Questionnaire Gap Review & Trust Center Q&A

Two ways to cut questionnaire load

Security questionnaires are repetitive. TATER reduces the effort on both ends:

• Gap-only review — when completing a questionnaire, see only the questions that still need attention, each paired with a suggested answer from your Knowledge Base. Knock out the gaps instead of re-reading the whole document.
• Trust Center self-serve Q&A — publish your best answers so prospects can ask security questions on your public Trust Center and get instant answers — deflecting whole questionnaires before they're ever sent.

Gap Review

Open a questionnaire (Reports & Policies → Questionnaires) and click 🔎 Gap Review in the header. TATER analyzes the questionnaire and shows just the gaps — any question that isn't complete or has no response — each with:

• A gap reason: unanswered, in-progress, no-kb-match, stale-kb-match, or low-confidence.
• The best Knowledge-Base suggestion for that question (when one exists), with its confidence, verification status, and cited controls.
• Apply suggestion (fills the response, marks the question in-progress) or Apply & complete (also marks it complete).

The header summary shows how many gaps remain and how many are auto-fillable — gaps with a confident, current KB match you can apply in one click. Build the KB by importing past questionnaires (via the MCP import_questionnaire_kb tool); the more history you load, the more gaps become auto-fillable.

Trust Center Self-Serve Q&A

On the Reports & Policies → Trust Center page, scroll to Self-Serve Q&A:

1. Search your Knowledge Base for answers you're comfortable making public.
2. Click Publish on each one. (Published answers show a green bar.)
3. Optionally, the public-facing answer can be a sanitized version of the detailed internal answer — set it when publishing via the MCP publish_kb_entry tool's public_answer parameter.

Once at least one answer is published and your Trust Center is published, the public Trust Center page (trust-center.html?orgId=…) shows an "Ask a Security Question" box. A prospect types a question; TATER searches only your published answers and returns the best match instantly. If there's no match, the box points them to your contact option.

See what prospects asked

Click Questions asked on the Self-Serve Q&A card to review every question prospects have submitted, flagged answered or no match. Unanswered questions are knowledge-base gaps — author or import answers for them, then publish, so the next prospect gets a hit.

For AI agents (MCP)

• list_questionnaire_gaps (read) — the gap queue with KB suggestions, for an agent to work a questionnaire down to zero gaps.
• publish_kb_entry (write, Admin) — publish/unpublish a KB answer to the Trust Center, optionally with a sanitized public answer.
• search_questionnaire_kb / verify_kb_entry / import_questionnaire_kb — the existing KB tools that feed both surfaces.

Reporting

Insights → Questionnaire Gap Analysis shows completion % and open-gap counts across all questionnaires, overdue flags, and how many KB answers are published to the public Trust Center.

Privacy & limits

• The public ask box only searches answers you explicitly published — nothing else from your KB is exposed.
• The public endpoint is rate-limited and never reveals whether an org exists when there's no match.
• Asked questions are logged for one year so you can close gaps; they're visible only to your org.