VOL IV · Nº 207FRIDAY · MAY 15 · 20261 FLAG OPEN

· RFPs· Questions· Library· Reviewers· AuditActing as · Nina Vega

RFP · Harborside Pharmaceuticals

RFP-1890 — Harborside Pharma vendor platform

Lost — competitor offered embedded SDK at lower price point. ESG questions challenged us.

Open packet →Export security CSV

Status

Lost

Manager Marcus Sterling

Questions approved

36 / 36

All approved

Due

Apr 6, 2026

overdue 139 days

Account

Harborside Pharmaceuticals

Harborside Pharma vendor platform

AI drafting + library reuse

On import, the proposal manager clicked "AI draft answers". 32 of 42 questions matched library entries verbatim or with minor edits; 10 were assigned to human authors. Each AI draft emits an ai_draft_created audit row.

Drafted

From library

Human authored

Reviewer chain

SE → security → legal → exec

Questions (36)

Grouped by category. Click a code to open the question detail.

Security · 11 questions

Q-1890-S01How is customer data encrypted at rest?Approved
Q-1890-S02Describe your incident response process.Approved
Q-1890-S03Are you SOC 2 Type II certified?Approved
Q-1890-S04Do you support SAML SSO?Approved
Q-1890-S05What is your penetration testing cadence?Approved
Q-1890-S06How is MFA enforced for admin actions?Approved
Q-1890-S07How are administrative actions logged?Approved
Q-1890-S08What is your network segmentation model?Approved
Q-1890-S09Describe your vulnerability disclosure process.Approved
Q-1890-S10How are customer encryption keys rotated?Approved
Q-1890-S11Do you support customer-managed keys?Approved

Technical · 12 questions

Q-1890-T12Do you support custom fields?Approved
Q-1890-T13Describe your audit/event stream.Approved
Q-1890-T14Do you support Slack notifications?Approved
Q-1890-T15Describe your deployment architecture.Approved
Q-1890-T16Do you offer multi-region failover?Approved
Q-1890-T17What is your published uptime SLA?Approved
Q-1890-T18Do you have a public API?Approved
Q-1890-T19What webhooks are supported?Approved
Q-1890-T20Do you support Salesforce integration?Approved
Q-1890-T21What is your data residency story?Approved
Q-1890-T22Describe your API rate limits.Approved
Q-1890-T23How do you handle large attachments?Approved

Pricing · 5 questions

Q-1890-P24What is included in support pricing?Approved
Q-1890-P25How is your pricing structured?Approved
Q-1890-P26Are there volume discounts available?Approved
Q-1890-P27What is included in the Enterprise tier?Approved
Q-1890-P28Are price increases capped at renewal?Approved

Compliance · 8 questions

Q-1890-C29Schrems II — Standard Contractual Clauses in place?Approved
Q-1890-C30Are you CCPA compliant?Approved
Q-1890-C31Are you GDPR compliant?Approved
Q-1890-C32Where is customer data stored?Approved
Q-1890-C33Do you support EU data residency?Approved
Q-1890-C34Are you HIPAA compliant?Approved
Q-1890-C35What is your data retention policy?Approved
Q-1890-C36How are sub-processors managed?Approved

Acting as Nina Vega · VP salesswitch role →