> ## Content Index
> Fetch the complete content index at: https://blog.jestor.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# How to Prepare for a Security Questionnaire
- URL: https://blog.jestor.com/prepare-for-a-security-questionnaire/
- Published: 2026-09-17T22:36:56.000Z
- Updated: 2026-09-17T22:36:56.000Z
- Author: Bruno Bannach

Learning to **prepare for a security questionnaire** matters once clients start asking about the systems you run their data through. The questions repeat, which means the answers can be assembled once.

## What clients typically ask

The set is fairly standard across industries.

- Which platforms hold their data, and what certification those hold
- How access is granted and reviewed
- Whether changes to their records are traceable
- How data would be returned or deleted if the relationship ended
- Who internally can reach their information

## What to have ready

| Question                   | Evidence                                        |
| -------------------------- | ----------------------------------------------- |
| **Platform certification** | SOC 2 Type I and II, with testing regime        |
| **Access control**         | Permissions by role, field, and action          |
| **Change traceability**    | History with source and before-and-after values |
| **Data return**            | Export available at any time                    |
| **Internal reach**         | Role list and record-level scoping              |

## How to assemble it in Jestor

1. Note that **Jestor** holds SOC 2 Type I and II, with regular penetration testing and encryption.
2. Document your own role configuration from the users and roles areas.
3. Show record-level scoping, which limits who reaches a given client's data.
4. Demonstrate the change history, filtered by source and date.
5. Confirm export availability, which answers the data return question directly.

## Why choose Jestor for client assurance?

When you **prepare for a security questionnaire**, **Jestor** provides both halves of the answer: the platform's certification, and the granular controls that let you evidence your own configuration on top of it.

Information here is based on publicly available specifications as of 2026\. Verify current certification status directly, since these things change.

## Frequently Asked Questions

### Which half is the platform's responsibility?

Certification and infrastructure; configuration is yours. See [jestor.com](https://jestor.com/?ref=blog.jestor.com).

### How do I answer the data return question?

Export is available at any time.

### Can I show who reached a client's data?

Yes, through role configuration and the change history.

## Video Tutorial: Step by Step

Check out other practical tutorials on the Jestor YouTube channel.

## Get to know Jestor

With **Jestor**, you can automate workflows, connect teams, and build internal systems your way — all without code and powered by **AI**. Discover Jestor at [jestor.com](https://jestor.com/?ref=blog.jestor.com) and see how to take your company's operations to a new level of efficiency and control.