Vendor Due Diligence
A pre-filled VDD covering the questions your procurement, security and legal teams are going to ask. We filled it in so you don't have to chase us for answers.
What this is
A downloadable PDF containing Aicura's responses to a standard set of vendor due diligence questions. The questions cover security controls, data handling, compliance, business continuity, incident response, sub-processor management and operational practices. The answers are current as of the date on the document.
Where the questions came from
The question set is derived from the same structured risk and governance content that Aicura uses internally. It covers the areas that Australian procurement teams, security reviewers and legal counsel typically ask about when evaluating a SaaS vendor. We chose to publish the answers proactively rather than wait for individual requests.
What it covers
- Company and product overview
- Data handling and residency. Where customer data is stored, the cross-border flows for billing and email, retention and deletion
- Security controls. Encryption, authentication, access controls and multi-tenant isolation
- Sub-processors. Who they are, what they see and where they're hosted
- AI-specific controls. Model training policy, human oversight and output boundaries
- Compliance and certifications. Current state and trajectory
- Incident response. How we handle security incidents and data breaches
- Business continuity. Backup, recovery and availability
Why we publish this
Vendor due diligence is a gate in every enterprise procurement process, and it takes time on both sides. Your team writes the questions, we write the answers and someone chases someone for the missing bits. Publishing a pre-filled VDD removes most of that back-and-forth. If your organisation has a custom questionnaire that goes beyond what the VDD covers, send it to [email protected] and we'll fill it in.
Keeping it current
The VDD is updated when our infrastructure, sub-processors or security controls change materially. The document includes a version date. If you're evaluating Aicura and the VDD is more than six months old, email us and we'll confirm whether anything has changed.
Get started with Aicura.
Sign up and start the work. From your first session, you can catalogue your AI systems, run your privacy policy through Aicura's guidance and put your first risk assessments in place.