How it works
Three motions. No sales calls. No auditor.
- STEP 01
Drop in the spreadsheet
Paste your buyer's questionnaire — CAIQ, SIG Lite, or any custom enterprise form. Passpost reads the schema and pairs every question to your stored controls.
- STEP 02
Passpost fills the rows
Your stack profile (hosting, MFA, access, backups, encryption) drives the answers. Re-uses one source of truth across every questionnaire you ever ship — no quarterly re-write.
- STEP 03
Export in their format
Buyer gets a finished document in their structure, not yours. Trust page and policy pack come along — reviewer pulls up trust.yoursaas.com mid-check.
What's in the box
One stack profile. Five artifacts.
A 15-minute guided wizard captures hosting, MFA, access, backups, and encryption. From that single source of truth, Passpost generates everything your enterprise buyer asks for — across every questionnaire, across every review.
- Hosted trust page at trust.yoursaas.com
- 12 standard security policies (Access, Backup, Encryption, Incident Response, …)
- Subprocessors + posture disclosure
- Evidence vault that exports cleanly to Vanta, Drata, or an auditor
- CAIQ, SIG Lite, and custom-questionnaire exporters
Plans
Sized for the deal, not the org chart.
Unblock is built for the founder with one deal this week. Founder and Agency are for the founder shipping enterprise as a habit.
- One questionnaire answered end-to-end
- 12-policy policy pack generated from your stack profile
- 90-day trust page at trust.yoursaas.com
- Buyer's format — CAIQ, SIG Lite, or custom
- Unlimited questionnaires answered
- Unbranded trust page — your domain, your brand
- Evidence vault that exports cleanly to Vanta or an auditor
- Quarterly policy refresh from your latest stack profile
- Everything in Founder, per client
- White-label sub-accounts for each customer
- Your studio logo on every sub-account trust page
- Centralised evidence vault across the agency portfolio
Passpost helps you pass the security review — it does not audit, certify, or render compliance advice. The moment your buyer wants certification, you graduate to a full GRC platform; Passpost's evidence vault exports cleanly into one.
FAQ
What buyers, founders, and studios ask first.
If your question isn't here, write to passpost@polsia.app — a founder reads it.
Your buyer's reviewer is mid-check right now. Be ready when they ask.
Drop in the spreadsheet, generate the policies, ship the trust page. $249 to unblock a single deal, or $99/mo if your pipeline keeps you there.