VOL IV · Nº 207FRIDAY · MAY 15 · 20261 FLAG OPEN

· RFPs· Questions· Library· Reviewers· AuditActing as · Nina Vega

RFP · Summit Biotech

RFP-1870 — Summit Biotech R&D workspace

Won — BAA + GDPR posture were decisive.

Open packet →Export security CSV

Status

Won

Manager Marcus Sterling

Questions approved

30 / 30

All approved

Due

Mar 27, 2026

overdue 149 days

Account

Summit Biotech

Summit Biotech R&D workspace

AI drafting + library reuse

On import, the proposal manager clicked "AI draft answers". 32 of 42 questions matched library entries verbatim or with minor edits; 10 were assigned to human authors. Each AI draft emits an ai_draft_created audit row.

Drafted

From library

Human authored

Reviewer chain

SE → security → legal → exec

Questions (30)

Grouped by category. Click a code to open the question detail.

Security · 9 questions

Q-1870-S01How is customer data encrypted at rest?Approved
Q-1870-S02Describe your incident response process.Approved
Q-1870-S03Are you SOC 2 Type II certified?Approved
Q-1870-S04Do you support SAML SSO?Approved
Q-1870-S05What is your penetration testing cadence?Approved
Q-1870-S06How is MFA enforced for admin actions?Approved
Q-1870-S07How are administrative actions logged?Approved
Q-1870-S08What is your network segmentation model?Approved
Q-1870-S09Describe your vulnerability disclosure process.Approved

Technical · 10 questions

Q-1870-T10Do you have a sandbox environment?Approved
Q-1870-T11What is your release cadence?Approved
Q-1870-T12Do you support custom fields?Approved
Q-1870-T13Describe your audit/event stream.Approved
Q-1870-T14Do you support Slack notifications?Approved
Q-1870-T15Describe your deployment architecture.Approved
Q-1870-T16Do you offer multi-region failover?Approved
Q-1870-T17What is your published uptime SLA?Approved
Q-1870-T18Do you have a public API?Approved
Q-1870-T19What webhooks are supported?Approved

Pricing · 4 questions

Q-1870-P20Are there volume discounts available?Approved
Q-1870-P21What is included in the Enterprise tier?Approved
Q-1870-P22Are price increases capped at renewal?Approved
Q-1870-P23Do you accept purchase orders?Approved

Compliance · 7 questions

Q-1870-C24Are you HIPAA compliant?Approved
Q-1870-C25What is your data retention policy?Approved
Q-1870-C26How are sub-processors managed?Approved
Q-1870-C27Do you have a current SOC 2 report?Approved
Q-1870-C28How do you handle data subject requests?Approved
Q-1870-C29Schrems II — Standard Contractual Clauses in place?Approved
Q-1870-C30Are you CCPA compliant?Approved

Acting as Nina Vega · VP salesswitch role →