Request a demo CONTROLQUAY / SECURITY & COMPLIANCE
Bring questionnaire answers, supporting evidence and approvals together—so your team can see what is ready and what still needs work.
Early access · Guided demos available
Who owns it?
What supports it?
When was it reviewed?
ControlQuay / Acme SoftwareINTERACTIVE EXAMPLEEVIDENCE OVERVIEW
| Control | Owner | Evidence status |
|---|---|---|
| Source-code access review | Engineering | Reviewed |
| Operations | Needs review | |
| Backup verification | Engineering | Missing |
Select “Incident response policy” to explore a sample evidence decision.
Compliance operations
Security reviews
Evidence management
01 / THE PROBLEM
A customer asks how access is reviewed. You have a policy, a spreadsheet and an approval somewhere in a chat. The hard part is connecting them.
ControlQuay connects requirements to their owners, supporting evidence and review history. Your team can see the outstanding work and follow the decisions already made.
02 / HOW IT WORKS
Explore a fictional example of the workflows implemented in our development version.
Define the requirement, assign a team member and set a due date. Record why a control applies—or why it doesn’t.
Changes to the control create a new revision and call for fresh supporting evidence.
Keep source details, observation dates and evidence versions together. Preview supported CSV and JSON imports before confirming them.
Expired evidence is marked stale. A new upload needs its own review.
An authorised reviewer records a decision and rationale against the specific evidence version. Export the record with its history and unresolved items.
A review is a team decision—not an independent audit or certification.
Draft, compare and approve versions. Record acknowledgments against the exact policy each member read.
03 / PLATFORM COVERAGE
Workflows implemented in the development platform. We will demonstrate the relevant capabilities and confirm deployment requirements with you.
Assign ownership, retain evidence versions and record review decisions with their supporting context.
Manage policy approvals, employee acknowledgments, training records and access reviews.
Track assessments, risk acceptance and remediation work alongside your compliance program.
Prepare questionnaire responses, organise audit evidence and manage approved trust documents.
Explore source-linked questionnaire drafts with human review. AI availability will be confirmed for your evaluation.
Import records and collect supported GitHub evidence. Other integrations and enterprise access requirements are assessed before an evaluation.
04 / QUESTIONS
Small B2B software teams that need to organise security requirements, evidence and policy decisions—particularly when customer security reviews expose gaps in ownership or documentation.
ControlQuay is in development. You can discuss your requirements and request a walkthrough. Customer access depends on the supported scope, deployment and validation; we are not offering instant production access.
The development platform includes imports, scheduled jobs and a GitHub connector tested against a live private repository. Collection can be partial when permissions or provider features limit access. We confirm supported systems and permissions before your evaluation; other integrations are not universally available.
AI-assisted questionnaire drafting has been implemented with source references and human review. Live API validation is still pending. AI output is a draft, not an audit opinion or a compliance approval.
Pricing has not been finalised. We will define the supported scope, hosting needs and price before any paid evaluation. Requesting a conversation creates no purchase commitment.
The link opens an email to our team. Tell us which systems you use and what evidence work is difficult. We will discuss fit, demonstrate the available workflows and identify any gaps before proposing next steps.
START A CONVERSATION
Tell us your review deadline, the tools you use and where the work gets stuck. We’ll demonstrate the relevant workflows and agree what a scoped pilot would need to deliver.
Request a demo [email protected]An initial conversation. No purchase commitment.