Built a cheaper alternative to Vanta for answering vendor security questionnaires, curious if this is actually needed at small company size.

So I've spent the last few weeks building this thing called PolicyIQ. Basically you upload your company's security policies (pdf or word docs) and then upload a vendor security questionnaire someone sent you, and it reads through your policies and drafts answers for every question. It marks each one as answered, needs review, or policy gap, and it won't just make something up if it can't find good enough matching info in your docs, it'll actually say policy gap instead of faking an answer. It also catches when two of your own policy docs contradict each other, which happened in my testing (one doc said something was approved, another said the same thing was prohibited) and it flags that instead of just picking one silently. You approve everything before it goes out and there's an audit log, then you export to excel when you're done. I built this because Vanta and Drata and similar tools start around 10-40k a year which is just not realistic for a small team, but small teams still have to deal with these same annoying questionnaires. I'm charging 99 to 249 a month instead. What I actually don't know is whether a company with like 10-50 people even gets enough of these questionnaires to bother paying for something like this, or if it's rare enough that just doing it by hand is fine. If anyone here has dealt with this at a small company I'd genuinely like to know when it started feeling like a real problem for you. screenshot below is one of the actual answers it gave, showing it flagging a policy gap instead of guessing.