CLOSE ✕
Start free →

RFPs + Sales enablement,
automated.

Airprose drafts RFP and questionnaire responses from your approved content, and answers your team’s sales questions in Slack — review, edit, export.

NO CARD NEEDED · YOUR CONTENT STAYS YOURS · CANCEL ANYTIME

airprose.app / draft
RFP response · 96 Q
✓ Ready to send
07
• Finding in library…◆ Source · case-study-NHS.pdf
08
• Finding in library…◆ Source · capability-statement.docx
09
• Finding in library…◆ Source · SLA-summary.pdf
10
• Finding in library…◆ Source · references-2024.pdf
RFPTENDERSECURITY QUESTIONNAIREDDQRFIPROPOSALBID
02> HOW IT WORKS / connect · draft · send

Three steps.
One finished draft.

Point Airprose at your content, let it draft, then review and send — the same afternoon, not the same week.

01

Point it at your content.

Connect your past proposals, answer library, product docs and policies. Airprose reads what you’ve already approved — nothing else.

proposals_2025.docxanswer_library.xlsxsecurity_policy.pdfproduct_docs/
→ library: 4 sources connected
02

Airprose drafts the response.

Upload the RFP or questionnaire. It writes a first draft — sourced from your own words, with the receipts attached.

Q12. Describe your data-retention policy.

↗ security_policy.pdf · p.4
03

You review and send.

Tweak the tone, check the facts, hit export. Word or Excel. Blank page to filed bid — same afternoon.

FILED ✓
03> THE LAB / how sourced drafting actually works

Sourced, not invented.

Airprose is a drafting engine wrapped around your content. It never invents — it assembles, tailors and cites from answers you’ve already approved.

FIG.01 — RECEIPTSairprose / lab

Every answer comes with receipts.

Each drafted answer links back to the source in your library, so reviewers verify in one click. No hallucinated claims.

↗ master_answers.xlsx↗ ISO_27001_cert.pdf↗ proposal_acme.docx
cite({ source: 'library' })
FIG.02 — AUTOFILLairprose / lab

200 questions, filled at once.

Structured security questionnaires, auto-filled from your approved answers.

answer(200, from: library)
FIG.03 — YOUR VOICEairprose / lab

Sounds like you. It is you.

Trained on your wording, not the internet’s. It reads like your best proposal because it’s built from it.

tone:
We answer from your approved library.
// your_last_winning_bid.docx
tone: 'yours'
FIG.04 — REVIEWairprose / lab

Nothing ships without you.

Every answer lands as a draft. Approve it, tweak it, or send it back — the response only goes out once a human signs off.

Q12 · Data retention
Customer data is retained for 30 days post-termination, encrypted at rest…
• Needs reviewAPPROVED ✓signed off · you
review.signOff()
FIG.05 — SELF-LEARNING LIBRARYairprose / lab

Answer it well once. Reuse it everywhere.

Every answer your team signs off is saved and de-duplicated, then reused — preferred over document search — the next time a similar question comes up.

✓ encryption · reused 14×✓ data residency · reused 9×✓ SOC 2 · 3 → 1 canonical
library.learn()
FIG.06 — EXPORTairprose / lab

Where you work.

Export to Word and Excel, or copy your answers straight into any portal.

.docx.xlsx
📄
SENT ✈
export('.docx')
WHY NATIVE

Real files. Real editors.

Airprose opens the real Word document and the real Excel sheet in your browser. Edit, format, comment, sign off — and export to your own template without the formatting scramble.

Executive_Summary.docx — AirproseEditing ▾
FileHomeInsertLayoutReferencesReviewView
Calibri11
Heading 1Heading 2BodyTitle
Executive Summary
industry-leading platform+ sourced, traceable platform
2.3.2 · Proposal Content
Page 1 of 174,461 wordsEnglish (UK)100%+
Document

Real Word, in the browser.

Indigo CLM RFP - Appendix A_filled.xlsx — AirproseEditing ▾
FileHomeInsertPage LayoutFormulasDataReviewView
Calibri10
General
B22fxDoes the solution enable role-based access control by contract type and template?
A
B — ITEM
C — VENDOR RESPONSE
2
Company
6
7
8
Yes ▾
9
10
Partial ▾
11
Overview
12
Sheet1 (2)TPRMPricing+Sum: 0 · Avg: 0 · Count: 0
Spreadsheet

Real Excel, sheets and all.

✓ Tracked changes & comments✓ Headings, styles & outlines✓ Multi-sheet workbooks✓ Dropdowns & merged cells✓ Formulas preserved on export✓ Export to your branded template
WHAT IT DRAFTS

One tool.
Every response.

Pick a format to see exactly how Airprose handles it — extraction, grounded drafting, and a submit-ready export.

80%

less admin time

faster responses

98%

answers reused

* Illustrative figures from early teams. Your mileage will vary — happily.

AIRPROSE FOR SLACK · SALES ENABLEMENT

Your sales team asks.
Airprose answers in Slack.

Your sales team drops a prospect’s question into a Slack channel, and the Autonomous Agent answers in seconds — grounded only in your own content, with the sources shown. When the answer isn’t in your library, it says so instead of guessing.

On the Scale plan · read-only Q&A · it never messages your customers
slack.com / #sales
# sales ◆ Airprose · Autonomous Agent
AL
Amy Lewis 14:02
prospect wants to know, do we support SSO?
Airprose App 14:02
Yes. SAML and SCIM, available on the Scale plan.
📄 SSO_setup.md📄 Security overview 2026
RS
Raj Singh 14:05
and where’s their data hosted — EU only?
Airprose App 14:05
UK / EU hosting only, with data-residency guarantees written into the contract.
📄 data-residency.pdf

Your next RFP,
already drafted.

Point Airprose at your content and watch it write the first version. Start free, no card needed.

THE PRODUCT

Blank page in.
Filed bid out.

Airprose is a drafting engine wrapped around your content. It never invents — it assembles, tailors and cites from answers you’ve already approved.

CONNECTDRAFTREVIEWSENDREPEAT
HOW IT WORKS

Three steps.
One finished draft.

01

Point it at your content.

Connect your past proposals, answer library, product docs and policies — or sync a Google Drive folder. Airprose reads what you've already approved, nothing else.

airprose.app / library
Answer library
◑ Drive synced
Library 86% complete
02

Airprose drafts the response.

Upload the RFP, questionnaire or tender. Airprose pulls out every question and form field, then writes a complete answer for each — tailored to the question, built from your own words, with the source attached. When something genuinely isn't in your library, it flags the gap instead of inventing an answer.

airprose.app / draft
12
◆ Source · case-study-NHS.pdf
13
◆ Source · ISO-policy.pdf
14
! Evidence needed
03

You review, edit and send.

Tweak the tone, check the source, hand sections to teammates for sign-off. Then export to your own branded template — Word or Excel. Blank page to filed bid, same afternoon.

airprose.app / export
Ready to export
✓ Signed off
WordExcel
WHY IT WINS

Two things most
tools get wrong.

Most tools mangle your formatting on export, and draft from a black box you can't check. Here's how Airprose fixes both.

airprose.app / editor
DocumentSpreadsheet
BITrack ✓
Word · native
old phrasing here+ revised, tracked
fx=SUM(B2:B13)Excel · native
A
B
C
D
E
1
2
3
4
Wrong #1 · the formatting scramble

A real Word editor
and a real Excel grid.

Most tools make you download the draft, fix the broken formatting by hand, and re-upload — right before the deadline. Airprose lets you edit the actual document and the actual spreadsheet in your browser — full formatting, sheets, merged cells, tracked changes — then export clean to your own template.

airprose.app / draft
31
◆ Source · pen-test-2025.pdf
32
! Evidence needed · add a DR policy
33
◆ Source · BCP-summary.docx
Wrong #2 · the black-box draft

It writes from your material —
and tells you when it can't.

Generic AI invents confident-sounding answers from nowhere. Airprose only answers from the documents in your library — and when something genuinely isn't there, it flags the gap and hands you a precise to-do list instead of inventing. You're never quietly handed a fabricated answer to put your company's name on.

airprose.app / draft
RFP · question 14 of 96
✓ Sourced
Q
A
◆ case-study-NHS.pdf · p.4◆ ISO-27001-policy.pdf
SOURCED, NOT INVENTED

Every answer
comes with receipts.

Each drafted answer links back to the source in your library, so reviewers can verify in one click. No hallucinated claims, no off-message promises.

SELF-LEARNING LIBRARY

Answer it well once.
Reuse it everywhere.

It’s a library that teaches itself. Every answer your team signs off is captured and de-duplicated to one always-latest best version, then preferred the next time a similar question comes up. Tech teams answer the same security questionnaires and DDQs on repeat — so your library, and your consistency, compound with every response you finish.

01

Approve

Your team reviews a draft and signs it off, exactly as they do today.

02

It’s captured

The approved answer is filed to your library automatically and de-duplicated — a single, always-latest best version. No “save” step, no spreadsheet to keep current.

03

It’s reused

Next time a similar question appears, Airprose drafts from that approved answer first — while still reading your wider library, so current facts, names and figures stay accurate.

airprose.app / library
Self-Learning Library
✓ Auto-saved on sign-off
Do you encrypt data at rest and in transit?
Yes — AES-256 at rest and TLS 1.2+ in transit, across all services.
✓ Auto-savedreused 14×
Where is customer data hosted?
UK / EU regions only, with data-residency guarantees per contract.
✓ Auto-savedreused 9×
What is your SOC 2 / ISO 27001 status?
One canonical answer, refreshed by the most recent sign-off.
Merged · 3 duplicateslatest kept

A general AI tool forgets your last questionnaire the moment it’s done. Airprose remembers every answer your team approved — and reuses your best version on the next one.

✓ Captured on sign-off✓ One canonical, always-latest answer✓ Preferred over document search✓ Still grounded in your live documents✓ Works across “generate all”✓ Per-tenant isolation
PROPOSAL STYLES

A response that looks
as good as it reads.

Airprose writes the words. Then dress the document — pick from 50+ designed proposal templates, real Word files with embedded fonts, not flat exports. Drop in your logo, or bring your own branded template. Every response ships looking like your best-designed proposal.

  • ✓ 50+ styles — Classic, Minimal, Editorial, Bold & Tech
  • ✓ Real .docx with embedded fonts
  • ✓ Your logo on the cover, or your own template
Click a style — the cover restyles live.
MarloweUnderstated and editorial. Thin rules, quiet confidence.
WHY YOU CAN TRUST THE DRAFT

Answers you
can stand behind.

From your material, not invented

Airprose writes strictly from the documents you give it. Your content is never used to train shared models, and you can delete it on request.

Receipts on every answer

A visible source trail on each line means you verify a claim in one click — and can show an evaluator exactly where it came from.

!

Honest about gaps

What it can't answer becomes a clear to-do list, not a hidden risk. Per-tenant isolation keeps your library yours.

SOC 2 / ISO 27001 are on our roadmap, not held today — we say so plainly.

See it on your
own content.

PRICING

Win more.
Whole team included.
Not per seat.

Unlimited users and collaborators on every plan. Start free — no card needed. Save 10% when you pay quarterly.

Base

For teams that respond regularly and want it handled.

£149
per month · billed monthly
Up to 10 responses / mo
each covers a document of up to 100 questions
Start free →
✦ No card needed
  • Unlimited users & collaborators
  • AI drafting with cited sources
  • Compliance check & answer bank
  • Submission-ready export
  • Email support
Overage £20 / extra response, capped at 5 extra per month
YES, THIS ONE
Growth

Everything a busy bid team needs, one flat price.

£399
per month · billed monthly
Up to 30 responses / mo
each covers a document of up to 150 questions
Start free →
✦ No card needed
  • Everything in Base, plus —
  • Win / loss insights
  • Google Drive, SharePoint, Notion, Confluence & Dropbox sync
  • Shared team answer library
  • Review & sign-off workflow
  • Priority email support
Overage £15 / extra response
Scale

For larger teams that need control and scale.

£849
per month · billed monthly
Up to 75 responses / mo
each covers a document of up to 150 questions
Start free →
✦ No card needed
Overage £12 / extra response
Enterprise / Custom Version

Unlimited responses and users, plus white-labelling, a custom UI and bespoke features built around your team — with data residency, a dedicated success manager and an SLA.

Talk to sales →
START FREENO CARDUNLIMITED USERSCANCEL ANYTIME
COMPARE PLANS

Every plan,
side by side.

Base£149Growth£399Scale£849
Responses / mo103075
Questions per response100150150
Unlimited users & collaborators
AI drafting with per-answer citations
Confidence scoring & explained uncertainty
Pre-flight compliance check & export
Google Drive / SharePoint / Notion / Confluence / Dropbox
Win / loss insights
Priority support
SSO / SAML
Airprose Agent for Slack
Dedicated onboarding
Overage / extra response£20 (max 5)£15£12

A response = one document you draft that month (an RFP, questionnaire, DDQ or tender). Base covers up to 100 questions per document; Growth and Scale up to 150. Go over and overage applies automatically, or move up a plan any time.

ENTERPRISE

Not a plan.
Your build.

For teams that want Airprose to be theirs. We white-label it, rebuild the interface around your exact workflow, ship the features you ask for, and run it on dedicated infrastructure, with a team that treats your roadmap as ours.

The big platforms are capable, and we respect that. If there's a feature from an incumbent you can't work without, tell us, and we'll do our best to close the gap and put it on the roadmap.

  • White-label: your brand, your domainYour logo, your colours, your URL. Airprose stays invisible.
  • A custom UI, built to your processThe interface reshaped around how your team actually bids.
  • Bespoke features, shipped on your roadmapTell us what you need and we build it, prioritised with you.
  • Dedicated environment & infrastructureYour own isolated instance, sized for your volume.
  • Named team, onboarding & SLAPeople who know your account, with response times in writing.
  • Security review & custom contractsSecurity reviews, DPAs and terms shaped to your legal team.
OBJECTIONS, HANDLED

The honest FAQ.

Getting started
Isn't this just ChatGPT for tenders?

No, and that difference is the whole point. General-purpose AI writes from nothing, so it produces the fluffy, generic answers evaluators spot instantly (and score in the "major reservations" band). Airprose won't let you draft from thin air: you upload your own past tenders, policies and case studies first, and every answer is written from your library and cited back to the exact document and paragraph it came from. You're not getting "AI words"; you're getting your own best evidence, assembled faster. If the library doesn't cover a question, we tell you that instead of inventing something.

How is Airprose different from the big RFP/proposal platforms?

The big platforms are capable, but that power comes with a tax that their own users complain about: weeks of onboarding, a content library someone has to keep curating, per-seat pricing that punishes you for adding reviewers, and exports you often reformat by hand before submitting. Airprose keeps the core job (turning your best evidence into a submission-ready response) and drops the overhead. You're productive the same day, there's no library to seed or maintain (answers come straight from your real documents, each one cited), every plan includes unlimited users, and what you export matches the buyer's own form. Whether you're moving off a heavyweight tool or choosing your first, you get the outcome without the operational baggage.

None of this is a knock on the incumbents; they're capable tools. If there's a feature you rely on that Airprose doesn't have yet, tell us, and we'll do our best to build it or add it to the roadmap.

How long before I actually get value from it?

Same day. Upload a few past tenders, point Airprose at a live one, and you have a first draft the same afternoon. There's no implementation project, no admin setup phase, and no "less than a third of our seats ever used it" problem that plagues heavyweight rollouts, because there's nothing to roll out.

Can I try it before paying?

Yes. Your first tender is free: you can take a real (or sample) tender all the way from upload to a submission-ready draft before you decide. No demo call, no sales process.

How it works
Will the exported document actually look right?

Yes, what you export matches what you uploaded. Reformatting the final document is one of the most common, longest-running complaints about legacy RFP tools: people lose hours fixing broken layouts right before a deadline. Airprose fills your answers back into the buyer's own forms and templates, so the output is submission-ready in the format the portal expects, not something you have to rebuild by hand at 11pm.

Do I have to build and maintain a big answer library first?

No. Traditional tools rely on a curated Q&A library that someone has to keep current, and those libraries quietly rot within months until teams stop trusting them and the tool becomes shelfware. Airprose works from your real documents as they are. There's no separate library to seed, groom, or police; answers are drawn live from what you've actually written, and every one shows its source so you can see it's current.

How do you stop the answers being generic and obviously AI-written?

Three ways. First, answers are grounded in your library, not the open web, so they're specific to your business by construction. Second, every claim carries an inline citation to the source document; if it can't be backed by your evidence, it's flagged, not fabricated. Third, you stay in control: draft, edit, and sign off answer by answer. The output reads like your best past bids because it's built from them.

What if the AI gets something wrong?

You're always the last word. Nothing is submitted automatically. Airprose produces a draft, with every answer traceable to its source so you can verify it in seconds rather than re-reading the whole library. Answers can be assigned, commented on, edited, and signed off by the right person before anything leaves the building. The AI does the first pass; the human keeps the pen.

Team & collaboration
Can my whole team work on a bid together?

Yes, you can assign questions to different people, leave comments, and require sign-off before an answer is considered done. It's built for the way a team actually splits a bid up, without needing a dedicated bid manager to coordinate it.

Will I get charged for everyone who just reviews or approves?

No. Every Airprose plan includes unlimited users at one flat price. Legacy tools charge a named-user seat for anyone who logs in (including people who only review, comment or approve), which quietly inflates the bill and pushes teams to lock reviewers out to save money. We think the person who signs off your bid should be in the tool, not left guessing. Invite your whole team, reviewers and all, at no extra cost.

Trust, security & compliance
Where is my data stored, and is it secure?

Your data is stored in the UK, and every organisation's data is isolated at the database level, so one customer can never see another's. Your documents are used only to draft your responses.

Are you certified to SOC 2 / ISO 27001?

Not today, and we'd rather say so plainly than claim a badge we don't hold. Formal certification is on the roadmap. What's true right now: your data stored in the UK, strict per-tenant data isolation, and no use of your content to train shared AI models. See our Trust Centre for the full picture.

The new rules say I have to declare AI use in bids. Does that make it risky?

The opposite. Airprose is designed around it. Because every answer is grounded in your own evidence and tracked from draft to sign-off, you can disclose AI use confidently under the Cabinet Office guidance instead of hoping nobody asks. We're building the disclosure summary into the export flow so declaring AI use is a one-click, defensible step, not an awkward afterthought.

Fit & pricing
Who is Airprose for?

Any organisation that bids regularly and wants a faster, more consistent path from pack to submission. That might be a solo bid-writer (often doubling as ops, BD or the MD), a growing proposals team, or an established bid function. It works across sectors: care providers, training providers, trades and construction, cleaning and catering, IT and SaaS. Wherever bidding matters to how you win work, Airprose makes drafting faster and more consistent, without a heavyweight rollout.

What does it cost?

Three flat monthly plans, each with unlimited users and cancel-anytime, plus a free first tender to try it:

  • Base: £149/month (or £134/month billed quarterly), draft up to 10 tender documents a month.
  • Growth: £399/month (or £359/month quarterly), up to 30 documents a month. The plan most teams pick.
  • Scale: £849/month (or £764/month quarterly), up to 75 documents a month, with priority support and advanced security.

You're billed on the tenders you actually work on, not on how many people log in. No long procurement cycle, no auto-renewal buried in the small print. And it's a different order of magnitude from both ends of the market: far below the five-figure annual contracts of enterprise bid platforms, and less than what outsourcing a single tender to a bid consultant typically costs.

What's a "document", and how does the pricing work?

Simple: you're metered on the tender documents Airprose drafts for you, not on seats or bids. Uploading and analysing a tender (reading the pack, pulling out the questions, checking fit) is always free and unlimited. You only use one of your monthly allowance when you have Airprose draft answers into a form or questionnaire, and re-drafting the same document doesn't count again. That means you can explore every opportunity that lands without watching a meter, and only "spend" when you're genuinely working a bid.

What file types and tenders does it handle?

Word, Excel and PDF tender packs and questionnaires, including the multi-document packs and dropdown/portal-style forms UK and public-sector buyers send. You upload what the buyer gave you; Airprose reads it and works from there.

WHY AIRPROSE

Answer once.
Reuse forever.

Most bid work isn’t writing — it’s re-finding answers you’ve already written, then stitching four tools together to reuse them. We built Airprose to end that: one workspace that drafts from your own content, shows its sources, and gets faster every time.

airprose.app / library
Answer library
◑ 486 saved
♦ ISO-27001reused 12×
♦ case-studyreused 8×
♦ SOC-2reused 21×
♦ DR-policyreused 6×
Library 92% complete
SOURCED, NOT INVENTEDYOUR WORDS, FASTERINDEPENDENTHONEST ABOUT GAPS
WHAT WE BELIEVE

Three things
we build around.

THE ANSWER EXISTS

The best answer to most RFP questions is one you’ve already written. Airprose finds it and tailors it to the new question — so you’re refining, not starting from a blank page.

GROUNDED, OR NOTHING

Generic AI invents confident-sounding answers from nowhere. We only draft from your approved content — and when it genuinely isn’t there, we flag the gap instead of guessing.

IT SHOULD COMPOUND

Every response you finish makes the next one faster. Your library grows with you, so the tool is most valuable exactly when the deadlines stack up.

INDEPENDENT & FOCUSED

Small on purpose.
Sharp on one thing.

Airprose is independent and built for a single job: turning your own content into submit-ready responses. No bloated suite, no modules you’ll never open — just the fastest path from a blank pack to a filed bid. Email us and a human replies.

  • One workspace, not four tools stitched together
  • Built for bid, pre-sales and security teams — the people who live the deadline
  • Honest about what it can’t do yet — including our own roadmap
  • Your content is yours; download or delete it any time
HOW WE HANDLE YOUR CONTENT

Yours, isolated,
never training data.

The whole thing only works if your content stays yours. Here’s exactly how we treat it — including what we don’t hold yet.

PER-TENANT ISOLATION

Row-level security on every table. No cross-tenant joins in any service path.

NEVER TRAINING DATA

Your content is not used to train shared models. Ever. We’ll delete it on request.

DATA IN THE UK

Your data is stored in the UK; the app is served globally.

COMPLIANCE ROADMAP

SOC 2 and ISO 27001 are on the roadmap, not held today — we say so plainly.

ENTERPRISE CONTROLS

SSO/SAML on Scale and Enterprise; audit logs are on our roadmap.

YOUR FILES, YOURS

Download the original any time. Nothing is trapped inside Airprose.

A data processing agreement (DPA) is available to all customers.

Start from your
best work.

Point Airprose at your content and watch the first draft build itself. Start free — no card needed.

TALK TO SALES

Talk to our team.

Questions about pricing, the Scale plan, enterprise, security, or rolling Airprose out across your team? Tell us what you need and a real person will come back to you, usually within one working day.

  • ✓ Pricing, enterprise & security questions
  • ✓ A real answer from a real person
  • ✓ No pitch deck, no pressure

Prefer to try it yourself? Start free →

AIRPROSE · TALK TO SALES

We'll reply within one working day.

CONTACT

Talk to a human.

A question about Airprose — your content, security, pricing or anything else? Send us a note and a real person replies, usually within one working day.

  • ✓ A human reply, not a ticket bot
  • ✓ Usually within one working day
  • ✓ Your details stay yours

Prefer email? Reach us at hello@airprose.com

AIRPROSE · SAY HELLO

We’ll reply within one working day.

← All response types

Respond to RFPs from
your own content.

Airprose reads the RFP, extracts every question and requirement, and drafts each answer from your library of past responses and company material — sourced, structured, and ready to edit.

airprose.app / rfp
RFP response · 96 Q
✓ 92 drafted
07
◆ Source · case-study-NHS.pdf
08
◆ Source · capability-statement.docx
09
! Evidence needed — flagged for you
EXTRACTDRAFTSOURCEEDITEXPORT
HOW IT WORKS

From the pack
to a finished response.

EXTRACTION

Every question, requirement and required attachment, pulled out automatically. Your response checklist builds itself.

GROUNDED DRAFTING

Complete first-draft answers written from your own material, with the source shown on each — so review is fast and defensible.

EDIT & EXPORT

Edit the response in-browser with tracked changes, then export to your branded template, ready to submit.

THE SPECIFICS

What you get,
line by line.

  • Every question and requirement extracted automatically
  • Win-themes drawn from your strongest past proposals
  • A visible source on every claim for fast review
  • Native in-browser Word editing with tracked changes
  • Clean export to your own branded template

See it on your
own RFP.

← All response types

Answer security questionnaires, fully sourced.

Security questionnaires reward consistency and accuracy. Airprose drafts each answer from your own approved content, shows the source, and flags anything it can’t answer rather than guessing — so you’re never signing off a fabricated control claim.

airprose.app / security
Security questionnaire · 142 Q
✓ 138 drafted
07
◆ Source · ISO-27001-policy.pdf
08
◆ Source · SOC2-summary.docx
09
! Evidence needed — flagged for you
EXTRACTDRAFTSOURCEEDITEXPORT
HOW IT WORKS

From the pack
to a finished response.

CONSISTENT & SOURCED

Every answer drawn from your approved library, with a visible source trail for review and audit.

HONEST ABOUT GAPS

What isn’t in your material is flagged for a human, not invented — the right behaviour for answers your security team stands behind.

SPREADSHEET-NATIVE

Many questionnaires arrive as Excel. Airprose handles the real spreadsheet — sheets, merged cells, formatting — and exports it clean.

THE SPECIFICS

What you get,
line by line.

  • Structured security questionnaire formats
  • Dropdown and enum-constrained answers filled correctly
  • A native Excel grid for spreadsheet questionnaires
  • A source trail on every answer for audit
  • Gaps flagged for a human instead of guessed
SELF-LEARNING LIBRARY

Answer it well once.
Reuse it everywhere.

Security questionnaires recycle the same asks — encryption, access controls, sub-processors, SOC 2 and ISO posture. Every answer your team signs off is saved and reused on the next SIG, CAIQ or bespoke questionnaire, so your responses stay fast and consistent across every buyer.

Read the guide: security questionnaire automation →

  • ✓ Captured automatically when your team signs off
  • ✓ One canonical, always-latest answer — no duplicates
  • ✓ Preferred over document search, still grounded in your live documents
airprose.app / library
Self-Learning Library
✓ Auto-saved on sign-off
Do you encrypt data at rest and in transit?
Yes — AES-256 at rest and TLS 1.2+ in transit, across all services.
✓ Auto-savedreused 14×
Where is customer data hosted?
UK / EU regions only, with data-residency guarantees per contract.
✓ Auto-savedreused 9×
What is your SOC 2 / ISO 27001 status?
One canonical answer, refreshed by the most recent sign-off.
Merged · 3 duplicateslatest kept

See it on your
own questionnaire.

← All response types

Complete DDQs from current, sourced material.

DDQs go stale fast. Airprose drafts from your maintained library and shows the source on every answer, so reviewers can trust each response is current and traceable.

airprose.app / ddq
DDQ · 64 Q
✓ 61 drafted
07
◆ Source · company-accounts-FY24.pdf
08
◆ Source · insurance-cert.pdf
09
! Evidence needed — flagged for you
EXTRACTDRAFTSOURCEEDITEXPORT
HOW IT WORKS

From the pack
to a finished response.

CURRENT BY DEFAULT

Answers drawn from your live library, not last year’s submission. The library flags what’s missing so it stays current.

SOURCED & REVIEWABLE

A visible trail on every answer makes sign-off fast and defensible.

ONE WORKSPACE

Draft, assign, review and export in place — no copy-paste across tools.

THE SPECIFICS

What you get,
line by line.

  • Answers from your live library, not a stale copy
  • A source on every answer for reviewer trust
  • Assign answers and require sign-off before final
  • Comment threads on any answer
  • Export to your own template, ready to send
SELF-LEARNING LIBRARY

Answer it well once.
Reuse it everywhere.

Due-diligence questionnaires ask the same things every round. Every answer your team approves is saved and reused on the next DDQ, so your responses stay consistent from one reviewer to the next — without re-deriving them from scratch each time.

  • ✓ Captured automatically when your team signs off
  • ✓ One canonical, always-latest answer — no duplicates
  • ✓ Preferred over document search, still grounded in your live documents
airprose.app / library
Self-Learning Library
✓ Auto-saved on sign-off
Do you encrypt data at rest and in transit?
Yes — AES-256 at rest and TLS 1.2+ in transit, across all services.
✓ Auto-savedreused 14×
Where is customer data hosted?
UK / EU regions only, with data-residency guarantees per contract.
✓ Auto-savedreused 9×
What is your SOC 2 / ISO 27001 status?
One canonical answer, refreshed by the most recent sign-off.
Merged · 3 duplicateslatest kept

See it on your
own DDQ.

← All response types

Respond to tenders without losing evenings.

A tender pack is dozens of questions, half of which you’ve answered in past bids. Airprose reads the pack, pulls out every question, form field and required attachment, and drafts each answer from your own previous submissions — sourced and ready to edit.

airprose.app / tender
Tender · 120 Q
✓ 115 drafted
07
◆ Source · framework-2024.pdf
08
◆ Source · method-statement.docx
09
! Evidence needed — flagged for you
EXTRACTDRAFTSOURCEEDITEXPORT
HOW IT WORKS

From the pack
to a finished response.

THE WHOLE PACK

Every question and required attachment, mapped automatically. No more building the response checklist by hand.

YOUR REAL EVIDENCE

Answers built from your delivered work, accreditations and past bids — with the source shown — so you’re refining, not writing from scratch.

SUBMIT-READY EXPORT

Edit the real document in-browser and export to your template, formatted and ready to submit.

THE SPECIFICS

What you get,
line by line.

  • Every question, form field and attachment extracted
  • Method statements drawn from your past bids
  • A source on every claim for evaluator confidence
  • Team assignment and sign-off before submission
  • Submission-ready, branded export

See it on your
own tender.

← All response types

Vendor reviews, answered from your controls.

Supplier onboarding forms and policy attestations ask the same things every time. Airprose drafts each from your approved policies and controls, with the source attached — consistent across every reviewer.

airprose.app / vendor
Vendor review · 48 Q
✓ 46 drafted
07
◆ Source · security-policy.pdf
08
◆ Source · ISO-27001-cert.pdf
09
! Evidence needed — flagged for you
EXTRACTDRAFTSOURCEEDITEXPORT
HOW IT WORKS

From the pack
to a finished response.

FROM YOUR POLICIES

Answers grounded in your approved policies and controls, never invented.

REPEATABLE & CONSISTENT

The same factual details, answered the same way every time, across every supplier review.

EXPORT ANYWHERE

Word or Excel — formatted and ready to submit.

THE SPECIFICS

What you get,
line by line.

  • Supplier onboarding and vendor-review forms
  • Policy and control attestations from your library
  • Consistent answers across every reviewer
  • A source on every claim
  • Word and Excel output

See it on your
own review.

INTEGRATIONS

Plug in
your sources.

Airprose only drafts from your own material — so it works best when it can see all of it. Connect the places your content already lives, and we keep everything in sync: de-duplicated, versioned, and sourced on every answer.

airprose.app / sources
Connected sources
◑ All in sync
Google Drive
✓ 1,284
SharePoint
✓ 906
Dropbox
✓ 642
Confluence
◑ syncing
Notion
✓ 318
Library 92% indexed
GOOGLE DRIVESHAREPOINTDROPBOXCONFLUENCENOTIONALWAYS IN SYNC
WHAT CONNECTS

Where your
content lives.

Five sources today, all on the same ingest path — so every one is de-duplicated, versioned and sourced, whatever shape your content arrives in. More on the way.

Google Drive
DOCS · SHEETS · PDFS

Docs, Sheets and PDFs from the folders you choose — pulled in automatically and kept current. The original ingest path, and the template for every source since.

Dropbox
FILES · FOLDERS

The same files, the same way. Point Airprose at a folder and everything flows in — identical handling to Drive, de-duplicated and versioned.

Confluence
SPACES · PAGES

The prose that wins bids — policies, methodologies and past answers. Airprose converts every page cleanly from rich HTML to plain text, so nothing is lost.

Notion
WIKI · DATABASES

Your team wiki and working docs. Every Notion block is parsed into clean, draftable text — databases, pages and all — ready from day one.

SharePoint
SITES · DOCUMENT LIBRARIES

The enterprise home for policies, past bids and team knowledge. Airprose connects to your sites and document libraries — converting Office files and pages to clean, sourced text, de-duplicated and kept in sync as they change.

HOW IT WORKS

Connect once.
Always current.

01 · CONNECT

Authorise a source and pick the folders or spaces to include. Read-only access, and only the content you choose — nothing else is touched.

02 · SYNC

Airprose ingests it — converting pages and documents to clean text, removing duplicates, keeping versions, and watching for changes so the library never goes stale.

03 · DRAFT

Every response is written from that live library — grounded in your material, with a source on every line. Connect once; reuse on every bid after.

WHY CONNECT

Less wrangling.
Better answers.

Stop pasting between tools. When your sources are connected, every answer is current, grounded and ready to reuse — with no busywork in between.

  • Always current — drawn from your live library, not last year’s file
  • Grounded & sourced — every line traces to the exact document and page
  • De-duplicated & versioned — connect messy folders; we keep the latest
  • Per-org isolation — your content is never used to train shared models
  • Compounds over time — connect once; every future response reuses it

Connect your
first source.

Two clicks to connect. Then watch your first draft build itself from content you already have.

AIRPROSE FOR SLACK · SALES ENABLEMENT

Your sales team asks.
Airprose answers in Slack.

Your sales, presales and bid teams drop a prospect’s question into Slack, and Airprose answers the moment it’s asked. Set it fully autonomous and it answers as questions are posted — no @mention needed — grounded only in your own content, with the sources shown. And when the answer isn’t in your library, it says so, instead of guessing.

Read-only Q&A. It answers. It never sends anything to your customers.
slack.com / acme / #sales-questions
# sales-questions ◆ Airprose · Autonomous Agent
DK
Dana Kerr 10:24
Prospect’s asking, do we hold ISO 27001?
Airprose App 10:24
Yes. ISO 27001 certified, valid to Aug 2026. Scope covers the platform and support functions.
📄 ISO-27001-certificate.pdf📄 Security overview 2026
RS
Raj Singh 10:26
@Airprose what’s our uptime SLA for the EU region?
Airprose App 10:26
I can’t find this in your library, so I won’t guess. I’ve flagged it for the team to add.
+ Request addition to library
Illustrative. Every answer is drawn from that customer’s own library.
SALES ENABLEMENTGROUNDED IN YOUR LIBRARYSOURCES SHOWNAUTONOMOUS AGENTHONEST WHEN IT DOESN’T KNOWNO LOGIN NEEDED
THE PROBLEM

The question lands.
Then what?

Is your sales team constantly looking for product support or asking questions in product channels, and never getting timely responses? Feel like you’re throwing questions into the ether and hoping for the best?

SLOW OR NEVER

Questions scroll away unanswered, or the same one gets re-answered from scratch every week.

RISKY ANSWERS

Replies come from memory or a stale wiki. A wrong answer to a prospect on security or compliance is expensive.

ONE BOTTLENECK

The one person who actually knows becomes the choke point for the whole team.

Airprose answers those questions the moment they’re asked, in the same channel, from your own approved material. And it captures the ones it can’t answer as content to add.

TWO MODES, PER CHANNEL

Asked, or on its own.
You choose.

Same trusted engine underneath both. The mode just decides when it speaks. Set it per channel.

On-Demand

Ask it directly.

General channels & DMs

It answers when someone @mentions it or DMs it, and stays quiet otherwise. It’s there the moment you call on it, and invisible until you do.

Proactive

Autonomous Agent.

Busy sales & product channels

In an opted-in channel, it answers questions as they’re posted, without being @mentioned, whenever it’s confident your library covers them. Silence by default.

HEADLINE FEATURE / silence by default — it speaks only when sure

The Autonomous Agent.

Switch a channel into Proactive mode and it answers questions as they’re posted, without being @mentioned. The question someone drops in hoping a human picks it up gets answered in seconds, before anyone has to chase it. A proactive bot that gets it wrong is worse than useless, so this one is built to stay quiet unless it’s sure.

LIVE · #salesairprose / autonomous
# sales Autonomous · watching
JWDo we support SSO?
Yes, SAML and SCIM on the Scale plan. 📄 SSO_setup.md
· stayed silent
MPgrabbing coffee, anyone want one?
 
· stayed silent · not a question
RSAre we SOC 2 compliant?
Yes, SOC 2 Type II, renewed March 2026. 📄 Security_overview.pdf
· stayed silent
DKwhat’s our uptime SLA in the EU region?
 
· stayed silent · not in your library, flagged for the team
ALDo we integrate with Salesforce?
Yes, native two-way sync. 📄 Integrations.md
· stayed silent
Answered0Stayed silent0it speaks only when your library backs it
confidence > threshold ? answer : stay_silent
  • 01
    Opt-in per channelYou turn it on for a specific channel. Never blanket, never listening everywhere.
  • 02
    Silence by defaultIt stays quiet far more than it speaks. It only jumps in when your library genuinely covers the question.
  • 03
    High-confidence onlyA quick first check decides whether it’s an answerable question your library backs, before it ever drafts. No interjecting on chit-chat.
  • 04
    Soft touchIt replies in a thread rather than dominating the channel. Same honesty rules: grounded, sourced, no guessing.
WHAT IT DOES / grounded · sourced · honest

Every reply, from your content.

It sounds like you because it is you. Everything below is live today.

FIG.01 — HONESTYairprose / slack

Honest when it doesn’t know.

If the library doesn’t cover a question, it says so plainly, rather than inventing a compliance claim, a number or a client name.

Airprose App
+ Request addition to library
answer ?? "I don’t know"
FIG.02 — RECEIPTSairprose / slack

Shows its sources.

Each answer lists the documents it drew from, so you can trust it and paste it straight to the customer.

↗ SSO_setup.md↗ Security_overview.pdf↗ Integrations.md
cite(sources)
FIG.03 — MEMORYairprose / slack

Threads & DMs.

Reply in the thread to keep asking, no need to re-mention it. It remembers the conversation. DM it for a private answer.

TT
Tom · in thread
and for the US region?
Airprose
Same SLA, 99.9%. Data stays in-region.
thread.remember()
FIG.04 — SETUPairprose / slack

Self-serve. One click.

An owner connects your Slack workspace from Airprose Settings. No IT project, no manual configuration. Add the agent to any channel and it introduces itself.

✈ Connect Slack✓ Connected to acme.slack.com
oauth.connect()
FIG.05 — LEAST ACCESSairprose / slack

The person asking needs no Airprose login.

They just use Slack. Answers come only from your content, per-organisation isolation with row-level security, per-workspace tokens encrypted at rest, and anti-abuse guardrails throughout.

🔒 Only your own content🔒 Isolated per organisation🔒 Tokens encrypted at rest🔒 No login for the asker
least_access: true
HOW IT WORKS

Connect once.
Better every week.

01 · CONNECT

An account owner clicks “Connect Slack” in Airprose Settings and approves it in Slack. One click.

02 · INVITE

Add the agent to any channel. It posts a short intro explaining how to use it.

03 · ASK

Anyone @mentions it or DMs it with a question. In an autonomous channel, they just post.

04 · ANSWER

It replies in seconds, grounded in your library, with sources shown. If it can’t, it says so and offers the add-to-library button.

05 · IMPROVE

Gaps flow back to the owners as content requests, so the library, and every future answer, gets better.

BUILT FOR

The questions
prospects actually ask.

It’s strongest where you’ve documented the answer. That’s the whole point of the library.

SECURITY & COMPLIANCE

“Are we SOC 2 compliant?” · “How do we handle GDPR and data residency?” · “When was our last pen test?”

PRODUCT & INTEGRATIONS

“Do we support SSO?” · “Do we integrate with X?” · “Can we do Y?”

PRICING & COMMERCIALS

Plan and packaging questions, commercial terms, the details a rep needs mid-deal.

IMPLEMENTATION & SLAs

Onboarding, uptime, support model. The same answers that fill your formal RFPs and security questionnaires.

WHY IT’S DIFFERENT

It would rather say
“I don’t know” than be wrong.

vs generic AI

ChatGPT doesn’t know your certifications or contract terms, and it will confidently make them up. Airprose answers only from your approved content, and cites it.

vs the wiki

Nobody reads the wiki mid-deal, and it goes stale. This answers in the channel where the question was asked, and its request-to-library loop keeps the content fresh.

vs “whoever’s free”

No bottleneck, no waiting, consistent answers. The expert’s knowledge is captured once and reused by everyone.

For procurement-savvy buyers and regulated topics, that restraint is the feature. It would rather say “I can’t find this, confirm with the team” than send a wrong answer to a prospect.

BEYOND SLACK

Not just Slack.

The Autonomous Agent starts in Slack. It doesn’t have to stop there.

COMING SOON

Microsoft Teams

The same Autonomous Agent, grounded in your own library, inside Microsoft Teams. It’s on the roadmap and not available yet, so we won’t pretend otherwise. If Teams is where your team lives, tell us and we’ll keep you posted.

ENTERPRISE

Custom agents, anywhere.

On the Enterprise plan, we can embed a custom Airprose Agent wherever your people and customers already are: your website, your help centre, or an internal tool. Point it at the right content and it answers your customers’ questions, your sales team’s questions, and more, always grounded only in your own material, with the same honesty when it doesn’t know.

Talk to sales →
AVAILABILITY

Answer the next
question in Slack.

Live now in Slack, self-serve, and available on the Scale plan. More detail in the Trust Centre.

← Free tools
REFERENCE

RFP & bid glossary

Every RFP, tender and procurement term you'll meet, in plain English — with the US, UK and EU differences called out. Search to jump to a term.

US · UK · EU at a glance

Same idea, different name

Bid terminology shifts by region — the rough equivalents across the three big procurement worlds:

ConceptUSUKEU
Buyer's request for a bidRFP / RFQITT / RFPITT / RFT
Where tenders are postedSAM.govFind a Tender + Contracts FinderTED
The procurement rulebookFARProcurement Act 2023EU Procurement Directives
How the winner is chosenBest value / LPTAMAT / MEATMEAT
Post-award challenge windowGAO protestStandstill (Alcatel)Standstill
Helping smaller suppliersSet-asides (8(a), SDVOSB)SME + social valueDivision into lots
Security baseline often asked forSOC 2Cyber Essentials / ISO 27001ISO 27001 / C5
Addendum / Amendment
A formal change a buyer issues to a live RFP — new requirements, revised dates, or answers to clarifications. Always work from the latest version.
BAFO · Best and Final Offer
A buyer's request for a final, improved offer — usually price — after initial evaluation, from the shortlisted bidders.
Best value US
A US award approach weighing quality, past performance and price together, rather than defaulting to the cheapest compliant bid. Contrast with LPTA.
Bid / no-bid
The go/no-go decision on whether to pursue an opportunity, weighing fit, effort, competition and win probability before committing resource.
CAIQ · Consensus Assessments Initiative Questionnaire
A standard cloud-security questionnaire from the Cloud Security Alliance, mapped to its Cloud Controls Matrix.
Clarification questions
The formal Q&A window in a live tender. Questions — and the buyer's answers — are usually shared with every bidder.
Compliance matrix
A table mapping every requirement in an RFP to your response and supporting evidence, so nothing is missed and evaluators can tick you off quickly.
Contracting authority UKEU
The public body running a procurement and bound by its rules. A US federal agency is the rough equivalent.
Contracts Finder UK
The UK government portal listing public-sector contracts and many lower-value opportunities in England.
DDQ · Due Diligence Questionnaire
A deep questionnaire — common in finance and vendor risk — verifying how you actually operate before a deal or investment proceeds.
Debrief UKEU
The buyer's feedback on why you won or lost. A supplier right in UK/EU public tenders; the "debriefing" in US federal bids.
DPS · Dynamic Purchasing System UKEU
An open, ongoing supplier list buyers can call off from. Unlike a closed framework, suppliers can join at any time.
EOI · Expression of Interest
An early, lightweight signal that you'd like to be considered, before any full tender is issued.
Evaluation criteria
The weighted scheme a buyer uses to score responses. Read it first — it tells you exactly where the marks are.
FAR · Federal Acquisition Regulation US
The rulebook governing how US federal agencies buy. The UK and EU run on their own procurement regulations, not the FAR.
Find a Tender · FTS UK
The UK service for publishing higher-value public tenders since Brexit, replacing the UK's use of OJEU.
Framework agreement UKEU
A pre-approved supplier arrangement buyers can "call off" from without re-running a full tender. Close cousin of a US IDIQ or GSA vehicle.
G-Cloud UK
A UK government framework for buying cloud hosting, software and support through the Digital Marketplace.
GSA Schedule · MAS US
A pre-negotiated US federal contract vehicle (Multiple Award Schedule) that agencies can buy from directly.
Incumbent
The supplier that currently holds the contract — usually the one to beat, and the reason to lead with change and value.
ITT · Invitation to Tender UKEU
A formal request to submit a priced, compliant bid, common in UK/EU public procurement. Roughly the US "solicitation" or RFP.
Kick-off
The internal meeting that starts a bid: owners, deadlines, win themes and the plan for who answers what.
Lot UKEU
A divisible package within a larger tender that suppliers can bid for separately, often to widen access for smaller firms.
LPTA · Lowest Price Technically Acceptable US
A US award method where the cheapest bid that clears the minimum bar wins. Contrast with best value.
MEAT / MAT · Most Advantageous Tender UKEU
The UK/EU standard of best price-quality balance, not just lowest price. The Procurement Act 2023 renames MEAT to MAT.
MSA · Master Services Agreement
The overarching contract terms that individual work orders or SOWs sit under.
NDA · Non-Disclosure Agreement
Signed before sensitive details are shared — often in both directions — to protect confidential information.
OJEU EUUK
The former EU-wide tender journal. UK tenders moved to Find a Tender after Brexit; EU ones still route via TED.
Past performance US
Your track record on similar contracts, formally scored in US federal bids and recorded in CPARS.
PIN · Prior Information Notice UKEU
An early notice that a public buyer intends to run a procurement, giving suppliers time to prepare.
PQQ · Pre-Qualification Questionnaire UKEU
A first-stage screen on capability, experience and standing, deciding who's invited to bid. Now often the UK "SQ" (Selection Questionnaire).
Procurement Act 2023 UK
The UK's overhauled public-procurement regime (in force 2025), replacing the Public Contracts Regulations 2015.
Redacted
Information removed from a document before release — typically commercially sensitive pricing or personal data.
Reverse auction
A live event where pre-qualified suppliers bid the price down against each other in real time.
RFI · Request for Information
An early, non-binding request to learn what suppliers and solutions exist, before a formal buying process.
RFP · Request for Proposal
A buyer's formal request for a proposed solution and price, scored against weighted criteria. The most detailed of the "RF" documents, and the default US term.
RFQ · Request for Quotation
A request focused on price for a well-defined, off-the-shelf requirement.
Set-aside US
A US contract reserved for a category of small business — e.g. 8(a), SDVOSB (veteran-owned), WOSB (women-owned) or HUBZone.
Shred / shredding
Breaking an RFP down into individual requirements and questions so each can be owned, tracked and answered.
SIG · Standardized Information Gathering
A widely used third-party security and risk questionnaire from Shared Assessments, in full and "Lite" versions.
SLA · Service Level Agreement
The measurable service commitments — uptime, response and resolution times — you're contractually held to.
Social value UK
Weighted UK criteria scoring wider economic, social and environmental benefit alongside price — a minimum 10% weighting on many central-government bids.
Sources sought US
A US federal market-research notice testing supplier interest and capability before a formal solicitation.
SOW · Statement of Work
The specific deliverables, timeline and acceptance criteria for a defined piece of work.
Standstill period UKEU
A mandatory pause after a public-sector award (the "Alcatel" period) before signing, letting unsuccessful bidders challenge. The US analogue is a GAO bid protest.
TED · Tenders Electronic Daily EU
The EU's central portal for public tenders above the value thresholds.
Threshold USUKEU
The contract value above which formal procurement rules and portals kick in. The figure differs by regime and category.
TUPE UK
UK rules that transfer staff, on their existing terms, to the incoming supplier when a service changes hands.
Weighting
How many marks each criterion carries. Read it before writing — it shows where the points actually are.
Win theme
A recurring message linking your strengths to what the buyer cares about, woven consistently through the whole response.

Know the terms. Skip the retyping.

Airprose drafts RFP, RFI, tender and DDQ responses from your approved library — every answer sourced and cited, so your team stops rewriting the same content.

Start free →
← Free tools
REFERENCE

Security question explainer

The security-questionnaire questions that come up again and again — what each one is really asking, and how to answer it well. Search to find yours.

Do you encrypt data at rest and in transit?
MeansWhether stored data and data moving over networks are encrypted, so it's unreadable if intercepted or a disk is stolen.
AnswerName the standards (e.g. AES-256 at rest, TLS 1.2+ in transit), where they apply, and who manages the keys. Reference the relevant policy.
Do you hold SOC 2 or ISO 27001?
MeansWhether an independent auditor has certified your security controls against a recognised framework.
AnswerState which report/certificate, the type (SOC 2 Type II vs Type I), the scope and the date, and offer it under NDA. If in progress, give the expected date.
Do you enforce multi-factor authentication (MFA)?
MeansWhether logins require a second factor beyond a password, for staff and ideally for customer accounts.
AnswerConfirm MFA is enforced for all staff and admin access, name the method (e.g. TOTP, hardware keys, SSO), and note customer-facing MFA options.
Where is customer data hosted and stored?
MeansData residency — the physical/legal location of the data, which matters for GDPR and other regulations.
AnswerName the provider and region(s), whether data ever leaves them, and any residency options. Be exact; this answer becomes part of the contract record.
Do you maintain a list of subprocessors?
MeansThe third parties that process customer data on your behalf (hosting, email, analytics, support tooling).
AnswerLink to a current subprocessor list, state how customers are notified of changes, and confirm data-processing terms are in place with each.
What are your data retention and deletion practices?
MeansHow long you keep data and how it's deleted when a customer leaves or requests removal.
AnswerGive retention periods by data type, the deletion process and timeframe (including backups), and how you confirm deletion on request.
Do you carry out penetration testing?
MeansWhether independent testers actively try to break your systems to find vulnerabilities.
AnswerState frequency (at least annually and on major change), that it's third-party, and that findings are remediated. Offer a summary/attestation letter.
Describe your incident response process.
MeansHow you detect, contain, investigate and communicate a security incident or breach.
AnswerSummarise the plan (detect → triage → contain → eradicate → recover → review), who owns it, and your customer-notification commitment and timeframe.
What are your RPO and RTO?
MeansRecovery Point Objective (how much data you could lose) and Recovery Time Objective (how fast you restore service) after an outage.
AnswerGive concrete targets (e.g. RPO 1 hour, RTO 4 hours), how backups support them, and how often recovery is tested.
How do you control access to customer data?
MeansWhether access follows least privilege and role-based controls, and how it's reviewed.
AnswerDescribe RBAC, least-privilege defaults, approval for access, periodic access reviews, and logging of who accessed what.
Do you run a vulnerability management programme?
MeansHow you find, prioritise and patch security vulnerabilities on an ongoing basis.
AnswerCover scanning frequency, dependency monitoring, and remediation SLAs by severity (e.g. critical within X days).
How is data separated between customers?
MeansTenant isolation — how one customer's data is kept from another's in a shared platform.
AnswerExplain the isolation model (logical separation with tenant IDs, or dedicated instances), and the controls that enforce it.
Do you have a business continuity and disaster recovery plan?
MeansWhether you can keep operating, and restore service, through a major disruption.
AnswerConfirm a documented BC/DR plan, its key objectives (linked to RPO/RTO), and that it's tested at least annually.
Do you provide audit logs of access and activity?
MeansWhether security-relevant events are recorded, retained and available for review or investigation.
AnswerState what's logged, retention period, tamper-resistance, and whether customers can access logs for their own tenant.
Do you conduct background checks on staff?
MeansPre-employment vetting for people who can access customer data or systems.
AnswerState the checks (identity, right-to-work, references, criminal where lawful), whether they cover all staff or privileged roles, and that contractors are included.
Do you provide security awareness training?
MeansWhether staff are regularly trained to spot phishing and handle data safely.
AnswerConfirm training at onboarding and at least annually, phishing simulations, and that completion is tracked and enforced.
Do you support SSO, SAML and SCIM?
MeansSingle sign-on and automated provisioning/deprovisioning from the customer's identity provider.
AnswerName the protocols (SAML 2.0, OIDC), which plans include SSO, and whether SCIM auto-provisioning is available.
How do you manage secrets, keys and credentials?
MeansHow API keys, passwords and encryption keys are stored, accessed and rotated.
AnswerCover a secrets manager or KMS, no secrets in source code, least-privilege access, and a rotation policy.
How quickly do you notify customers of a data breach?
MeansYour commitment to tell affected customers when their data is caught up in an incident.
AnswerGive a concrete timeframe — many vendors commit to "without undue delay", mirroring GDPR's 72-hour regulator deadline; US state laws vary, so state your own target and the channel.
Will you sign a Data Processing Agreement (DPA)?
MeansA contract governing how you process personal data on the customer's behalf.
AnswerConfirm a standard DPA that lists subprocessors and security measures, and that cross-border transfers use SCCs (EU) or the IDTA / UK Addendum (UK).
Do you carry cyber and professional (E&O) insurance?
MeansFinancial cover for security incidents and related liability.
AnswerConfirm cover is in force, give the limits, and offer a certificate of insurance on request.
Do you separate production, staging and development environments?
MeansWhether real customer data is isolated from test and development systems.
AnswerConfirm environments are segregated, that production data isn't used in dev/test, and that production access is restricted and logged.
Do you follow a secure development lifecycle (SDLC)?
MeansWhether security is built into how you design, build and ship code.
AnswerCover peer code review, automated dependency/SAST/DAST scanning, change approval, and separation of duties between who writes code and who deploys it.
What is your uptime / availability commitment?
MeansThe service level you guarantee, and how it's measured and evidenced.
AnswerGive the SLA figure (e.g. 99.9%), how it's measured and credited, and link a public status page with incident history.
Are you GDPR and CCPA compliant, and who is accountable?
MeansYour standing under the major privacy regimes, and who owns data protection.
AnswerConfirm which regimes apply (UK/EU GDPR, CCPA/CPRA), your lawful basis, how you handle data-subject requests, and name your DPO or privacy contact.
Can we audit you, or will you share independent reports?
MeansHow the customer gets assurance beyond your own self-assessment.
AnswerOffer your SOC 2 Type II / ISO 27001 certificate and latest pen-test summary under NDA, a bridge letter between audit cycles, and note any right-to-audit terms.

Answer it once. Reuse it forever.

Airprose auto-fills SIG, CAIQ and custom security questionnaires from your approved answers — every response sourced and cited. See the security-questionnaire use case.

Security questionnaires →
← Free tools
CALCULATOR

RFP response cost calculator

A rough, honest look at what answering RFPs actually costs your team — per bid and per year. Adjust the numbers to match your world.

Drafting hours / RFP
16
Cost / RFP
£720
Cost / year
£34.6k
At 60% first-draft time saved with a reusable answer library, that's roughly £20.7k a year back. Illustrative only — set the numbers to match your team.

Give most of that time back.

Airprose drafts the first version of every RFP answer from your approved content — sourced and cited — so your team edits instead of writing from a blank page.

Start free →
← Free tools
CALCULATOR

Security questionnaire time estimator

How long will that SIG, CAIQ or custom security questionnaire actually take? Estimate the effort and the working days before you commit to a date.

Total effort
12 h
Working days
3
With a reuse library
1
"With a reuse library" assumes ~65% of answers are matched from approved content and only reviewed. Illustrative — real questionnaires vary.

Turn days into an afternoon.

Airprose matches each question to your approved answers and drafts the rest, so a security questionnaire becomes a review pass — not a from-scratch rewrite.

Security questionnaires →
← Free tools
PLANNER

Bid timeline back-planner

Enter your submission deadline and how big the bid is. Get every milestone counted back in working days — so nothing gets left to the last night.

Milestones skip weekends. Add buffer for approvals and public holidays — deadlines are unforgiving.

Spend the timeline writing, not chasing.

Airprose drafts the responses from your library the moment the bid kicks off, so your milestones are about review and polish — not staring at a blank page.

Start free →
RESOURCES

Guides, comparisons and answers

Plain-English guidance on RFPs, tenders, security questionnaires and DDQs: how the work actually gets done, and where Airprose fits in.

Guides

GUIDE
Security questionnaire automation: a practical guide

How to automate security questionnaires: what SIG and CAIQ are, why they take so long, what automation does, and how to choose a tool. A practical guide.

Read →
GUIDE
What is a DDQ, and how do you complete one?

A due diligence questionnaire, or DDQ, is a set of risk questions one organisation sends another. Learn who sends them and how to complete one.

Read →
GUIDE
How to automate RFP responses without losing your voice

A practical method for automating RFP responses: what to automate, what to keep human, and how sourcing keeps drafts trustworthy.

Read →
GUIDE
The best AI RFP software, and how the AI-native tools compare

AI RFP tools split into AI-native startups and library-first incumbents. The real question is whether the AI cites its source or just sounds confident.

Read →
GUIDE
The best software for automating tender and ITT responses

How to choose software for tender and ITT responses: what makes public-sector bids different, the tool categories, and how to shortlist and trial well.

Read →
GUIDE
The best software for answering security and vendor questionnaires

How to choose software for answering SIG, CAIQ and VSAQ security and vendor questionnaires, including the two tool families and how to trial one.

Read →
GUIDE
What is the best DDQ software for due diligence questionnaires?

There is no single best DDQ software. Which tool fits depends on the due diligence questionnaires you field and how often. A practical buyer's guide.

Read →
GUIDE
How long do you get to answer a US federal solicitation?

We analysed 8,122 US federal solicitations posted to SAM.gov. The median gives you 12 days to respond — barely half the UK's 21 — 57.2% close inside a fortnight, and 50.2% are set aside for small business.

Read →
GUIDE
How long do you actually get to answer a UK public tender?

We analysed 1,591 UK public tender notices published in 2026. The median gives you 21 days to respond, 30.9% give under a fortnight, and 38.7% of deadlines fall at exactly midday.

Read →
GUIDE
RFP and security questionnaire software for fintech

Fintech deals get gated by security questionnaires and DDQs, not just RFPs. Here's what to look for in software that drafts all three from your own security evidence.

Read →
GUIDE
RFP and DDQ software for asset and fund managers

Asset managers answer the same investor DDQs and consultant RFPs every quarter. Here's what to look for in software that drafts them from your own approved answers.

Read →
GUIDE
Why most RFP software still charges per seat

Most RFP tools price by headcount and hide the number until a demo. Here's what that actually costs you, and how unlimited-user pricing works instead.

Read →
GUIDE
How to respond to an RFP: step by step with examples

How to respond to an RFP step by step, with a real answer example and what changes for government RFPs and tricky questions.

Read →
GUIDE
How bid teams can use AI across the whole bid lifecycle

AI can help at every stage of a bid, from go/no-go triage to drafting, review and knowledge capture, not just the writing.

Read →
GUIDE
What is a vendor risk assessment, and how does it work?

Vendor risk assessment explained: the process, templates, and reports, plus how to answer them faster with sourced, on-brand responses.

Read →
GUIDE
What is an RFI response and how do you write one?

An RFI response answers a buyer's early questions before an RFP. What an RFI asks, what a strong sample answer looks like, how fast to reply, and how to reuse a knowledge base.

Read →
GUIDE
What is the best RFP software available today?

There's no single best RFP software. Here's how to judge sourcing, security and pricing so you pick the one that fits your team, not a ranking.

Read →
GUIDE
DDQ examples and templates by due diligence type

Real DDQ questions from vendor risk, fund, security and ESG questionnaires, plus how to build one reusable template across all of them.

Read →