complair.
Evidence library

One evidence library for every buyer answer, AI system, document, and CRA record.

Store approved answers, policies, vendor docs, system records, controls, subprocessors, SBOMs, and review notes once. Reuse them across buyer questionnaires, generated drafts, trust-center pages, AI governance, and CRA readiness.

Why evidence matters

Answers are only as good as the evidence behind them.

Buyer questionnaires, AI governance drafts, CRA records, and trust-center claims all depend on the same underlying proof: policies, vendor reviews, system records, assessments, screenshots, subprocessors, SBOMs, and approval notes. Complair keeps that proof reusable, reviewed, and mapped to every place it is used.

Approved answers

Store reusable responses with owner approval, confidence, and review dates.

Source evidence

Attach policies, vendor documents, screenshots, contracts, assessments, reports, and system records.

Dependency mapping

See which buyer answers, AI systems, generated drafts, controls, and trust-center claims depend on each evidence item.

Review control

Track stale, expired, low-confidence, or unapproved evidence before it reaches a buyer.

Dependency example

See what changes when evidence expires.

A single evidence item can support many answers, drafts, records, and trust-center claims. Review one source once, then see every dependent place that needs attention.

Evidence item

OpenAI Vendor Review

Approved · Last reviewed 2 May 2026 · Review due 2 Aug 2026

Used by
5 buyer answers
1 AI system
2 controls
1 DPIA draft
1 trust-center claim

When this evidence changes or expires, Complair shows every answer, document, system, and trust-center claim that needs review.

Evidence reuse

Map evidence once. Reuse it everywhere.

Evidence

Buyer questionnaire answers

Evidence

AI systems

Evidence

Controls and obligations

Evidence

DPIA / Annex IV / policy drafts

Evidence

Trust-center summaries

Evidence

CRA records and vulnerability workflows

Auto-suggest

Suggested answers from approved evidence — never AI-only.

For each buyer question, Complair ranks up to five suggestions from your approved evidence library — text match, vendor match, prior-use history, and recency. Owners accept or override; nothing is sent unreviewed.

Ranking signals
  • +4 Vendor match — same subprocessor / system referenced
  • +3 Text match — buyer question overlaps prior answer
  • +2 History — used and approved on previous buyer requests
  • tie-break Recency — newer evidence wins on ties

Already-mapped or archived evidence is skipped. Suggestions log accept / create signals for audit.

Sample buyer question
Do you maintain a vulnerability disclosure process?
Suggestions
Vulnerability Disclosure Policy v2.1
Text match Used 3x
Use
CRA Trust-Center Tab — VDP section
History
Use
Security overview deck — page 4
Text match
Use
Review control

Built for review, not blind automation.

Complair helps teams understand what is safe to send, what needs review, and which claims have no approved proof attached.

Owner
Confidence
Source file or URL
Status
Last reviewed date
Next review date
Approved by
Used in
Missing-proof flags
Reusable proof

Turn scattered proof into reusable evidence.

Start with one buyer request, map the answers to evidence, and keep the proof reusable for future questionnaires, AI governance, CRA readiness, and trust-center pages.