Questions,
answered plainly.

A security compliance platform and a questionnaire service in one. The platform organises controls, evidence, policies, risks, vendors, access reviews, audits and customer questionnaires. If you’d rather not do a questionnaire yourself, we answer it for you in 1–3 working days.

Platform plans cost CHF 990, CHF 2,490 or CHF 4,990 a year, with unlimited users. A single questionnaire done for you costs CHF 490 with no subscription. Growth includes 3 questionnaires a year and Scale includes 8.

We don’t charge per employee, we keep the product focused and we sell directly. You pay for the platform and the questionnaires you need.

The core modules are built. We onboard every platform customer personally, agree the start date, set up the workspace and sign the data processing agreement before you upload anything. Integrations such as AWS and Microsoft 365 are on the roadmap.

You can track SOC 2, ISO 27001, nLPD/GDPR, DORA, NIS2 or a customer’s own requirements as programs and map them to your controls. Ready-made framework templates are on the roadmap; until then we help you set them up.

We work from documents you already have and a short list of follow-up questions, and every answer is checked against your evidence before it reaches you. The clock starts when we have the questionnaire and your documents.

We give you a fixed price before we start. Most supplier questionnaires from banks and large companies fit within 150 questions.

We say so in clear, professional wording and suggest the next step. A precise “not yet, planned for Q1” usually lands better than a vague yes.

We sign an NDA before you share anything and work under a data processing agreement that lists every service provider involved. We only ask for what the questionnaire needs. Documents sent for a single questionnaire are deleted within 30 days of delivery; with a platform plan, your approved answers and evidence stay in your own workspace.

Supplier questionnaires from banks, insurers and large companies, and standard formats such as SIG, CAIQ and HECVAT, in Excel, Word, PDF or online portals. For portals we prepare copy-ready answers.

English, Italian and German. We answer each questionnaire in its own language.

No. You show us settings or send screenshots and exports. We never log in to your infrastructure.

No. SOC 2 reports come from independent CPA firms and ISO 27001 certificates from accredited certification bodies. If you already have them, we use them as evidence.

By invoice. Platform plans are invoiced yearly in advance. Single questionnaires are invoiced on delivery, payable within 30 days.

Plans renew every year. Cancel any time before the renewal date. You can export your workspace at any time.

Yes. Many questionnaires arrive through an IT provider, fiduciary or data-protection consultant. Write to us about a referral arrangement.

ControlQuay is a Swiss company operated by Isago Wind Energy Holding SA in Mezzovico, Ticino. You deal directly with the founder.