How it works

From the customer's spreadsheet back to the customer's spreadsheet.

Three steps, with the rules spelled out: what gets drafted, what needs a reviewer, what goes to an owner, and what has to happen before anything is exported.

Step 01

Connect your evidence once.

Upload the documents your answers should come from. Attestloom reads them into passages that remember their section, and asks who owns each one.

Upload

Drop PDF, DOCX, Markdown, text, or past questionnaires

.pdf .docx .md .txt .xlsx .csv · 10 MB each

What one source becomes

Title: Security Policy Set v4.2
Passages: 38, about 800 characters each
Owner: Leah Castellanos
Review date: 2027-01-14
Original: sealed, AES-256-GCM

Step 02

Drop in the questionnaire.

XLSX, CSV, or pasted questions. Attestloom detects the header row and columns, shows you the mapping, and drafts every row against your evidence.

Detected mapping

Header row3
QuestionC · Question
AnswerD · Vendor Response
IDA · Ref
Rows214

One drafted row

Q-112Do you encrypt data at rest? Describe the algorithm and how keys are managed.

Cited

Yes. Customer data at rest is encrypted with AES-256 using keys managed in AWS Key Management Service.

97%

Open the chip: the highlight is the exact text the answer relies on.

The rules

Three statuses, two thresholds, no guessing.

Cited

≥ 0.80

Every claim is backed by a verbatim passage and confidence is at least 0.80. Ready for approval in one click.

Needs review

< 0.80

Evidence supports part of the question, or confidence is below 0.80. A reviewer must approve it before the questionnaire can be exported.

Needs owner

< 0.45 coverage

Your sources cover less than 45 percent of what the question asks, or it names a framework no source mentions. Nothing is drafted; the reason is shown and the question is routed to an owner.

Step 03

Review, approve, export.

Reviewers approve, edit, or assign. Export opens only when every Needs review answer has a named approver.