Industries / Finance

Answer risk, security and procurement from one record.

The risk and compliance review decides the deal. Everything you said is on record, and the answers come from your own material.

01  Before it

The demo went well. The review is the deal. What risk asked, and what is still open.

What they asked in writing

The questions from email and earlier calls, in their words.

What you already sent

The report, the policy, the answer, with the thread it went in.

What is still open

What is waiting on you, and what is waiting on them.

02  In the room

Nobody signs alone. The sponsor, risk, security, procurement and legal.

Who wants it

The sponsor whose team will use it.

Who can stop it

Risk, security and procurement, and what each has asked.

Who you have not met

Named in the thread, never on a call.

03  After it

An audit trail you did not have to write. Decisions, owners and dates, in their words.

What was decided

In the words used on the call.

Who owes what

Named owners and the dates they gave.

What it means for the deal

Where the deal stands, with the lines that say so.

Harborline Bank / risk and compliance review
Fri, Sep 25 · 47m · 5 people
Where it stands
•  Risk is satisfied on data residency. InfoSec has not reviewed yet.
What they owe you
•  Martin sends the vendor risk questionnaire.
What you owe them
•  The data policy and the audit report.
Decided
•  Residency in their own region is a requirement, and you meet it.
Action items
Send the data policy and audit report
Alex Kim
Send the vendor risk questionnaire
Martin Cole
Book the InfoSec review
Alex Kim
Reads

What it reads, in finance

Your security and compliance answers
Audit and certification reports
Data residency and retention notes
Contract and procurement answers
Integration and migration docs
Pricing and commercial terms
Every past call with this buyer
Answers your team gave before
Download free
Questions

What reps ask before the risk review.

Is the call recorded?

Sunnyside takes notes on your calls. What it keeps, and for how long, is in our trust center.

Who can see the notes?

Your team, in your Sunnyside workspace, next to the deal.

Does the buyer get anything?

Only what you send them: the note when you share its link, and your own follow-up email.

Where does this material come from?

Your own documents and earlier calls. Each card names its source.

Bring the review the answers it already asked for.