4 FOUR TOOLS, ONE TEAM WITHOUT A COMPLIANCE DEPARTMENT

The practical toolkit for teams still building the paperwork.

IQBaseline is a small suite of tools for the everyday work that piles up before you have a compliance program: security questionnaires, standardized resumes and job specs, consistent tech notes, and contracts nobody has time to read line by line.

Q12 · Data & Encryption
Customer data is encrypted at rest and in transit via Salesforce Shield and TLS on all traffic.
Verified
J.07 · Network Management
No dedicated IDS/IPS in place. Evaluating Cloudflare Zero Trust or a managed firewall.
Needs review
P.04 · Business Continuity
Data backed up weekly via Salesforce's built-in backup and recovery.
Inferred
4
tools,
one shared workflow
19
real control domains in VendorIQ,
HSBC TPSQ-aligned
0
invented facts
— ever
S THE SUITE

Five tools. Pick the one you need today.

Each one stands alone — use whichever fits the work in front of you. Sign in to open any of them.

V VENDORIQ · SECURITY QUESTIONNAIRES

A closer look at VendorIQ

L DOMAIN L · ENCRYPTION

Answers grounded in what's actually true

Every draft answer comes only from your own security profile — never invented. If something isn't documented, IQBaseline says so and stamps it "Needs review" instead of guessing at a certification you don't have.

A human always reviews and approves before anything goes out. Nothing ships on autopilot.

L.02 · Data-at-Rest Encryption
Does your organisation encrypt non-public data at rest?
We store customer data in Salesforce, which encrypts data at rest by default (Salesforce Shield). We don't manage our own encryption keys.
Verified
P YOUR PROFILE · 19 DOMAINS

A knowledge base built like a bank expects

Fill in your profile once, across the same 19 control domains real institutional questionnaires use — from Access Control to Business Continuity to Third Party Management. Plain-language help and example answers mean non-technical staff can actually do this themselves.

A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
U UPLOAD · XLSX / PDF

Drop in the questionnaire, get a head start

Paste questions in, or upload the vendor's file directly. IQBaseline extracts the actual control questions — even detecting a "Control Question" column in structured bank formats — so you're reviewing a draft, not starting from a blank page.

TPSQ_DM.xlsx — 90 questions detected
Drafting answers 62 of 90…
J DOMAIN J · NETWORK MANAGEMENT

Know what to fix, not just what to say

When your profile reveals a real gap — no IDS/IPS, unencrypted data in a specific tool — IQBaseline names it, ranks it by severity, and suggests actual products to close it. A starting checklist for a human to verify, not a substitute for an audit.

Network Security
No dedicated IDS/IPS deployed on the network.
Fortinet FortiGateCloudflare Zero Trust
W WHO IT'S FOR

Built for teams without a back office yet

Not for companies with a dedicated compliance, recruiting, or legal team already in place — for everyone doing that work on the side.

SW

Small SaaS vendors

Landing your first enterprise or bank customer, and the security questionnaire arrived before your compliance program did.

RC

Recruiters & agencies

Standardizing candidate resumes and client job specs by hand, one inconsistent format at a time.

OP

Ops & founders

Wearing the compliance, HR, and legal hats along with five other hats — and needing a straight answer without hiring a consultant first.

Whichever pile of paperwork is due first, start there.

Five tools, one login. Build your profile once, use it every time after.

See the four tools