SaaS vendors that manage PII data needs to go through the - security questionnaires, privacy assessments, vendor risk reviews, procurement due diligence, eviden

SaaS vendors that manage PII data needs to go through the - security questionnaires, privacy assessments, vendor risk reviews, procurement due diligence, evidence requests - sent by the customer security team. At digicred, we were managing these in google drive and jira, but with 500+ enterprise customers, and their annual vendor reviews, this practice became unmanagable. CAOS is a dedicated workspace that helps us manage these assessments like projects, additionally, CAOS turns the questionnaires into a system of record. Questionnaires become structured, answerable work. Finished answers and your compliance documents become a searchable, citable corpus. The next questionnaire starts from what you already said, with every claim traceable to the document or prior answer it came from. It is self-hosted. Your policies, your answers, and your customers' questionnaires stay on your infrastructure. Recently open-sourced - https://github.com/DigiCred-OSS/caos-os https://github.com/DigiCred-OSS/caos-os