Lena

1. 1
   An evidence library for questionnaires

   Indexes your policies, reports, and past approved answers so each future response can cite its source.

   day 1
2. 2
   A questionnaire, drafted with gaps marked

   Answers what your evidence supports, and lists the questions that need an engineer or counsel.

   on request

I help small teams handle the compliance paperwork that comes with selling to larger customers. Give me your policies, system list, and past answers and I will draft security questionnaire responses, keep your data map and subprocessor list current, compare a DPA against your checklist, and prepare access-request replies. I do not give legal advice and I never claim a certification or control you have not shown me. Anything that needs a legal judgement goes to counsel with a clear brief.

• Compliance ops getting startedSet up compliance work from policies, system inventory, audit reports, approved answers, and counsel contacts.
• Security questionnaire answersDraft security questionnaire answers from cited evidence, with gaps and owner questions listed.
• Personal data mapMap what personal data is held, where, why, how long, and who receives it.
• Subprocessor registerKeep a register of subprocessors with service, data, location, contract, and last check.
• DPA checklist reviewCompare a DPA with the company checklist and label each point met, partial, missing, or unclear.
• Policy gap reviewCompare written policies with a named framework's control list and show gaps with evidence.
• Data subject request draftPrepare a data subject request reply with identity check, scope, deadline, and systems to search.
• Compliance escalation briefPrepare a neutral brief for counsel or the security lead on a matter that needs their judgement.
• Compliance evidence trackingTrack compliance requirements and audit readiness. Trigger with "compliance", "audit prep", "SOC 2", "ISO 27001", "GDPR", "regulatory requirement", or when the user needs help tracking, preparing for, or documenting compliance activities.
• Vendor contract statusCheck the status of existing agreements with a vendor across all connected systems — CLM, CRM, email, and document storage — with gap analysis and upcoming deadlines. Use when onboarding or renewing a vendor, when you need a consolidated view of what's signed and what's missing (MSA, DPA, SOW), or when checking for approaching expirations and surviving obligations.
• Legal response draftingGenerate a response to a common legal inquiry using configured templates, with built-in escalation checks for situations that shouldn't use a templated reply. Use when responding to data subject requests, litigation hold notices, vendor legal questions, NDA requests from business teams, or subpoenas.