First, thank you so much for this! I hate these things.
However answering these questions without nuance and context can at best cause a lot more back and forth between company and vendor, and at worse kill the deal immediately. Example:
Bad way, no context: Do you have external certification for HIPPA/PCI compliance: No.
Better way: Do you have external certification for HIPPA/PCI compliance: No, because product does not collect, store, or process health data or payment card data.
How do you handle cases like this in an automated fashion?
However answering these questions without nuance and context can at best cause a lot more back and forth between company and vendor, and at worse kill the deal immediately. Example:
Bad way, no context: Do you have external certification for HIPPA/PCI compliance: No.
Better way: Do you have external certification for HIPPA/PCI compliance: No, because product does not collect, store, or process health data or payment card data.
How do you handle cases like this in an automated fashion?