Hi Product Hunt. I built Vendeflect because answering the same security questionnaire by hand, one buyer after another, is a bad use of a founding team's week. Two things it deliberately does not do, so nobody is surprised later. The AI drafts and never sends. Every answer waits for a person on your side to approve it. Drafts cite the paragraph they came from and show a confidence score that is capped so it never reads as certainty. If nothing in your documents answers a question, it says so instead of inventing a policy. Vendeflect does not make anyone SOC 2 compliant. It does not audit you or issue a report. It helps you evidence a posture you already have, in a form a buyer can read. The security page states plainly that we hold no SOC 2 report and no ISO 27001 certification today. Some things are honestly unfinished. Uploaded files are parsed to text and the text is stored, but there is no object storage yet, so a Trust Center resource has no file download. NDA requests open a mailto to your contact address rather than being stored or emailed by us. Retrieval is keyword based; the embedding column is a documented stub. SSO, magic link sign in and write endpoints on the API are future work. I would rather ship this honest than pad the list. Feedback welcome, especially from anyone who has lived through a vendor security review.

Vendeflect

A Trust Center and questionnaire answers you approve

A Trust Center and questionnaire answers you approve