How to Submit a Vendor Security Assessment or Questionnaire

Last updated: August 11, 2026

Available on: Web (Wispr Trust Center)

Need Wispr to complete a vendor security assessment, security questionnaire, or third-party risk review? All submissions go through the Wispr Trust Center, where you request access and sign the NDA that is required before we share any security documentation.

How to submit your questionnaire

  1. Go to the Wispr Trust Center.

  2. Click Request Access and enter your work email.

  3. Sign the NDA when prompted, it is built into the access flow, with no separate paperwork.

  4. Click Submit a Questionnaire in the top-right.

  5. Upload your file, or paste your portal or assessment link. Our security team follows up once your completed assessment is ready.

While you are in the Trust Center

Once access is granted, review our security documentation directly. It often answers questionnaire items without a manual response:

  • SOC 2 Type I report (A-LIGN, April 2026)

  • Data Processing Agreement (DPA), including the EU Standard Contractual Clauses, UK Addendum, and Annex 3 technical and organizational measures

  • ISO 27001:2022 Statement of Applicability

Note: Wispr's current SOC 2 report is Type I. A SOC 2 Type II observation period is underway, and that report will be published to the Trust Center once issued.

FAQs

Can I email my questionnaire instead?

Submit it through the Trust Center. That keeps the NDA, your documentation access, and your assessment in one place, the fastest path to a completed response.

Do I have to sign an NDA?

Yes, and it is built into the Trust Center access flow.

Who can request access?

Anyone with a work email can submit a request. Our security team reviews each request before granting access.

Can you complete our assessment in our own vendor portal?

Yes. Paste your portal or assessment link in the Submit a Questionnaire step and our security team will work from there.

Can I get a Transfer Impact Assessment (TIA)?

Under the Standard Contractual Clauses framework, the data controller, which is your organization, completes the TIA. Wispr provides supporting materials through the Trust Center: the DPA with the EU SCCs and Annex 3 technical and organizational measures, the SOC 2 Type I report, and factual detail on our security controls and data minimization.

Still need help?

Email security@wispr.ai with your organization name and the assessment you are working through if:

  • You cannot access the Trust Center

  • Your assessment covers something not addressed in our documentation