{
  "about": "Every source this site cites or ships, with its URL, its licence where it has one, and when it was read. Prices are quoted verbatim from the page named, on the date given.",
  "retrieved": "2026-10-09",
  "prices": [
    {
      "what": "12 to 18 hours for a 200-question security questionnaire",
      "who": "Wolfia (a vendor of questionnaire software), blog",
      "url": "https://www.wolfia.com/blog/how-long-complete-200-question-security-questionnaire",
      "read": "2026-10-09"
    },
    {
      "what": "Conveyor Free plan: \"$0\", \"10 credits/month\", \"No access to Questionnaire Automation\"; Enterprise plan: \"Custom\"",
      "who": "Conveyor pricing page",
      "url": "https://www.conveyor.com/pricing",
      "read": "2026-10-09"
    },
    {
      "what": "\"Business tier starting at $9,600 per year\" (Conveyor, as reported)",
      "who": "Gaspard de Lacroix, Skypher (a competing vendor), July 2026",
      "url": "https://skypher.co/post/conveyor-reviews-pricing-alternatives",
      "read": "2026-10-09"
    },
    {
      "what": "Tiers marked \"$\", \"$$\" and \"$$$\", beside \"Book a Demo\"",
      "who": "SecurityPal home page",
      "url": "https://www.securitypalhq.com/",
      "read": "2026-10-09"
    },
    {
      "what": "SIG Corporate License \"$7,000 / 1 Year\"",
      "who": "Shared Assessments",
      "url": "https://sharedassessments.org/sig/",
      "read": "2026-10-09"
    }
  ],
  "frameworks": [
    {
      "name": "CAIQ, Consensus Assessments Initiative Questionnaire",
      "owner": "Cloud Security Alliance",
      "url": "https://cloudsecurityalliance.org/research/topics/caiq"
    },
    {
      "name": "HECVAT, Higher Education Community Vendor Assessment Toolkit",
      "owner": "EDUCAUSE",
      "url": "https://library.educause.edu/resources/2020/4/higher-education-community-vendor-assessment-toolkit"
    },
    {
      "name": "SIG, Standardized Information Gathering questionnaire",
      "owner": "Shared Assessments (licensed product)",
      "url": "https://sharedassessments.org/sig/"
    },
    {
      "name": "VSA questionnaire",
      "owner": "Vendor Security Alliance",
      "url": "https://www.vendorsecurityalliance.org/"
    }
  ],
  "fixtures": [
    {
      "file": "sample/caiq-shaped.csv",
      "what": "A CSV with CAIQ-shaped IDs and headers and 24 questions of this site's own writing. No CSA text is copied.",
      "licence": "MIT, this repository"
    },
    {
      "file": "test/fixtures/hecvat-lite-shaped.xlsx",
      "what": "A workbook copying the sheet and header layout of EDUCAUSE's HECVAT Lite, with 29 questions of this site's own writing. EDUCAUSE's download answered 403 and the IU ScholarWorks mirror answered 500 and 502 on 2026-10-09, so the real file could not be fetched without a form; no EDUCAUSE text is copied.",
      "licence": "MIT, this repository"
    },
    {
      "file": "test/fixtures/table.docx, two-sheets.xlsx, three.zip, packing-list.csv",
      "what": "Made for the tests by scripts/make-fixtures.py, through LibreOffice for the Office files.",
      "licence": "MIT, this repository"
    }
  ],
  "fonts": [
    {
      "name": "Archivo",
      "by": "Omnibus-Type",
      "licence": "SIL Open Font License 1.1",
      "via": "@fontsource-variable/archivo"
    },
    {
      "name": "Courier Prime",
      "by": "Alan Dague-Greene for Quote-Unquote Apps",
      "licence": "SIL Open Font License 1.1",
      "via": "@fontsource/courier-prime"
    }
  ]
}