Getting vendors to actually answer questionnaires

The slowest part of most assessment cycles is not scoring; it is waiting. Weeks of it, punctuated by increasingly awkward reminder emails. The instinct is to chase harder. The better move is to accept that response rates are a design problem, not a chasing problem, and that the fixes are mostly about friction.

Remove every reason not to start

Vendors abandon questionnaires that require an account, a license or a login they have to request. Every gate you put between the recipient and the first question costs you responses.

• Send a secure link that opens straight to the first question. No account, no fee, no software on the vendor's side.
• Let them save and return. Security questionnaires get answered between other jobs; a form that loses progress gets abandoned.
• Let the right person pick it up. The first recipient is rarely the person who knows the answers. Make handing it to a colleague trivial.

Ask only what changes a decision

A 300-question form signals that you value completeness over the vendor's time, and it gets treated accordingly: rushed, delegated downward, or ignored. Tier the questionnaire to criticality, so a low-risk vendor answers a short set and a critical one answers the full depth. Shorter forms come back faster and more honestly.

• Pre-fill anything you already know from public sources or the prior cycle, and ask the vendor to confirm rather than retype.
• Group questions so evidence attaches once, not per line. One SOC 2 report should satisfy every question it covers.
• Make the deadline and the reason explicit up front. "We need this by the 20th to complete your onboarding" outperforms a bare date.

Automate the routine, keep the human for exceptions

Routine reminders should fire on a schedule without anyone remembering to send them. Reserve your team's attention for the vendors who are genuinely stuck or pushing back, where a real conversation moves things and a fifth automated email does not. The goal is not zero chasing; it is chasing only where a human adds something.

The takeaway

Response rate is a function of friction and length. Cut both, automate the reminders, and the chasing mostly takes care of itself. If your response rates are low, the fix is almost never a sterner email template; it is a shorter form behind fewer gates.