Blog · Published · Updated
AI agents for customer security questionnaires
Short answer
An AI agent for security questionnaires writes answers from approved procedures, shows the source beside each one and sends questions with no basis in the documents to the person responsible for security. It adds no statements the company has not confirmed. The agent costs from €3,000 net at Syntalith and, with 400 questionnaire questions a month at 12 minutes each, pays back in 1.5 months.
How we workDetails ↓
- 01Call30 minutes with an engineer, free
- 02PrototypeA working system on your process and data, free
- 03ImplementationTarget and fixed price in the contract; 50% at signing
- 04Acceptance50% once the agreed target is met
- net per agent for one process, build paid once
- from €3,000
- from signing the contract to acceptance
- 6–16 weeks
- free prototype on your cases
- €0
We belong to the OpenAI and Anthropic partner programmes and learn through their official courses. What this means ↓
Author: Syntalith · 3 min read
Statistics
Security and AI: statistics 2026
1.5 mo.
payback of a €3,000 agent with 400 questionnaire questions a month: €2,792 of work today, €853 with checking and the model. Scenario.
49%
According to the European Commission (2026), 49% of EU SMEs and mid-caps name legal uncertainty as a barrier to AI.
Source: European Commission, Flash Eurobarometer on AI and algorithmic management (2026) ↗
48.8%
According to Eurostat (2025), 48.8% of EU enterprises that considered AI and did not use it named concerns about data protection and privacy.
Source: Eurostat, Use of artificial intelligence in enterprises (2025) ↗
52.5%
According to Eurostat (2025), 52.5% of EU enterprises that considered AI and did not use it named a lack of clarity about the legal consequences.
Source: Eurostat, Use of artificial intelligence in enterprises (2025) ↗
90%
According to the European Commission (2026), 90% of companies that use AI say people take the decisions, and 2% of decisions are fully automated.
Source: European Commission, Flash Eurobarometer on AI and algorithmic management (2026) ↗
Figures checked: 22 October 2026
The customer also asks how fast access is removed
The customer asks how the company removes access for people who leave and how quickly. The approved procedure says that HR notifies IT, and IT records the removal of access in a ticket. The procedure sets no time for it.
The agent writes the part of the answer it has a basis for: „After HR informs the IT team, IT removes the employee's access and records the completion in a ticket”. Beside the draft, the salesperson sees a link to the procedure and a note that the question about timing still needs an answer. They send it straight to the person responsible for security. The agent does not add „immediately” or „within 24 hours”. A missing time in the procedure means the point has to be confirmed with the owner of the topic.
- Every answer has a source: a procedure, a policy or an earlier approved answer
- An old answer comes back only if the procedure has not changed
- A question without a basis goes to the owner of the topic as a specific question
- The customer gets an approved description, and the internal procedure stays in the company
What it costs and when it pays back
- Today
- 400 questionnaire questions × 12 min = 80 h (€2,792)
- With the system, a person checks the output in 30% of the time
- €838
- Model, 2 calls per case, Claude Sonnet 5.5
- €16
- Cost of one case
- €6.98 today, €2.13 with the system
- Saving
- €1,939 a month
Payback of €3,000
1.5 months
The volume, the time and the checking share are the scenario's assumptions. €34.90 an hour is the EU average hourly labour cost for 2025 according to Eurostat. Model: 8,000 input and 600 output tokens per call at Anthropic's rates, converted at the ECB rate of 1.1205 USD per euro on 22 October 2026.
The count covers the work around a case: searching, reading, writing and passing things on. What remains is the time to check the output, 30% of today's work in the scenario. Before the quote we measure both times on 20 to 100 cases the team has already handled, in a €0 test that takes 5 working days.
A library of earlier answers saves searching only when someone is responsible for keeping it current. After a procedure changes, the old description does not go to the next customer, however well it is worded.
Check a questionnaire tool before a custom agent
Vanta automates questionnaires from earlier answers and security materials, with roles for review, editing and approval, and the Vanta knowledge base has answer owners and verification dates. The available scope may require a higher plan. If a ready-made product handles your forms, rolling out its features and sorting out responsibilities is enough. A custom agent makes sense when the materials sit in several company tools and the work includes further clarifications with different people.
A few questionnaires a year
a library of approved answers with owners
no build
Regular questionnaires, materials in one place
a ready-made tool, for example Vanta
licence
Materials in several systems, clarifications with many people
an agent with a library and a queue of questions
from €3,000
Where to start
The first scope covers one team's questionnaires and materials with named owners. On a finished questionnaire we check how many answers the agent prepared with a source, how many questions went to an owner and how long approval took. We build this as part of AI agents. For the free process review, a description of one case from recent weeks and the tools it ran through is enough. You do not need to send confidential documents, and you get a written plan within 2 working days.
Worked example · Scenario
How we count the payback: answers from company documents
We run the same count for your questionnaires in the free process review.
€3,723
a month for finding answers to 800 questions in documents
Payback: 1 mo.
Our assumptions are 8 minutes to find an answer in documents or ask a colleague, and checking in 15% of the old time. €34.90 an hour is the EU average hourly labour cost for 2025 according to Eurostat, for companies with 10 or more employees. Model cost: Claude Sonnet 5.5, about 6,000 + 500 tokens per answer from documents, at the ECB rate of 1.1205 USD per euro on 22 October 2026.
See the full calculation →
