Fishladder

AI Assist for Questionnaires

Each question in a Trust & Safety questionnaire has an AI Assist button that opens an inline chat. The AI helps you craft answers by analyzing the question, searching your compliance data, and drafting professional responses.

How It Works

  1. Click AI Assist on any question card
  2. The AI automatically retrieves live data from Drata — controls, policies, and personnel — and uses it directly in its response
  3. The AI drafts a specific, ready-to-submit answer referencing your actual compliance posture
  4. Click Use as answer to apply the draft (marked as "Needs Review")
  5. Edit and approve the answer when ready

Data Sources

The AI automatically draws from multiple sources without requiring manual prompting:

  • Drata — Compliance controls, active policies (with descriptions), and personnel/ownership data (requires Drata connection)
  • Previous questionnaires — Approved answers from past questionnaires for similar questions
  • Google Drive — Documents in your connected compliance folder (configurable in Settings)
  • Industry standards — SOC 2, ISO 27001, GDPR best practices

Bulk Auto-Complete

Click Run AI Auto-Complete at the top of a questionnaire to open a dropdown with three options:

  • Answer pending questions — AI drafts answers for all unanswered questions only
  • Re-review entire questionnaire — AI re-processes all questions that haven't been approved, updating existing suggestions with the latest Drata data
  • Re-review with context... — Opens a dialog where you can describe recent changes to your security posture (e.g. "We now have SOC 2 Type II certification and MFA is enforced via Okta"). The AI re-reviews all non-approved questions using this as authoritative context.

All AI-generated answers are marked "Needs Review" and require manual approval before they can be considered complete.

Configuration

Go to Trust & Safety → Settings to configure AI features:

  • Enable AI features — Master toggle for all AI functionality
  • Give AI access to Drata — Let AI search your compliance controls (requires Drata connection)
  • Give AI access to Google Drive — Let AI review documents from a selected Drive folder