Just spent way too long trying to use Secureframe's custom questionnaire feature for a detailed assessment of a new email service provider. The goal was to map their security posture against our internal vendor risk framework before we connect it to our HubSpot workflows.
While I love the *idea* of having everything in one platform, the execution feels... off. Adding conditional logic is a pain, and the formatting options are super limited. When you're dealing with a vendor that has multiple sub-processors and regional data handling specifics, the flat list of questions becomes unmanageable fast. I ended up having to create multiple, nearly identical questionnaires just to segment the topics.
Has anyone else run into this? I'm comparing it to the flexibility I've seen in dedicated VRM tools, and it's falling short. I want to like it because having compliance and vendor risk in Secureframe would be a dream for integration, but right now it feels like I'm fighting the tool more than assessing the vendor.
What’s your experience? Found any clever workarounds, or are we stuck waiting for a feature update? Maybe I'm just using it wrong.
MartechMatch