← All demos
CiteLLM Check · Security

Vendor questionnaire vs SOC 2 report

The vendor said "no exceptions". Its own SOC 2 report lists three.

What Check caught

Select one to open it in the review.Open full screen

The auditor found deviations in three controls: access reviews, removing leavers' access, and change approval.

About this demo

A SaaS vendor's answers to a customer's security questionnaire, checked against its own SOC 2 Type 2 report.

How this demo was made

Both documents are fictional samples created for this demo, because real SOC 2 reports are confidential: Nimbleford Analytics, Inc. and Quillfeather & Rook LLP do not exist, and every page is marked as a sample. The assessments are Claude's, made with CiteLLM Check; CiteLLM located every quotation in the PDFs. The review above is CiteLLM Check's own viewer, as it opens in ChatGPT and Claude.

The documents

  • CheckedNimbleford security questionnaire response.pdfPDFFictional sample
  • SourceNimbleford SOC 2 Type 2 report 2025-26.pdfPDFFictional sample

Run it on your documents.

Check works inside ChatGPT and Claude. Attach your PDFs, ask, and the review opens beside the chat. Draft tie-outs are part of CiteLLM Pro.

The request

Check this security questionnaire against the vendor's SOC 2 report, including its exceptions and carve-outs.

Attach the documents above, select CiteLLM, and paste this request. Needs CiteLLM Pro.

More Check demos

Other documents, same check.