Al app builders: How are you handling security questionnaires when selling your product?
Hey
I'm working on some Al-powered apps (chatbots and agents) and keep hearing about the friction when trying to close enterprise deals. Specifically, the long security questionnaires that come up during procurement.
Things like questions around prompt injection risks, how data is handled with LLMs, agent permissions and oversight, potential runaway actions, compliance with EU AI Act / NIST / etc.
Curious from those who've been through it:
How painful has this been for you when selling to bigger customers? Any deals delayed or lost because of it?
What parts of the questionnaire are the hardest (AI-specific sections, evidence requests, etc.)?
How do you currently handle answering them..manual effort, templates, external help, or something else?
What tools or processes have you tried, and what still sucks about them?
Would love real experiences, especially from solo/small teams. No fluff rutal honesty welcome. Trying to better
understand the landscape.
Thanks!