ControlQuayBook a walkthrough CONTROLQUAY / SECURITY & COMPLIANCE
Controls, evidence, policies and reviews.
One place to manage the work behind every answer.
Private walkthroughs · Customer deployment subject to validation
Who owns it?
What supports it?
When was it reviewed?
ControlQuay / Acme SoftwareEXAMPLE WORKSPACEEVIDENCE OVERVIEW
| Control | Owner | Evidence status |
|---|---|---|
| Source-code access review | Engineering | Reviewed |
| Incident response policy | Operations | Needs review |
| Backup verification | Engineering | Missing |
New evidence starts a new review. Earlier decisions stay with the record they describe.
Compliance operations
Security reviews
Evidence management
01 / THE PROBLEM
A customer asks how access is reviewed. You have a policy, a spreadsheet and an approval somewhere in a chat. The hard part is connecting them.
ControlQuay connects requirements to their owners, supporting evidence and review history. Your team can see the outstanding work and follow the decisions already made.
02 / HOW IT WORKS
Explore a fictional example of the workflows implemented in our development version.
Define the requirement, assign a team member and set a due date. Record why a control applies—or why it doesn’t.
Changes to the control create a new revision and call for fresh supporting evidence.
Keep source details, observation dates and evidence versions together. Preview supported CSV and JSON imports before confirming them.
Expired evidence is marked stale. A new upload needs its own review.
An authorised reviewer records a decision and rationale against the specific evidence version. Export the record with its history and unresolved items.
A review is a team decision—not an independent audit or certification.
Draft, compare and approve versions. Record acknowledgments against the exact policy each member read.
03 / PLATFORM COVERAGE
Workflows implemented in the development platform. We will demonstrate the relevant capabilities and confirm deployment requirements with you.
Assign ownership, retain evidence versions and record review decisions with their supporting context.
Manage policy approvals, employee acknowledgments, training records and access reviews.
Track assessments, risk acceptance and remediation work alongside your compliance program.
Prepare questionnaire responses, organise audit evidence and manage approved trust documents.
Draft questionnaire answers with source references for a person to review. Live provider validation is still pending.
Import records and evaluate the GitHub connector, provisioning and enterprise sign-in workflows. Live integration validation is still pending.
04 / QUESTIONS
Small B2B software teams that need to organise security requirements, evidence and policy decisions—particularly when customer security reviews expose gaps in ownership or documentation.
ControlQuay is in development. You can discuss your requirements and request a walkthrough. Customer access depends on the supported scope, deployment and validation; we are not offering instant production access.
The development platform includes imports, a GitHub connector and scheduled jobs. Live provider validation is still pending. We will confirm the exact systems and permissions supported for your evaluation; we do not claim universal integration coverage.
AI-assisted questionnaire drafting has been implemented with source references and human review. Live API validation is still pending. AI output is a draft, not an audit opinion or a compliance approval.
Pricing has not been finalised. We will define the supported scope, hosting needs and price before any paid evaluation. Requesting a conversation creates no purchase commitment.
The link opens an email to our team. Tell us which systems you use and what evidence work is difficult. We will discuss fit, demonstrate the available workflows and identify any gaps before proposing next steps.
START A CONVERSATION
Tell us what your customers are asking for and which systems you use. We’ll walk through the relevant workflows and discuss fit.
Book a walkthrough [email protected]An initial conversation. No purchase commitment.