Depends on the nature of your SAAS. If you are not dealing with very sensitive data, you could try to negotiate that with them and instead, prepare a "Self Asse

Depends on the nature of your SAAS. If you are not dealing with very sensitive data, you could try to negotiate that with them and instead, prepare a "Self Assessed Security Questionnaire" and send to their IT/CIO team. We do this for our SAAS business whenever we are asked by larger prospects but we don't deal with very sensitive data.