VOL IV · Nº 207FRIDAY · MAY 15 · 20261 FLAG OPEN
The RFPRoom Quarterly
Pinegate Software · published by uStack
RFP · Meridian Retail Group

RFP-2090 — Meridian retail expansion phase 2

Follow-on to RFP-1850; reusing 70% of approved answers.

Status
Planning
Manager Marcus Sterling
Questions approved
10 / 18
8 still need approval
Due
Aug 9, 2026
overdue 14 days
Account
Meridian Retail Group
Meridian retail expansion phase 2
AI drafting + library reuse
On import, the proposal manager clicked "AI draft answers". 32 of 42 questions matched library entries verbatim or with minor edits; 10 were assigned to human authors. Each AI draft emits an ai_draft_created audit row.
Drafted
18
From library
18
Human authored
0
Reviewer chain
SE → security → legal → exec
Questions (18)
Grouped by category. Click a code to open the question detail.
Security · 6 questions
  • Q-2090-S01How is customer data encrypted at rest?Approved
  • Q-2090-S02Describe your incident response process.Approved
  • Q-2090-S03Are you SOC 2 Type II certified?Approved
  • Q-2090-S04Do you support SAML SSO?Approved
  • Q-2090-S05What is your penetration testing cadence?Approved
  • Q-2090-S06How is MFA enforced for admin actions?Approved
Technical · 6 questions
  • Q-2090-T07What is your data residency story?Approved
  • Q-2090-T08Describe your API rate limits.Approved
  • Q-2090-T09How do you handle large attachments?Approved
  • Q-2090-T10Do you have a sandbox environment?Approved
  • Q-2090-T11What is your release cadence?In Review
  • Q-2090-T12Do you support custom fields?In Review
Pricing · 2 questions
  • Q-2090-P13How is your pricing structured?In Review
  • Q-2090-P14Are there volume discounts available?In Review
Compliance · 4 questions
  • Q-2090-C15What is your data retention policy?In Review
  • Q-2090-C16How are sub-processors managed?In Review
  • Q-2090-C17Do you have a current SOC 2 report?In Review
  • Q-2090-C18How do you handle data subject requests?In Review
Acting as Nina Vega · VP salesswitch role →