VOL IV · Nº 207FRIDAY · MAY 15 · 20261 FLAG OPEN

· RFPs· Questions· Library· Reviewers· AuditActing as · Nina Vega

RFP · Sterling Financial

RFP-1900 — Sterling Financial vendor consolidation

Submitted 3 weeks ago; client decision arriving — sales rep records win/loss (SCN-004).

Open packet →Export security CSV

Status

Submitted

Manager Marcus Sterling

Questions approved

38 / 38

All approved

Due

Apr 1, 2026

overdue 144 days

Account

Sterling Financial

Sterling Financial vendor consolidation

AI drafting + library reuse

On import, the proposal manager clicked "AI draft answers". 32 of 42 questions matched library entries verbatim or with minor edits; 10 were assigned to human authors. Each AI draft emits an ai_draft_created audit row.

Drafted

From library

Human authored

Reviewer chain

SE → security → legal → exec

Questions (38)

Grouped by category. Click a code to open the question detail.

Security · 11 questions

Q-1900-S01How is customer data encrypted at rest?Approved
Q-1900-S02Describe your incident response process.Approved
Q-1900-S03Are you SOC 2 Type II certified?Approved
Q-1900-S04Do you support SAML SSO?Approved
Q-1900-S05What is your penetration testing cadence?Approved
Q-1900-S06How is MFA enforced for admin actions?Approved
Q-1900-S07How are administrative actions logged?Approved
Q-1900-S08What is your network segmentation model?Approved
Q-1900-S09Describe your vulnerability disclosure process.Approved
Q-1900-S10How are customer encryption keys rotated?Approved
Q-1900-S11Do you support customer-managed keys?Approved

Technical · 13 questions

Q-1900-T12Do you support custom fields?Approved
Q-1900-T13Describe your audit/event stream.Approved
Q-1900-T14Do you support Slack notifications?Approved
Q-1900-T15Describe your deployment architecture.Approved
Q-1900-T16Do you offer multi-region failover?Approved
Q-1900-T17What is your published uptime SLA?Approved
Q-1900-T18Do you have a public API?Approved
Q-1900-T19What webhooks are supported?Approved
Q-1900-T20Do you support Salesforce integration?Approved
Q-1900-T21What is your data residency story?Approved
Q-1900-T22Describe your API rate limits.Approved
Q-1900-T23How do you handle large attachments?Approved
Q-1900-T24Do you have a sandbox environment?Approved

Pricing · 5 questions

Q-1900-P25How is your pricing structured?Approved
Q-1900-P26Are there volume discounts available?Approved
Q-1900-P27What is included in the Enterprise tier?Approved
Q-1900-P28Are price increases capped at renewal?Approved
Q-1900-P29Do you accept purchase orders?Approved

Compliance · 9 questions

Q-1900-C30Are you CCPA compliant?Approved
Q-1900-C31Are you GDPR compliant?Approved
Q-1900-C32Where is customer data stored?Approved
Q-1900-C33Do you support EU data residency?Approved
Q-1900-C34Are you HIPAA compliant?Approved
Q-1900-C35What is your data retention policy?Approved
Q-1900-C36How are sub-processors managed?Approved
Q-1900-C37Do you have a current SOC 2 report?Approved
Q-1900-C38How do you handle data subject requests?Approved

Acting as Nina Vega · VP salesswitch role →