Hael
Sign inRequest a demo
PRODUCT · QUESTIONNAIRES

Answer buyer questionnaires from the same source as your documents.

Hael answers buyer security and AI questionnaires from the registry, with the citation visible on every answer. Where the registry cannot ground an answer, the question is held — never invented to clear a deal.

hael.app / questionnaires / acme-vendor-review
Acme Bank · AI vendor review · 184 questions
Answered from the registry. Held where the input is missing.
Q1. Do you maintain a register of AI systems with named owners?
Answered
Yes. 47 systems registered; each with named system owner and reviewer.
Registry · last sync 14 May 2026
Q2. What risk classification applies to SYS-0148?
Answered
High-risk under EU AI Act Annex III §5(a); GDPR Art. 22 applies.
Classify · SYS-0148
Q3. Provide your Annex IV technical file for the underwriting model.
Answered
Available via the trust page under NDA — link issued on request.
Documents · SYS-0148 v0.3
Q4. How is training data refreshed?
Held
Held — input missing in the registry. Routed to data owner for confirmation.
THE PROBLEM

Vendor questionnaires drift from the file the auditor sees.

The answers that close a deal and the answers that survive an audit are usually written by different people, in different tools, from different memories — months apart. Inconsistencies surface when a buyer asks for the Annex IV file and it contradicts the questionnaire response their procurement team already accepted.

Answering from the registry — with the same citation chain as the documents and the trust page — removes the drift by construction.

HOW IT WORKS

Grounded answers, held questions, one source.

Each question is answered against the registry, the classification and the artefacts already generated. Anything that cannot be cited is held until the named owner confirms the underlying fact.

01
Import the questionnaire
CAIQ, SIG, AI-specific buyer questionnaires and bespoke RFPs are parsed into a structured workspace — each question routed to the right system or business unit.
02
Answer from the registry
Each answer is generated from the registry record, the classification decision and the matching artefact — with the source visible on every line.
03
Hold what cannot be grounded
If no registry fact supports the answer, the question is held open and routed to the named owner with the missing input identified.
04
Send with the citation chain intact
Buyers receive answers with the same provenance the auditor sees — links back to the registry, the classification, the artefact.
THE SYSTEM-OF-RECORD SPINE

Questionnaires are a view of the registry, rendered to the buyer's format.

The registry is the source. Questionnaires read from it, so the answer you send the buyer matches the line in the Annex IV file matches the entry on the trust page — not because someone reconciled them, but because they share the source.

Registry
Each answer cites the system record that supports it — owner, data, lifecycle.
Classification
'What risk tier?' is answered from the live classification, not a copy in a deal folder.
Documents
Where the buyer asks for evidence, the answer links to the artefact, NDA-gated through the trust page.
Trust page
The same answer underwrites the public-facing assurance entry — consistent by construction.
Monitoring
When a system changes, answers tied to its state are marked stale until reconfirmed.
Agent governance
Agent-specific buyer questions are answered from the agent record — purpose, tools, scope, audit trail.
CONSISTENT BY CONSTRUCTION

The answer the buyer sees matches the file the auditor sees.

Questionnaires, documents and the trust page are not three documents that need reconciling — they are three views of the same registry, generated against the same record. Drift is structurally impossible because the source is shared.

One source of truth, three surfaces:
Questionnaire answer
Risk tier: High-risk · Annex III §5(a)
Annex IV file §7.1
Risk classification: High-risk under Annex III §5(a)
Trust page entry
Risk tier: High-risk (EU AI Act)
Consistent by construction — they share the same source
QUESTIONNAIRES

Bring a live questionnaire. See it answered, with sources.

Bring a real buyer questionnaire on the call. We'll register one of your AI systems and answer the AI-specific questions against it — and show you which questions get held.