Sending Security Questionnaires to Third-parties

Last updated: March 21, 2026

  • Questions already “Marked as reviewed” will be automatically omitted from the questionnaire when sent to the vendor, speeding up the process for them

  • once a response is received with a completed questionnaire, either:

    • upload the file to the Evidence section within your draft assessment

    • forward email correspondence from the vendor to your unique vendor inbox and the email content + attachments will automatically be added to the third-party in Mycroft

  • After adding this evidence the TPRM AI Agent will update it’s recommended Answers in your questionnaire for you to review