What a completed questionnaire looks like
AI-drafted answers with a citation and a confidence level on every line — and gaps flagged for a human instead of guessed.
Time to draft
~20 min
vs 3–5 days from scratch
Answered from KB
38 / 42
each with a source citation
Gaps flagged
4
surfaced for review, not guessed
Answers
Do you encrypt customer data at rest and in transit?
Yes. Data is encrypted at rest with AES-256 and in transit with TLS 1.2+. Encryption keys are managed in AWS KMS with annual rotation.
↳ KB · Data Security Policy §3.1
Provide an inventory of AI/ML models used in your product, including any third-party foundation models.
Northwind AI uses Anthropic Claude (via API — customer data is not used to train the model) for its drafting features, plus an in-house classifier for request routing. No customer data trains any foundation model.
↳ KB · AI Model Inventory
Under the EU AI Act, which risk category does your AI system fall into?
Based on the knowledge base, Northwind's assistant features are assessed as limited-risk (transparency obligations) rather than high-risk, as they do not map to an Annex III use case. This is an informational assessment prepared for procurement review, not a legal determination.
↳ KB · EU AI Act Assessment (informational)
What is your data retention and deletion policy for customer data?
Customer data is retained for the life of the contract and deleted within 30 days of termination. Backups purge on a rolling 90-day cycle.
↳ KB · Data Retention Policy §2
Do you hold a current SOC 2 Type II report?
No supporting entry in the knowledge base — flagged for human review rather than answered. Don't send until confirmed. (Add Northwind's SOC 2 report or its observation-window dates to the KB and this answers itself next time.)
↳ No KB match — gap surfaced, not guessed
Sample output. Korrali drafts responses from your knowledge base to help you answer buyer questionnaires faster; drafted answers are informational and not legal advice.
Answer your next questionnaire in minutes
Build your knowledge base once, then draft every SOC 2, SIG-Lite, CAIQ, and AI-governance questionnaire from it — with citations. No credit card, no sales call.