# Security Questionnaires and Vendor Reviews

Source: [https://docs.virtosoftware.com/docs/virto-security-frequently-asked-questions-faq/security-questionnaires/](https://docs.virtosoftware.com/docs/virto-security-frequently-asked-questions-faq/security-questionnaires/)
Product: Data Security FAQ
Updated: 2026-10-21


We fill in your organization's own security questionnaire. We do not keep a pre-filled
questionnaire such as CAIQ or SIG, and an older supplier questionnaire that used to be
published here has been withdrawn because its answers no longer matched our policies.

## How to run your review with us

1. **Read the [Security Overview](/docs/virtosoftware-trust-security-center/security-overview/)**
   and the answers on the [Data Security FAQ](https://docs.virtosoftware.com/docs/virto-security-frequently-asked-questions-faq/index.md).
2. **Request the Data Processing Agreement** through the
   [request form](/trust-and-security-center/request-dpa/data-processing-agreement/).
   No NDA is needed.
3. **Request the security documents under NDA** — the Security Whitepaper and our policies
   for information security, access control, incident response, secure development and change
   management — from the [Trust & Security Center](/trust-and-security-center/).
4. **Send us your questionnaire** at *sales@virtosoftware.com*. We answer it for the product
   you are reviewing.

## Certifications

VirtoSoftware does not hold SOC 2 or ISO/IEC 27001 certification and does not plan to obtain
it. If your policy requires these certifications from vendors, ask us about **Deploy into Your
Tenant**: the application then runs in your own Azure subscription and Microsoft 365 tenant,
under your own security controls and certifications.