Source found ISMS Policy v3.2 · §4.1
Remote access to production systems requires MFA through the central identity provider — mandatory for all employees and contractors.
Product
From inbox to customer-ready answer.
Attestria follows the workflow of a compliance team and turns it into a repeatable process — with sources, confidence scoring and human control.
Status quo
Today this is done by hand.
Excel, Outlook, SharePoint, old answers — slow, repetitive and risky.
One contradictory answer can endanger an audit or a customer relationship. Meanwhile the buyers have long automated sending their questionnaires — only the supplier side still answers by hand.
20–80 / year
questionnaires per supplier
Attestria research
8–60 h
of work per questionnaire
200–400 h / year
at 200 employees
67 %
of companies with over 250 employees receive LkSG questionnaires
IHK Osnabrück, 2024
How it works
Six steps. One audit trail.
Every step leaves a traceable record — from arrival to export.
01 · Intake
Questionnaire arrives
By email, upload or a monitored inbox — without changing your existing channel.
02 · Detect
Format detected
Attestria recognises TISAX, EcoVadis, LkSG and custom templates and splits them into structured questions.
03 · Retrieve
Your documents searched
Certificates, ISMS policies and previous answers are searched for solid evidence.
04 · Draft
Answer drafted
Every answer is drafted with an exact source citation and a confidence score.
05 · Review
Human reviews
Only uncertain, contradictory or legally risky answers land with a person.
06 · Export
Exported back
Approved answers go back to the customer as Excel, Word, PDF or portal format.
Live agent
From source paragraph to reviewable draft.
Choose a typical question and see how Attestria connects source, answer and confidence in a traceable working result.
Illustrative examples — no real customer data
Incoming question
Do you enforce multi-factor authentication for remote access to systems that process customer data?
Grounded draft
Yes. MFA is mandatory for remote access to systems that process customer data and is enforced through the central identity provider for employees and contractors.
Confidence 92%
Why it works
The hard part is trust, not text.
Writing an answer is easy. What is valuable — and difficult — is making it audit-ready.
Grounding
Every answer is built from your own documents — never invented.
Citations
Every answer points to the exact source paragraph. Verifiable.
Confidence
Six factors, calibrated against an eval set — the system says how certain it is.
EU data residency
By architecture: hosting in Germany, inference in the EU.
Human in the loop
Risky or uncertain answers always go to a person.
Public benchmark
A 500-question VDA-ISA gold standard — in progress. Credibility over claims.
Next step
One real questionnaire. Your real documents.
Let’s talk for 20 minutes. We listen to how compliance runs at your company today — and whether Attestria can take over the repetitive part.