for your security questionnaire
The questions your buyer is asking about your agent.
Enterprise questionnaires now ask what an AI agent can reach and who authorised it. The report from an Agent Boundary Review maps every finding and every clean result onto those questions, so your team can answer from it directly.
01 the mapping
Where the report answers each question.
These are the questions Appendix B of every report is built around. Each row points to the report sections that hold the evidence for the answer.
| Typical question | Report |
|---|---|
| Access control | |
| Is access to systems and data restricted on a least-privilege basis? | §7§8 |
| Do automated processes run under their own scoped identity? | §6§7§8 |
| Logging and monitoring | |
| Are privileged and automated actions logged, and are the logs protected from modification? | §9 |
| Can you produce an audit trail for a specified action on a specified date? | §9 |
| Data handling | |
| What customer data can the automated system reach? | §6App. A |
| Are prompts and outputs retained, and for how long? | §9 |
| Secure development | |
| Is the product reviewed by an outside party, and how recently? | Cover |
| AI-specific | |
| What prevents the system from taking an action the user did not authorise? | §7§8 |
| What prevents untrusted content from redirecting the system's behaviour? | §7§8 |
| Is there human oversight of consequential actions? | §6§7§8 |
02 how answers are written
One stated configuration
Above the table, the report states the exact version and configuration every answer assumes. A different configuration can give a different answer to the same question.
Divergence marked where it is real
Only rows whose answer changes with configuration are marked, and each carries both answers inline. If most rows would diverge, that is reported once, as a headline finding.
An honest non-answer is allowed
When a question cannot be answered apart from how the product is deployed, the row says so and points to the section that explains why. It is never filled with a single answer that is true in only some deployments.
why this matters
Your sales engineer will copy these answers into a real response. An answer that holds in one configuration and not another becomes your misstatement to your buyer, so the report is written to prevent it.
03 what the report does not answer
Questions outside the review.
Some common questionnaire rows are not tested by the review, so the report does not claim to answer them. You will need another source for these.
| Is customer data used to train or fine-tune any model? | A vendor policy question. No check in the review tests training or fine-tuning practice. |
|---|---|
| Which subprocessors receive data through this feature? | A contractual question. The tool inventory records technical reach, which is not a subprocessor determination. |
| Is there a kill switch, and who can operate it? | An incident-response question. No check in the review tests it. |