG, and an older supplier questionnaire that used to be published here has been withdrawn because its answers no longer matched our policies.
How to run your review with us
- Read the Security Overview and the answers on the Data Security FAQ.
- Request the Data Processing Agreement through the request form. No NDA is needed.
- Request the security documents under NDA — the Security Whitepaper and our policies for information security, access control, incident response, secure development and change management — from the Trust & Security Center.
- Send us your questionnaire at sales@virtosoftware.com. We answer it for the product you are reviewing.
Certifications
VirtoSoftware does not hold SOC 2 or ISO/IEC 27001 certification and does not plan to obtain it. If your policy requires these certifications from vendors, ask us about Deploy into Your Tenant: the application then runs in your own Azure subscription and Microsoft 365 tenant, under your own security controls and certifications.