Security questionnaires · SOC 2 · ISO 27001 · GDPR

Your customers ask for proof of security.
We produce it.

Before signing, an enterprise customer sends you a security questionnaire: hundreds of questions about your access controls, your data, your backups. Hadovia checks your systems directly, fills in the questionnaire for you and attaches evidence to every answer. You answer fast, without tying up your team, and the deal moves forward.

One question. One check. One proof.

app.hadovia.com/questionnaires/acme-corp
Security questionnaire
Acme Corp · 284 questions
261 / 284 answered
✓
Databases encrypted at rest?
Yes — 4 databases checked, all encrypted.
iac-report.json
✓
Storage buckets private?
Yes — public access blocked on all 7 buckets.
iac-report.json
✓
Audit logging enabled?
Yes — logging active in every region.
cloudtrail.json
!
Penetration test this year?
To address — goes into the action plan.
action plan
Illustrative example
Answers mapped to ✓ SOC 2✓ ISO 27001✓ GDPR✓ OWASP Top 10
The problem

The blocker isn’t technical. It’s commercial.

Your product is ready and so is your customer. What delays the signature is the time it takes you to prove your security.

30%
of data breaches involve a third party, twice as many as a year earlier. So your customers vet their vendors.
Verizon, 2025 Data Breach Investigations Report ↗
76%
of French businesses say customers, investors and suppliers increasingly look for proof of security and compliance.
Vanta, State of Trust, 500 leaders in France ↗
61%
of organisations say they spend more time proving security than improving it.
Vanta, State of Trust 2025, 3,500 respondents ↗
Before / after

The same questionnaire, two ways to answer it

Today, by hand
With Hadovia
Answers
✕Copied from an old questionnaire
✓Drawn from your real systems
Evidence
✕Hunted down one by one
✓Attached to every answer
Who does it
✕Your most senior engineers
✓Hadovia fills in, you review
Turnaround
✕Weeks
✓Minutes
Weak spots
✕Found by your customer
✓In an action plan, before you send

Answering faster isn’t enough.
You have to be able to prove it.

In 30 seconds

From questionnaire received to deal signed

Product tour

From questionnaire received to file sent, in six steps

What you do in Hadovia, and what Hadovia does for you. Click a step.

app.hadovia.com
New questionnaire
XLSX
Security-questionnaire_Banking-Group.xlsx284 questions detected
✓
Encryption38
Access management52
Backups and continuity27
Secure development61
Organisation and GDPR106
Illustrative screens, sample data.
The product

An app that proves. An expert who fixes.

The app answers questionnaires with verified evidence. For what still needs fixing, an expert takes over.

01 · The app Available

Your security questionnaires, filled in within minutes

Hadovia reads the questionnaire, finds the answer in your real systems, writes each response and attaches the evidence. You review, you send.

  • ✓Evidence attached to every answer
  • ✓Public trust page, reusable across customers
  • ✓SOC 2 · ISO 27001 · GDPR mapping
  • ✓Export ready to send
Weeks of work brought down to minutes.
trust.hadovia.com/acme-corp
Acme Corp — Trust center
public · continuously verified
✓
Data encryption
At rest and in transit.
✓
Private storage
No publicly exposed bucket.
✓
Backups
Daily, 30-day retention.
!
Penetration test
Scheduled.
SOC 2ISO 27001GDPR
02 · Hadovia expert support Available

What isn’t compliant becomes an action plan, taken care of

Every non-compliant item lands in a prioritised, costed action plan. A Hadovia expert handles it with your team, then the evidence is updated. Nothing is outsourced: we do the fixing.

  • ✓Web, API and cloud penetration testing
  • ✓SOC 2, ISO 27001 and GDPR readiness
  • ✓Security policy writing
  • ✓Architecture review and redesign
One point of contact, from finding to fix.
app.hadovia.com/plan/acme-corp
Action plan
Acme Corp · 23 items
prioritised · costed
✕
No penetration test in 14 months
Engagement: application test + report.
Priority 1
✕
3 unencrypted S3 buckets
Engagement: encryption + new evidence.
Priority 1
!
No incident response policy
Engagement: write the policy.
Priority 2
Hand over to an expert →
What we handle

Whatever file your customer asks for

The same evidence serves every file. In early access, our experts prepare each one with you, from the evidence the app has verified.

01

Custom questionnaire

Your customer’s spreadsheet or portal, from a few dozen to several hundred questions.

Excel · portal · PDF
02

CyberVadis assessment

Every answer must be backed by a document. We prepare the answers and the evidence behind them.

evidence per answer
03

Security assurance plan

The contractual document French tenders ask for, written from your evidence and real commitments.

PAS · tenders
04

Cyber-insurance questionnaire

Your insurer’s. Every measure you declare is backed by its evidence, so nothing is stated wrongly.

insurers · brokers

CyberVadis is a trademark of its owner. Hadovia is independent and not affiliated with it.

Our principle

Code decides. AI writes.

No “yes” comes from an AI that guesses. The verdict comes from a technical check; the writing only puts it into words.

Your systems · read-only
TerraformInfrastructure as code
AWSCloud
soon
GitHub ActionsPipelines
soon
TrivyImages and dependencies
soon
01The factcollected
02The verdictfixed rule
03The answerwritten, evidence attached
Acme Corp · 284 questionsexample
261 / 284 answered
261compliant, evidence attached
23in the action plan
What you get
Completed questionnaireready to send
Trust pagepublic, reusable
Action planprioritised, costed
Hadovia expert supportWhat happens to every non-compliant item
01Non-compliant item

Spotted before it reaches your customer, never hidden.

e.g. 3 unencrypted buckets
02Action plan

Cause, priority, effort and price of the fix.

a clear quote, no surprises
03A Hadovia expert fixes it

With your team: remediation, penetration test, policies.

the same contact from start to finish
04New check

The control runs again. The answer turns “compliant”.

new, dated evidence
01

You connect

Your infrastructure as code, then your cloud and repositories. Always read-only, revocable at any time.

02

We check

Every requirement is checked against your real systems: encryption, access, logs, backups, secrets.

03

We answer

The questionnaire is filled in, with evidence attached to every answer. Items to confirm are flagged, never made up.

04

You send

You review, export and publish your trust page. The rest goes into the action plan.

Free check

What your customers see of you, before the questionnaire even arrives

Enter your domain. We check 14 public points (HTTPS, headers, e-mail, DNS) and give you your priorities. Nothing is stored.

Passive checks only, on public information. No intrusion testing.

Upcoming solutions

Two solutions in the works

They already run internally to produce your answers. They will then open as solutions in their own right.

Soon

Security of your AI

Your assistants, agents and RAG put to the test: prompt injection, data leakage, tool abuse.

  • OWASP LLM Top 10
  • Agents
  • AI Act
Soon

Build pipeline security

Audit of your CI/CD and dependencies, from pull request to production.

  • GitHub Actions
  • Secrets
  • SBOM
The math

What your questionnaires cost you today

Enter your own numbers. The calculation runs in your browser; nothing is sent.

24working days per year
€15,600per year, just to answer
Growth plan, per year€5,900
Get my next questionnaire filled in →

Benchmarks: an enterprise questionnaire often takes 2 to 5 days; an experienced security consultant charges €600 to €800 a day.

Pricing

Clear pricing. Your first questionnaire free.

Send us the questionnaire you just received: we fill it in for free. You pay afterwards, if Hadovia saved you time.

Monthly or annual subscriptionNo commitmentFirst questionnaire free

Essential

To answer your first enterprise buyers fast.
From
€290 / month
  • ✓Unlimited questionnaires
  • ✓Automatic answers and evidence
  • ✓1 public trust page
  • ✓2 integrations
  • ✓PDF export
Get a demo
Most popular

Growth

For teams that receive questionnaires every month.
From
€590 / month
  • ✓Everything in Essential
  • ✓Up to 3 products
  • ✓All integrations
  • ✓History and automatic re-checks
  • ✓Prioritised action plan
  • ✓Priority support
Get a demo

Expert

An expert fixes what needs fixing, with your team.
 
Custom
  • ✓Penetration testing
  • ✓SOC 2 · ISO 27001 · GDPR readiness
  • ✓Security policies
  • ✓Architecture review
  • ✓Dedicated contact
Talk to an expert

Not sure which plan fits?

Tell us how many questionnaires you receive and from which customers. We recommend the right plan, with no commitment.

Get a recommendation →
FAQ

Questions we get asked

Who is Hadovia?

Hadovia is a French cybersecurity company. Our trade: application security, build pipeline security and compliance. We build the tool that delivers the proof, and we fix what needs fixing together with your team.

How is this different from a scanner?

A scanner produces a list of flaws for your engineering team. Hadovia produces what your customer needs in order to sign: a completed questionnaire, evidence for every answer and a trust page. The technical check is the means; the proof is the deliverable.

What exactly do you access?

The strict minimum, and always read-only: we can read a configuration, never change or delete it. You revoke access whenever you want.

Can the AI make up an answer?

No. The verdict for each question comes from a technical check and a fixed rule. AI only steps in afterwards, to write from facts already established. When nothing can be checked, the question is marked “to confirm” and you handle it yourself.

What happens when something isn’t compliant?

We don’t dress it up: the answer says so, and the item goes into a prioritised, costed action plan. You can handle it in-house or hand it to our expert.

How far along is the product?

Hadovia is in early access. We are opening the trial to a small number of teams and working with them on their real files: custom questionnaire, CyberVadis assessment, security assurance plan. Automatic checks cover infrastructure as code (Terraform) today; read-only AWS and CI/CD pipelines come next. The rest of the file is prepared with our experts.

Where is our data hosted?

In the European Union. We keep the evidence your answers need, nothing more, and you can ask for its deletion at any time.

What size of company is it for?

Software vendors selling to enterprises without a dedicated security team: far enough along to receive questionnaires, too small to spend three weeks on each.

Contact

Your next questionnaire, filled in with its evidence

Tell us what your customer is asking for. We get back to you within one business day with the next steps.

  1. 01You describe your need
  2. 02We call or write within one business day
  3. 03Your first questionnaire is filled in for free
Or write to us directly

First questionnaire free · no credit card · reply within one business day
Your details are only used to reply to you. See the privacy policy.