VSA Core, answered.
The 3 questions from VSA Core we have written up so far. Each one covers what it is really asking, which of your documents answers it, what to attach alongside, and the specific ways it gets answered badly.
Do you carry cyber liability insurance, and what is the coverage limit?
Not in your documentsThe question FillTrust most often leaves deliberately blank. No security document contains the answer, and guessing a coverage limit is a representation you cannot support.
Governance
Do you maintain a current SOC 2 Type II report?
Confirmed in your documentsIf you have one, the cover page answers this question. The mistakes are all in the details it also contains: the type, the criteria, and the dates.
Certifications and audits
Do you support single sign-on (SAML or OIDC)?
Answered “no” from your documentsA product question wearing a security costume, and the best example of a documented "no" being a better answer than a hedged yes.
Access control
Answer the whole VSA Core at once.
Upload the file you were sent. FillTrust drafts each answer from your own documents and shows the passage it came from.