Skip to main content

AI Questionnaire Assistance (AIQA) - Complete Guide

An overview of SafeBase's AI Questionnaire Assistance (AIQA) Tool

Matt Szczurek avatar
Written by Matt Szczurek
Updated over 2 months ago

Overview

SafeBase's AI Questionnaire Assistance (AIQA) harnesses an organization's Trust Library content to answer new security questions received from customers and prospects. It can source answers from content that includes SafeBase's documents, Knowledge Base, Trust Center contents, Trust Center updates, external websites, policies synced from Drata, and controls synced from Drata.

Prerequisites

  • AIQA must be purchased as part of your SafeBase plan or you must have remaining AIQA credits

  • Organization members must have the role of Questionnaire Manager , Account Manager, or Admin.

  • If processing a third-party questionnaire portal, the SafeBase Chrome extension must be installed in your browser.

Getting Started

Note: In order to start running questionnaires with AIQA, you must enable Generative AI in your organization. Go to Settings -> Generative AI and turn on the "Enable Generative AI" toggle.

The success of AI tools depends on the quality and completeness of the content you provide. Gathering and organizing the right content before beginning is vital to ensure accurate, consistent, and high-quality results. As you determine what content you should make available to AIQA, ask yourself, “What types of questionnaires have we been receiving?"

Five Steps For Optimal Results

Step 1 - Remove

First things first—remove outdated content.

If it’s older than a year, it’s time to archive it.

When your AI has to sift through outdated info, it gets confused. Help it out—give it the good stuff only.

Step 2 - Identify

Next up—identify the types of questions you’re actually receiving.

This is one of the most important steps to leveling up your content.

The types of questionnaires you receive from prospects typically depend on your product’s functionality and the kinds of data you collect or process.

The five most common inbound questionnaire categories are:

  1. AI

  2. RFPs

  3. Privacy

  4. Security

  5. Product

For example, if you know you’re receiving more RFPs than security questionnaires, focus your efforts on populating and polishing the content that supports those RFPs first.

That way, your AI is trained where it matters most—and your team saves time where it counts.

Spoiler alert: A lot of vendors are asking about AI now. You’ve probably noticed that almost every tool these days has an AI assistant, co-pilot, or some kind of magic wizard baked in.

If your product uses AI—even a tiny bit—make sure your documentation covers it. We’re talking data flow diagrams, privacy impact assessments, how AI models are used, and whether or not third-party LLMs are involved.

If it’s not in your Trust Center yet—add it. Because if you’re getting asked these questions and don’t have answers ready, you’re leaving AI power on the table.

Step 3 - Gather

Gather your best stuff.

Pull up the last five questionnaires your team has completed—especially those with lots of back-and-forth between Legal, Security, Sales, and anyone else who weighed in.

Why? Two big reasons:

First, these are pure gold. They show how your team actually communicates—your tone, your style, and how you want your brand to come across to prospects.

Second, no one wants to keep reinventing the wheel. Re-using well-crafted answers means your team won’t be dragged into answering the same questions over and over again.

And here’s a solid rule of thumb for building high-quality responses:

  • If you’re answering “Yes” — elaborate.

  • If you’re answering “No” — explain the compensating controls.

  • If it’s “N/A” — that’s fine, just explain why it’s not applicable to your org or your product.

Doing this not only improves your AI’s training, but it also helps prevent follow-up questions from prospects. So it’s a win-win for everyone involved.

Below is a list of how and what content to populate your Trust Center and Knowledge Base to optimize results.

*For more information on content structuring in Knowledge Base, navigate to https://help.safebase.io/en/articles/10139198-migrating-to-knowledge-base-kb-from-a-content-management-tool


Step 4 - Populate

Now, it’s time to populate your Trust Center and Knowledge Base.

All those strong answers, shiny new docs, and your team’s tone of voice? Upload them!

The more context you give the AI, the smarter and more accurate it becomes. If you just rely on one or two docs to answer every questionnaire, you’re basically handing the AI a flashlight and asking it to find a needle in the dark.

Give it a whole toolbox instead.

Previously Answered Questionnaires

Examples: RFPs, SIGs, CAIQs, or other security/compliance questionnaires you’ve completed. These questionnaires should be well thought out responses. The more detail you can provide in the answer and comments for these questionnaires, the more helpful it will be for AIQA. A list of questions that are just answered with a simple “Yes”, “No”, “N/A” is not as powerful as answers that include comments and details that explain the answer for each question.

Why: These provide a solid, verified foundation for AI responses and reduce the need for repetitive work.

Action: Upload the most recent, approved versions of these documents to the Trust Center and Knowledge Base (FAQ)

Trust Center Content

Examples: Security certifications (SOC 2, ISO 27001), privacy policies, and compliance documentation.

Why: Trust Center content is credible, vetted material that ensures the AI generates accurate responses.

Action: Share links or files containing this information with the SafeBase team.

Relevant Documentation

Examples: Whitepapers, policy summaries, product architecture diagrams, security, and privacy one-pagers.

Why: These are essential reference materials for the AI to understand your business and practices.

Action: Gather and upload up-to-date versions of these resources.

Publicly Available URLs

Examples: Product FAQs, security blogs, support documentation, company privacy pages, and a company’s website.


Why: The AI can use public information to enrich responses while maintaining alignment with your brand.

Action: Provide URLs or direct links to these webpages to the SafeBase team, and we will add these to the backend for our AI crawler.

Important to Note About URLs:

  • Content from the URL is refreshed daily. If you make changes to the content at the URL, those changes will be reflected in AIQA.

  • The URL must be publicly available

  • If there are multiple pages / sub-pages on a website that you want AIQA to use, you must provide the URL of every page. AIQA does not automatically traverse the pages on a website.

  • If behind bot/crawler protection, our web crawler user agent SB-AI-Scanner/1.0 must be added to an allowlist. Our bot is designed to be a good citizen and will not attempt to bypass any anti-scraping you have on your website

  • If necessary, a static source IP can be provided

  • To add or remove a website as a source, please contact support@safebase.io or our support chat.

Step 5 - Automate

And finally—automate!

This is a five-step process: run, review, approve, complete, and add back to Knowledge Base.

So run those questionnaires, review the answers, approve the good stuff, edit what needs tweaking, hit complete and add back to Knowledge Base. Boom. AI, optimized.

Every time you review and tweak a response, the AI learns from you and gets better. And over time, it starts answering like you would.

Now I know we’re used to those thumbs-up/thumbs-down buttons in most AI apps… and hey, we all love a good emoji. BUT—we’ve taken that extra step out of your hands.

In our platform, approving an answer = 👍🏼, and editing an answer = 👎🏼

Conclusion

Following these steps and best practices will empower the AI to deliver accurate, comprehensive, and tailored outputs to your business needs.

Step-By-Step

Questionnaires Page

Navigate to the Questionnaires Page by clicking on the Questionnaires tab in the Trust Inquiries section of the Trust Center. Click on Upload Questionnaire.

Supported File Types for Import

  • AIQA supports the following questionnaire file types: csv, .xlsx, .xls, .xlsm, .doc, .docx, .pdf, .txt. For the best experience though, we recommend that questionnaire files be uploaded in the more modern file formats (i.e. .xlsx, .docx, .pdf)

  • These files are grouped into 2 different categories: sheet-style file and text-style files

    • sheet-style files include: csv, xlsx, xls, and xlsm

    • text-style files include: .doc, .docx, and .txt

  • Sheet-style files and text-style files have slightly different upload and parsing steps

Uploading a Questionnaire

To upload a questionnaire, click the Upload Questionnaire button. It is in the top right corner of the Questionnaires Table

  • Questionnaire File: Files can be uploaded or dropped into the modal

    • Uploadable to table: These files can be uploaded and stored in the questionnaire table.

    • Supported file types for AI Assistance: These are the file types that AIQA can process.

  • Product: If your Trust Center is multi-product, choose which product the questionnaire is associated with

  • Account: Choose an existing account. If the account is not listed, start typing a new account name, and an option to create a new account will appear.

    • If the + Create a new account option is chosen, the create a new account modal will open, and the account details will be required

  • Upload: If this option is chosen, a questionnaire will be created in the Questionnaire table, and AIQA processing will not be performed

  • Upload & Start AI Assistance: If this option is chosen, a questionnaire will be created in the Questionnaire table, and AIQA processing will begin automatically

Note: Prior to clicking "Upload & Start AI Assistance," we recommend checking your AIQA Settings to ensure the preferred settings are configured.

Uploading a sheet-style questionnaire with one sheet (one tab)

Uploading a sheet-style questionnaire with multiple sheets (tabs)

Uploading a text-style questionnaire

If you have an “online” file like a google doc or word doc that is open in Office 365, download the file as a .docx or .pdf file first, and then upload it to SafeBase

How to know when a questionnaire has been processed

The progress bar on the Questionnaires page indicates whether the questionnaire is still being processed or whether it is ready to be reviewed. Please note that there are 2 different progress bars:

  • The first indicates that the questionnaire is processing and it is not ready to be worked on yet

  • The second indicates the number of questions that have been answered already

Reviewing a Questionnaire

  • After answers have been generated for the questions in the uploaded questionnaire, users can navigate to that questionnaire to review the answers and edit them where necessary.

  • Reviewing and editing responses is important to make sure that all of the answers are correct before returning it to the submitter. But it also important because interacting with the questionnaire helps improve the performance of AIQA over time. There are 2 key actions to help improve AIQA accuracy over time:

    1. Approve answers - When a user approves an answer, they are telling the system that “this answer is good”. It is critical for the SafeBase team to know what good answers look like so that we can make changes to the product so that it generates similar answers.

    2. Manually edit answers - When a user manually edits a response, that is a signal to the product that an answer was not good. Manually editing an answer and then approving the new answer sends a direct signal to SafeBase so that the system can investigate what was changed. We can then make changes to AIQA to provide better answers.

Assigning a question to another org member

Users can assign a due date and/or assign the question to a specific org member or group.

Screenshot+2024-12-30+at+12_12_22 PM.png (1029×591)

Source Information

Within the Sources area, users can find details about the source used by AI to answer your question. This section also includes information about when the answer was last modified.

Knowing when an entry was last modified helps users quickly identify if the information is current and up-to-date.

Completing a Questionnaire

  • To complete a questionnaire, click the Complete button in the top right hand corner of the page. It is important that users click the “Complete” button on questionnaires when they are finished because this gives SafeBase a signal that the user likes all of the responses in that questionnaire. SafeBase compares the responses when the questionnaire is complete to the responses that were generated and uses the differences to improve over time.

  • Clicking the “Complete” button on a questionnaire is important for a couple of reasons:

    • It marks all of the questions in that questionnaire as approved. These answers can now be used as feedback to improve AIQA answer quality.

    • It “stops the timer” on that questionnaire. The AI Analytics dashboard has a metric called “Average Round Trip”. This metric is the time between the questionnaire being submitted and the Complete button being clicked. If a user never clicks the complete button, the timer on that questionnaire will not stop, and this metric will be artificially high.

    • You have the option to add modified answers to your Knowledge Base which can be sources for future questionniares.

      Screenshot+2024-12-30+at+12_17_50 PM.png (564×342)

Downloading a Questionnaire

  • To download the completed questionnaire, click the download icon in the top right corner of the page. Users can download the “Original File” without the answers in it or they can download the processed file. The format of the processed file depends on the type of questionnaire that was uploaded:

    • For sheet-style questionnaires - the answers and comments will be written into the original questionnaire format in the columns that were selecting

    • For file-type questionnaires - the answers and comments are available in a csv file that the user can export. The responses will not be written back into the original file automatically.

    • For portal-type questionnaires - the answers and comments are available in a csv file that the user can export. The user can also use the Chrome Extension to place the responses back into the portal.

  • Users have the option to archive or delete questionnaires by clicking on the three-dot icon to the far right of the desired questionnaire.

    • Once archived, the questionnaire will no longer be visible in the Questionnaires table. You can still unarchive this questionnaire and get it back by filtering the table to show your archived questionnaires​.

      • Click the filter icon above the table, and select Archived under the Progress dropdown.

      • You can then sort the Status column to see all the Archived questionnaires together, and choose the three-dot icon to unarchive it.

    • An archived questionnaire is still counted against your overall allotment of AIQA runs, and is still shown in reporting in the AI Analytics tab of the Dashboards section.

    • In contrast, a deleted questionnaire does still count against your allotment of AIQA runs, but will not be considered in AI Analytics.


Modifying a Completed Questionnaire

If changes are needed to a fully approved questionnaire, simply click the Re-open button located at the top-right corner of the questionnaire table.

This will unlock the questionnaire, allowing you to make the necessary edits before resubmitting it for approval.

Questionnaires Page and Settings

How to navigate the AIQA Questionnaires page and Settings

Questionnaires Page

Navigate to the Questionnaires Page by clicking on the Questionnaires tab in the Trust Inquiries section of the Trust Center. The entire table can be sorted and filtered by using the sort by and filter options at the top of the table.

Product & Account

Questionnaires must be associated with a Product (If your Trust Center has multi-prod enabled)and an Account. These fields are set when an account is

  • Clicking the Account will direct you to the SafeBase accounts page for your organization.

  • Additional indicators are if an account is linked to a Salesforce account
    (Clicking the Salesforce logo will take you directly to the account in Salesforce) and if the account has their own Trust Center powered by SafeBase
    (Clicking the SafeBase logo will direct you to their Trust Center).

Deal Status & Revenue

If an account is linked in Salesforce, and your organization takes advantage of our Enterprise Analytics feature, the Deal Status and Revenue will be visible in this table.

Date Added, Due Date, & Submitted By

The Date Added, Due Date, and Submitted By allow users to keep track of who and when a questionnaire is submitted. These fields are self-explanatory, however, one note that the Due Date is set in the Questionnaire View

Archiving a Questionnaire

  • Click the Archive button next to the desired questionnaire.

  • Once archived, they will no longer be visible in the Questionnaires table.

Downloading a Questionnaire

  • To download the completed questionnaire, click the download icon in the top right corner of the page. Users can download the “Original File” without the answers in it or they can download the processed file.

Settings

Navigate to the AIQA Settings by clicking the Gear icon on the right.

Note: These are global settings that apply to all subsequent questionnaires processed by AIQA. They will not impact questionnaires that have already run.

  • Auto-Approve Answers: When toggled On answers with high confidence will be automatically approved.

  • Response Language: When you select “Choose language every time” you will be prompted to select the language that you want generated answers to be written in.

    • AIQA supports the following languages: English, Arabic, Chinese, Danish, Dutch, French, Greek, German, Hebrew, Hindi, Italian, Japanese, Korean, Polish, Portuguese, Russian, Spanish, Swedish.

  • Comment Mode: You can select a comment mode to control when a comment accompanies an answer to a question and when it does not. There are 3 comment modes you can choose from:

    • Always (when available) - Whenever a comment is generated, it will be provided

    • Selectively - Comments added only when the response is copied from Knowledge Base (FAQ) or AI-generated answer is "No" or "N/A”

    • Never - Comments will never be added

    Note: Comment mode does not apply to answers that copied directly from your Knowledge Base. If a comment exists in your Knowledge Base entry, it will be used regardless of the selected comment mode.

  • Knowledge Base Matching: Controls the required similarity between a question and a Knowledge Base entry for a successful match.

    • There are 3 settings: Strict, Normal, and Relaxed.

Did this answer your question?