Get the AI questionnaire

GET/v1/trust/questionnaire

Get the AI questionnaire.

About 40 questions buyers commonly ask an AI vendor in a security review, grouped by category, each with its answer. Where the records can answer, the answer is generated when you read it, from the organization-wide reports for the trailing 90 days and the organization's settings, so it is never stale. Your own written answer replaces the generated one; questions with neither are NEEDS_ANSWER and carry guidance on what a good answer covers.

Requires an organization owner or admin and the Trust Pack controls in the plan. Errors: 402 when the plan does not include them; 403 for a caller who is not an organization owner or admin.

Authorization

AuthorizationBearer va_
A platform API key (va_...), created under Settings > API keys. Scoped to an organization or one workspace, with an admin or member role. Used by the management API.

Query parameters

organizationstringrequired
the organization slug

Responses

200application/json

organizationstring
The organization slug.
entitledboolean
Whether the organization's plan includes the questionnaire (always true here: without it the request is refused with a 402).
generated_atstring<date-time>
When the answers were generated (ISO 8601 date-time).
start_timestring<date-time>
Start of the window the generated answers read (ISO 8601 date-time).
end_timestring<date-time>
End of the window the generated answers read (ISO 8601 date-time).
dataobject[]
The questions in questionnaire order, each with its answer.
Child attributes
- idstring
  The question's id (for example log-retention), used to write an answer.
- categorystring
  The question's category: AI providers and sub-processors, Data handling, Safety controls, Governance, or Security, audit and evidence.
- questionstring
  The question text.
- statusenum<string>
  Where the answer comes from. GENERATED: built from the organization's records and settings when the questionnaire was read. ANSWERED: written by the organization (it replaces any generated answer). NEEDS_ANSWER: no generated answer, the organization has to answer it.
  One of "GENERATED", "ANSWERED", "NEEDS_ANSWER"
- answerstring
  The answer to send: the organization's own, else the generated one; null when it needs an answer.
- generated_answerstring
  What the records say, even when the organization wrote its own.
- guidancestring
  What a good answer covers, for questions only the organization can answer.
- updated_bystring
  Who wrote the organization's answer: the user id, or api-key:{key id} for a platform API key; absent unless ANSWERED.
- updated_atstring<date-time>
  When the organization's answer was written (ISO 8601 date-time); absent unless ANSWERED.

VectorAxis is built by GK Labs, a member of NVIDIA Inception.