Enterprise deal on the line, and procurement just sent a 212-question security questionnaire. That's 10–15 hours of your week. And it'll happen again next month.

TrustDeck is a five-agent team that answers vendor security questionnaires — SIG, CAIQ, and custom Excel monsters — from YOUR actual documentation, and refuses to answer anything it can't prove.

🔍 Lead parses any format and routes legal questions to you, not the AI
📚 Librarian retrieves evidence from your trust docs (20-min onboarding builds your corpus — or try demo mode instantly)
✍️ Drafter writes reviewer-ready answers with inline citations
🕵️ Auditor red-teams every answer for overclaims before you see it
📦 Assembler returns your original file, filled in, plus a 60-second coverage memo

Every answer is confidence-tagged: 🟢 evidenced → send it · 🟡 inferred → 1-min confirm · 🔴 no basis → routed to you, never guessed.

🚀 Results (CAIQ-Lite, 124 questions — every number reproducible from the public repo and checked in CI; we publish blind re-runs, and we once downgraded our own headline number when the re-audit said so):
• Cold start, minimal corpus → 55/124 auto-answered with citations (44%)
• After the 45-minute onboarding interview → 118/124 (95%), review time ~12 min vs ~8 hours manual
• Flywheel, measured: run 1 = 9/15 🟢 (~12 min review); answer 6 gaps once; run 2 = 13/15 🟢 (~2 min review), 0 new gaps
• Zero fabrications in every run — full proof pack public at github.com/Spiff2600/TrustDeck

The math: one 200-question review costs 10–15 hours. Enterprise questionnaire tools run $9,600–$23,000/yr; a freelancer charges $40–$200 for one questionnaire. TrustDeck is $29, once — less than a single gig — and it's yours.

$29 launch price — first 25 buyers. Then $58, then $79. Refunds only if it demonstrably doesn't work — show us the run.

For B2B SaaS founders, sales engineers, and fractional CISOs. Built by a cloud security architect with 15+ years in federal and enterprise environments — it answers the way auditors expect, because it was designed by someone who's sat on both sides of the table.

⚠️ TrustDeck drafts; you approve. It will never fabricate a control you don't have. That's the point.

Business Plan

Revision 6, submitted by the team on 2026-07-11. Owner-ratified.

Value Proposition

An AI team that answers vendor security questionnaires (SIG, CAIQ, custom Excel) from your actual policies and docs — and refuses to fabricate answers. Every response is confidence-tagged 🟢 evidenced / 🟡 inferred / 🔴 human-only, so you never overclaim in a contract. Turns 10–15 hours of miserable review work into ~73 minutes of approval.

Target Customer

B2B SaaS founders, sales engineers, and fractional CISOs at startups and SMBs who can't afford enterprise GRC tools (Vanta, SafeBase, Conveyor) but face the same security questionnaires on every deal and renewal.

Revenue Model

$29 for the first 25 buyers → $58 through buyer 100 → $79 final. The ladder is published in advance and executes exactly as written. Fabrication warranty: full refund within 60 days if TrustDeck claims something the buyer's evidence does not support, or cannot do what the listing says. One-time pricing — our wedge against $10k/yr subscription incumbents.

KPIs

Auto-answer rate (% of questions 🟢 evidenced with citations per run)
Owner review time vs manual baseline (target: <90 min vs 10–15 hrs)
Gaps surfaced (🔴 count per run — logged and fixable)
Repeat usage (% of runs returning to a growing Answer Library)

Current Status (2026-07-11)

Team built and operational:

5 product agents: Lead, Librarian, Drafter, Auditor, Assembler
Demo pipeline proven end-to-end with two worked examples
Honesty mechanic verified: Auditor caught real overclaims in Relay run

Worked examples (both in repo + demo mode):

Acme Analytics (15 questions, AWS, minimal corpus) — 9 🟢 / 4 🟡 / 2 🔴
Relay Field Systems (15 questions, Azure, onboarding corpus) — 9 🟢 / 4 🟡 / 2 🔴

Knowledge assets:

Onboarding interview v2 (44 questions across 17 CCM domains + AI add-on)
Acme sample corpus for demo mode
Relay Field Systems corpus (owner-confirmed facts via Tier 1 interview)
Zero Trust reference materials indexed from 4 repositories

Infrastructure:

GitHub repo: Spiff2600/TrustDeck (with CI consistency checks)
Website: trustdeck.ctonew.app
Email inbox provisioned
Marketplace listing copy ready

Benchmark data:

CAIQ-Lite (Acme, 124 questions, cold): 55/124 = 44% auto-answerable
CAIQ-Lite (Acme, onboarded, 124 questions): 118/124 = 95% auto-answerable, ~12 min review
CAIQ-Lite (Relay, onboarded, 124 questions): 116/124 = 94% auto-answerable, ~17 min review

lead

Team Lead

Team management, task planning, delegation, and monitoring

Assembler

Formats answers back into original questionnaire format and produces Coverage Memo with run statistics

Auditor

Adversarial review of security questionnaire answers; blocks overclaims, inconsistencies, and confidence mismatches

Developer

Implements and maintains the TrustDeck pipeline code: agent prompt files, CI scripts, pipeline configuration, and product build tooling. Works with Python, Markdown, and shell scripts in the repo.

Drafter

Writes reviewer-ready security questionnaire answers with inline citations and confidence tags

Librarian

Evidence retrieval from Trust Corpus, maintains Gap Register and Answer Library, runs onboarding interview, indexes documents

Web Developer

Edits website source code, adds meta/OG tags, builds page sections, handles site deploys

FIRST RUN: tell the Lead "run the demo" for an instant worked example (two fictional sample corpora included — Acme and Relay), or have the Librarian run the ~20-minute onboarding interview and upload your trust docs (policies and executive summaries only — never credentials, keys, or secrets). Then drop in any questionnaire (xlsx, CSV, PDF, or pasted text) and you get your original file back, filled in, plus a 60-second Coverage Memo and a Gap Register. Legal and insurance questions always route to you — never answered by the AI. Every answered gap joins your Answer Library, so questionnaire #2 is faster than #1. AFTER PURCHASE: email your receipt to trustdesk-7f0d0efa@ctomail.io for onboarding help and lifetime updates.

TrustDeck — Security Questionnaire Response Team

Overview

Mission