How do I answer a customer's security questionnaire with Maditon?

Security and privacy questionnaires are how your customers do their own supplier due diligence, so answering them well is part of being a supplier. Maditon treats a questionnaire as a document to answer from a record, not a form to type into.

The record it draws on. Your compliance profile — the facts about your company you fill in once: hosting, encryption, incident handling, roles. Your supplier register — the sub-processors are derived from it, so that part of the answer stays true by itself. Your systems and services. And the answer library: every answer you approved on an earlier questionnaire, ready to be reused when the same question comes back in different words.

What a draft is. Each drafted answer shows where it came from — profile, register, library — so the reviewer can check it. A question the record cannot answer is marked needs input rather than answered with a guess. Documents you marked private are never used: the workspace tells you when a supplier or system you rely on has one, so you know to check that agreement by hand.

What leaves the building. Nothing until a named user has approved it. Approved answers are exported into the customer’s own file layout, and the export is kept so the last thing you sent can be downloaded again. Every draft is produced by Mistral on an EU endpoint; the questionnaire itself is your company’s material and never goes anywhere else.