What does Requirements Response Drafter need to run?

Requirements Response Drafter needs target document or its requirements and your evidence materials; framework or emphasis (optional) and length, tone or format limits (optional) are optional.

How often does Requirements Response Drafter run?

It runs when you ask, and you can put it on a daily, weekly or monthly schedule.

What does Requirements Response Drafter deliver?

Every run delivers a Word document, with every claim linked to its source.

Can I change what Requirements Response Drafter does?

Yes. Every GREP AI agent can be cloned into your workspace, where you can edit its instructions, add your own sources and files, and change its schedule.

Draft Response: Acme Corp Vendor Security Questionnaire

Mapped to SOC 2 Trust Services Criteria. Prepared 5 October 2026. Draft for your review and approval; not legal, compliance or audit advice.

Bottom line

48 items: 1 Met, 1 Partial, 46 Gap. The biggest risk is coverage: only items 1.1 and 1.2 were supplied, so 46 items have no draft. Of the two drafted, 1.2 is Partial because the evidence gives only the review frequency and tool.

Interpretation: the request gave the text of items 1.1 and 1.2 and the count (48) only. Items 3 to 48 are shown as open rather than guessed. The three evidence items were provided as titles and one-line descriptions, so the drafts rely on the product fact sheet line; none of InfoSec Policy v3.2 or the SOC 2 Type II summary text was available to quote. Answers are kept under 150 words in a plain tone.

Response table

Item #	Requirement (short)	Draft response	Evidence cited	Coverage	Assumptions or questions for reviewer
1.1	Encrypt customer data at rest?	Yes. Customer data is encrypted at rest using AES-256. [CC6.1]	Product fact sheet (AES-256 at rest; quarterly access reviews via Okta), version/date not provided.	Met	Confirm the AES-256 scope covers all customer-data stores, including backups and logs. Key management (CC6.1 "Protects Encryption Keys") is not described in the evidence provided, so the draft makes no key-management claim. Confirm the control is within the 2024 SOC 2 Type II scope before citing the report. Legal or attestation sign-off may be needed before sending.
1.2	Describe your access review process.	We review user access to our systems every quarter. The reviews are run through Okta, our identity provider, and cover whether each person's access is still appropriate. [CC6.2, CC6.3]	Product fact sheet (AES-256 at rest; quarterly access reviews via Okta), version/date not provided. InfoSec Policy v3.2 and SOC 2 Type II report summary (2024): contents not supplied in text, so not cited for specifics.	Partial	Evidence gives only frequency (quarterly) and tool (Okta). Reviewer, systems in scope, how removals are tracked and evidence retention are not stated. Add them from InfoSec Policy v3.2 (section reference needed). Assumption: "identity provider" description of Okta is common usage, not taken from the evidence; confirm. Assumption: "appropriate" tracks CC6.2 language on periodic review of access credentials.
Item 3 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 4 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 5 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 6 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 7 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 8 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 9 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 10 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 11 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 12 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 13 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 14 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 15 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 16 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 17 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 18 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 19 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 20 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 21 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 22 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 23 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 24 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 25 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 26 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 27 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 28 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 29 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 30 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 31 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 32 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 33 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 34 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 35 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 36 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 37 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 38 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 39 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 40 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 41 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 42 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 43 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 44 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 45 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 46 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 47 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.
Item 48 of 48	Open: item text not provided	Open. Awaiting full item text. No draft written, to avoid claims without a question to answer.	None yet	Gap	Issuer numbering for this item was not supplied. Position shown is sequential. Send the item text to draft it.

Coverage summary

Status	Items	Which
Met	1	1.1
Partial	1	1.2
Gap	46	Items 3 to 48 (text not provided)
Total	48

TSC criterion	Items mapped	Note
CC6.1 Logical access security	1.1	Points of focus include "Uses Encryption to Protect Data" and "Protects Encryption Keys".
CC6.2 Credential issuance and review	1.2	Point of focus: "Reviews Appropriateness of Access Credentials" on a periodic basis.
CC6.3 Authorize, modify, remove access	1.2	Role-based access, least privilege, segregation of duties.
Not yet mapped	3 to 48	Cannot map without item text.

Mapping basis: criterion wording below is from the AICPA 2017 Trust Services Criteria (copy that includes the March 2020 updates). The 2022 revised points of focus edition on the AICPA site is behind a free-account login and could not be opened, so wording of the points of focus should be rechecked against the 2022 edition.

CC6.1: "The entity implements logical access security software, infrastructure, and architectures over protected information assets to protect them from security events to meet the entity's objectives."

CC6.2 (extract): the entity registers and authorizes new users before issuing credentials; point of focus "Reviews Appropriateness of Access Credentials: The appropriateness of access credentials is reviewed on a periodic basis for unnecessary and inappropriate individuals with credentials."

CC6.3: "The entity authorizes, modifies, or removes access to data, software, functions, and other protected information assets based on roles, responsibilities, or the system design and changes, giving consideration to the concepts of least privilege and segregation of duties, to meet the entity's objectives."

Prioritized gap list

Priority	Item	Evidence to obtain
1	Items 3 to 48 (all Gap)	Full text of each questionnaire item, with Acme's numbering and any mandatory or pass/fail flags, so they can be ordered and drafted.
2	1.2 (Partial)	InfoSec Policy v3.2 access-review section (owner, scope, removal and sign-off steps); a sample Okta access-review record from the last quarter; confirmation of the review control in the 2024 SOC 2 Type II report summary.
3	1.1 (Met, confirm scope)	Encryption standard or architecture note naming data stores, backups and key management; the SOC 2 control reference for encryption at rest.
4	All items	Version and date of the product fact sheet; the SOC 2 report period dates and any exceptions noted.

Do next

Paste the remaining 46 items (full text, issuer numbering, any word limits) and rerun the draft.
Supply the sections of InfoSec Policy v3.2 and the SOC 2 Type II report summary (2024) as text, so answers can cite section numbers and not only the fact sheet.
Add reviewer, scope and removal steps to 1.2 from the policy, then regrade it.
Confirm encryption scope and key management for 1.1 with engineering.
Have security leadership and, if required, legal approve the answers before submission.

Coverage note

Items 3 to 48 were not provided. Policy v3.2 and the SOC 2 summary were named but their text was not supplied. The AICPA 2022 edition could not be opened (login required); the Deloitte DART copy also requires a subscription.

Sources

Your materials

InfoSec Policy v3.2 (text not supplied; date not provided)
SOC 2 Type II report summary, 2024 (text not supplied)
Product fact sheet: AES-256 at rest; quarterly access reviews via Okta (version/date not provided)

Public references (accessed 5 October 2026)

Requirements Response Drafter

Why this work is hard

What you get

What Requirements Response Drafter delivers

Bottom line

Response table

Coverage summary

Prioritized gap list

Do next

Coverage note

Sources

FAQ

More agents like this

Materials-to-Draft Writer

Account Prioritizer

Account Risk Watch

Audience & Customer Profile

Audit Readiness Checklist

Buyer Evidence Pack

Run Requirements Response Drafter in minutes.