The deal hits security review — answer InfoSec from your claims.
When the questionnaire lands and the deal stalls at the InfoSec gate, answer it from governed claims, source evidence, and current control language — so the posture you attest in the review matches the posture in your deck and trust page.
Security packet
Canopy Route · governed control answers
0/3
Governed
Data is encrypted in transit and at rest under a documented key-rotation policy.
Access is enforced with SSO and role-based least-privilege across all systems.
Sub-processors are inventoried and reviewed on a documented annual cadence.
Answer the questionnaire from approved control language.
Security answers stay attached to their approved source and current reviewer state before they are reused, so the review moves on facts, not scrambled email threads.
Control language
Reusable answers for recurring security questions.
Reusable control languageEvidence freshness
Expired or stale proof stays visible.
Stale evidence flaggedConsistent posture
The review, the deck, and the trust page agree.
Latest approved postureBlock risky answers before they ship.
Stale evidence, unsupported control claims, and sensitive statements route for review before export — gaps are flagged for an owner, never guessed.
- Security language stays attached to approved sources and current reviewer state.
- Nothing gets reused until its evidence is confirmed fresh.
Canopy Route/SEC-118 · access control
Security review · before export
Guaranteed 99.98% network uptime across all lanes, backed by SLA credits.
Answer on file cites a figure the latest evidence no longer supports — the current report shows 99.95% trailing-twelve-month uptime.
Stale evidenceSource is older than the control window · can't be exportedRouted for reviewHeld out of the packet until the owner confirms current evidence
RT
Routing to reviewerAssigned to Raj TandonRaj Tandon
Head of Security · reviewer
Say the same thing everywhere.
Security, legal, and procurement work from one evidence-backed library, so the questionnaire, the deck, and the trust page can't contradict each other.
- Stale proof and unsupported control claims route for review before export.
- The buyer link stays closed until every security answer is signed off.
SecurityWaitingSigned
LegalWaitingSigned
ProcurementWaitingSigned
Awaiting sign-offCompliant packet ready
One evidence-backed artifact, reviewed by every function before it reaches the buyer.Security, legal, and procurement can work from the same signed-off packet.
CRSecurity packet · Canopy RouteEvidence-backed · one shared artifact
Security, legal, and procurement work from one evidence-backed packet — the buyer always receives the latest approved posture, never a stale answer.