> it probably won't be cost-effective for most vendors to gather and collate this documentation, as well as answering these questions, just like it's not worth

> it probably won't be cost-effective for most vendors to gather and collate this documentation, as well as answering these questions, just like it's not worth it to ink a custom contract on a smaller deal, where legal fees alone might eat up the entire profit margin or even push it negative. Indeed. I get these security "wall of questions" for my $10/lifetime SaaS product (it's a dumb little puzzle maker). I can't fathom why anyone thinks a vendor would spend the time answering their questions for that kind of money. In their defense, it's probably a standard part of the procurement process and they don't even look at the app before sending the questionnaire.