Everybody has the list. It sits on a dozen pages including one of ours, and the questions barely differ between them. What differs is what a firm accepts as an answer, and that’s where the exercise is won or lost. You already do that work for a living, on the other side of the desk.
- A vendor’s answer is a representation by an interested party. You’d corroborate a balance before you signed it off, whatever the client told you.
- A non-answer substitutes rather than evades. The substitution is nearly always in the scope rather than the tone.
- A conditioned answer beats a flat one. The condition is usually the operative part, and checking it against your own facts is the job.
- Where the answer lives decides what it’s worth. The contract you accepted may already have voided the email you were sent.
An answer is a representation
In your own work you separate what you were told from what you corroborated. You weight each one accordingly. A representation is worth something. It’s a starting point. It’s something you can hold a person to, and it’s the thing you go looking for evidence about. The discipline is in keeping the two apart.
A vendor questionnaire is that same exercise, run outward instead of inward. Firms handle it with far less care than they’d handle a client. Twelve questions go out. Twelve answers come back. The answers go in a folder, and the folder now looks like diligence. Every line in it is still uncorroborated. What you’re holding is a set of assertions by the party with the commercial interest in your decision, collected in the week you were most inclined to like them.
That argues for grading rather than suspicion. Suspicion is the wrong instrument, and it makes you no better at this. Four things to read off every answer you get back.
- What its scope is.
- What has to be true for it to hold.
- Which document it lives in.
- Whether you can test it yourself.
Those four take longer than writing the original list. They’re the part that turns a folder into a file.
So the order of work runs backwards from how it feels. Composing the questions is an afternoon, and then it’s finished. Reading the answers is the week afterwards. That’s what the rest of this page is about.
The scope is where the substitution happens
A non-answer usually sounds complete. It arrives promptly, and it answers a question sitting next to the one you asked. Five shapes cover most of what comes back.
A narrower verb. You asked about training and got a sentence about selling. “We do not sell your data” is true, checkable, and about a different act entirely. Write down the verb you asked about before you read the reply. Then read the reply for that verb only.
A different noun. This is the one peculiar to AI products, and the one firms miss. The system holds more than your mail, and the rest of it came from your mail too. Anything that ranks and summarizes makes derived material: summaries, extracted tasks, search indexes, and the numeric representations that let a search work by meaning rather than by spelling. A promise made about “your email” can stop short of all of it. The derived material is what the product actually runs on. The shape you want is the one Point’s own list takes. It itemizes them beside the content they came from, so what the software made from your mail is disclosed along with the mail (subprocessors, effective July 7, 2026, checked August 19, 2026). Ask the noun question in as many words: does this cover what you generate from my mail as well as my mail.
A sentence with nobody in it. “Data is encrypted.” By whom, in which state, and how far that reaches. A sentence needs an actor before you can check it. Put the actor back, and usually that’s enough.
A certificate standing in for a control. A security audit report tells you an auditor tested a described set of controls over a stated period, and what the exceptions were. That’s real evidence about a described set. The open question is whether the processing your mailbox will go through sits inside the description. You read scope paragraphs professionally. Read that one, and keep your specific questions rather than retiring them because a report arrived.
A tense that stops at today. “We do not currently.” “We have no plans to.” Both are honest. Both are answers about this morning. Your engagement runs a year, and the retention runs longer.
All five are honest, which is why a reader hunting for dishonesty finds nothing and files the lot. You’re looking for the gap between the scope of the question and the scope of the answer.
The condition is the answer
Here’s the part where a practitioner’s instinct beats a buyer’s. It runs against the way a purchase feels.
A conditioned answer looks weaker than a flat one, and it’s almost always the stronger of the two. A flat answer usually means the person with a duty to keep it is still to read it. Conditions appear when somebody who’ll be held to a sentence has gone through it. That makes the conditions the part worth your afternoon.
Two live examples, from documents you can go and read rather than from a hypothetical. On deletion, Point’s data processing addendum says Point will “delete or return Customer Personal Data within 60 days at Customer’s choice if supported by the Services and specified in the Agreement; otherwise Point may delete it”. Backups “may be retained until overwritten” (terms, Schedule 1, checked August 19, 2026). The number is the least interesting thing in that sentence. Three questions sit underneath it. Whether return is supported as well as deletion. Whether your agreement specifies it. What your exposure is while backups turn over. Those three have answers of your own, and the sixty days leaves all three open.
On who else handles the mail, the same document says Point may add, remove or replace subprocessors. Point will give notice and an opportunity to object “where required by Applicable Data Protection Law”. That condition is the entire clause. A practice inside the UK or the EU has a law that fires it. A US practice with US clients should establish which law it’s relying on before treating that as a notice commitment. The commitment runs to the law rather than to you. Two firms reading the identical sentence get different answers.
Both of those are how a competent contract gets written. A supplier whose answers carry no conditions at all has either skipped the edges or isn’t the party who’d be held to them. What matters is that “yes” and “yes, if” are different answers. Only the second one tells you what to do next.
Where the answer lives
The same sentence is worth different amounts depending on where it sits, and the ladder is short. A salesperson’s reply. A help page. A published policy. The terms you accepted. A document signed with your name on it.
Two ordinary clauses collapse the bottom of that ladder. They sit in nearly every software contract as a matter of course. An entire agreement clause says the contract supersedes prior discussions, and the questionnaire that reassured your firm is a prior discussion. And where regulated material is concerned the terms say it outright. Only the separate executed document creates the commitment. Sales material, a security questionnaire, a privacy policy statement, a support response and a product feature all sit outside it (terms, section 1.5, checked August 19, 2026). The reply that settled it for you in July sits outside the agreement you accepted in August.
That’s architecture rather than a trap. Knowing it makes your list a far better instrument, because it changes the question you put. You stop asking whether an answer is true, which a supplier will always say yes to. You start asking where they’ll put it. For a firm inside the Safeguards Rule this goes past prudence, since the rule has its own view about safeguards belonging in the contract rather than on a page, and what that requires of the choosing itself is an argument of its own.
Which produces the follow-up that does more work than anything on the original list. Will you put that in the order form. Willingness to move a sentence up one rung is itself the answer, and asking is free. A supplier who will write down what they already believe to be true tends to say yes within the day. A long explanation of why documenting it is impossible has answered your original question more completely than the original answer did. The order these documents have to exist in is a separate piece of work, along with why the client’s own permission needs a home outside your engagement letter.
The ones you can test instead of asking
An answer you can verify yourself belongs in a different class. It costs a trial period rather than a lawyer. Four are worth doing in the first two weeks.
Ask for your data back. Every product says yes when you ask whether export exists, so do it instead. Time it, and open what arrives. The distance between “export is supported” and a file a human can read is where the real answer lives. A trial is the cheapest moment you’ll get to find out.
Take a seat away. Remove someone, and confirm what they can still reach and for how long. That’s the one control operating at the grain your own standard is written at. What it means inside a firm belongs with the confidentiality question.
Raise a support ticket about a real thread. Who at the vendor can read your mail is the question everybody forgets. Support behavior answers it more honestly than a policy paragraph. Watch what the reply turns out to know.
Look for a version and a date on the subprocessor list. A dated list is a falsifiable statement, and you can compare it with the copy you kept. An undated page is a mood. That’s the difference between noticing a change and waiting to be told about one. Model and infrastructure providers can be swapped under a service while it looks the same from the outside.
An answer you can’t test still counts. It has a ceiling on the weight you can put on it. The honest move is to record it as a representation, rather than promote it in your own mind because it was delivered with confidence.
Asking again
What the exercise produces is a document. That document is what an insurer, an examiner or a client will eventually ask you for. Four columns against each answer: the date, who gave it, which rung it sits on, and whether you tested it or accepted it. That’s the difference between having done the work and remembering that you did.
Then the re-ask. These answers expire at different rates, and some of them expire quietly. Terms in this category typically take effect when they’re posted. Providers underneath a service can change while the product looks the same. So the trigger is an event rather than a date on the calendar, and three events cover it.
The renewal, which you already keep, and which is where a periodic assessment of your suppliers lands anyway. A change notice of any kind, where the thing to read is what changed rather than the summary of what changed. And any decision to let the software do more than it did last month. That’s the trigger nobody writes down, and it’s the one that matters most. A set of answers that was adequate for software reading your mail stops covering you once it’s drafting and sending. What actually sets your exposure is which of those you have allowed.
Where does Point fit?
Point is an AI email client, so every question on your list can be put to it. The useful thing to say here is where each kind of answer lives, rather than how good it is.
- The documents this page tells you to read are published rather than described. Subprocessors names the companies and what each one processes, and it carries a version and an effective date. The terms hold the training position, the deletion window with its conditions, and the regulated-data carve-out. Read those two before any security page.
- The training answer is scoped rather than sweeping, which is the shape worth wanting. Point will not use your content to train generalized third-party models unless you authorize it. Separately, Point may process your content to provide, secure, support and improve the service for you. Two sentences, because those are two different things. A single sweeping one would have covered less.
- The noun problem is answered in the list instead of left to inference. Indexes, embeddings, summaries and outputs are itemized beside content, so the material Point makes from your mail is disclosed along with your mail.
- If your mailbox carries return information, the standard service does not reach it. Tax return information is named among the excluded categories, and only a separate written supplement changes that. Ask for it before you connect rather than after your staff have grown fond of the product.
- What Point did is written down in plain language, and most of it can be turned down or reversed. A delivered message is the exception, because by then it’s sitting on somebody else’s server. That log is the one answer on this page you get to test every working day.
- How far Point goes is a dial, held separately for each kind of work, from suggest only, through preparing something and waiting on you, to handling it. Review is where every kind starts. Where you have it set is the fact that decides which of your vendor answers still cover you.
Everything Point does is the full inventory, and Point for accountants puts the same ground in a practice’s language. The unhurried version of all of it is Point.
Common questions
The vendor answered every question. Is that enough?
It’s the beginning of the work rather than the end of it. What you’re holding is a set of representations by the party with an interest in your decision. Your own discipline says a representation gets corroborated wherever corroboration is available. Several of these answers are testable inside a trial, so test those. For the rest, establish which document each sentence lives in. A folder of confident replies is the version of diligence that looks finished.
They will not put it in writing. Is that a deal breaker?
It can go either way, so read the refusal as data rather than as friction. Asking whether a sentence can move up one rung, from an email to a policy to the order form, is free, and it tells you what the sentence was worth. A supplier who will document what they already believe to be true usually agrees quickly. A long account of why documenting it is impossible has told you something the original answer left out.
Is a security certification enough on its own?
It answers a real question, and a different one from yours. An audit report says an auditor tested a described set of controls over a stated period and reports the exceptions, which is genuine evidence about that described set. Whether the processing your mailbox goes through sits inside the description is a scope question, and you read scope paragraphs for a living. Ask for that section. Keep the specific questions rather than retiring them because a report arrived.
How often should we run this again?
Three events should set it off, rather than a date in the calendar. The renewal, any change notice, and any decision to let the software do more than it did before. The third is the one nobody writes down, and it’s the one that matters. Answers that were adequate while a tool only read your mail stop covering you the moment it’s composing and sending on your behalf.
We are a two-person firm. Is this proportionate?
The list scales down. What it produces should stay the same. An audit is out of reach for a small practice, and it’s beside the point anyway. Eight questions by email will do. Note the date and who answered. Test three of the answers during a trial. Record which document each one sits in. That’s an afternoon, it survives a change of software, and it’s more than most firms of any size can actually produce when asked.
The short version
- Everybody has the list, and the list is the cheap half. What separates diligence from a folder is what your firm accepts as an answer.
- A vendor’s answer is a representation by an interested party. Grade it the way you grade any other assertion: its scope, its conditions, where it lives, and whether you can test it.
- Non-answers substitute rather than evade. A narrower verb, a different noun, no actor in the sentence, a certificate standing in for a control, or a statement that stops at today.
- A conditioned answer is usually the stronger one, because conditions appear when somebody who’ll be held to the sentence has read it. Check each condition against your own facts.
- The same sentence is worth more one rung up the ladder. Ask whether they’ll move it, and read the refusal as carefully as you would have read the answer.
The general list, the duty that stays with you and who should leave a mailbox unconnected are in the client data guide. What an AI email client is defines the category. AI email for accountants covers which of the five kinds of product a firm is choosing between. What the profession’s own rule book already says about handing work to an outside supplier is in AI and the CPA Code.