# QuestionnairePro — Release Notes

## Version 1.0.0
**Released: March 2026**

### What's New
QuestionnairePro is a desktop security questionnaire management tool. Respond to incoming questionnaires, assess vendor security posture, build trust centers, and manage compliance — all from your local machine. No cloud. No subscription for the basics. Your data stays yours.

### Modules
- **Answer Library** — 474 pre-built security questionnaire answers across 19 categories with three maturity tiers (Early Stage, Established, Mature). Add, edit, and manage custom answers.
- **Import Questionnaire** — Upload CSV, XLSX, or DOCX questionnaires. Auto-detect columns, fuzzy-match questions to the library with synonym expansion, generate AI-powered answers, and export completed questionnaires as professional XLSX or CSV.
- **Create Questionnaire** — Build branded questionnaires from library questions, templates, or custom questions. Export as professional 3-sheet XLSX with cover page and summary, or use your own template.
- **Assessments** — 22 built-in vendor and internal assessment templates. Score responses 1–3 with notes. Create custom assessment templates.
- **Gap Assessment** — Standard (40 questions) or Comprehensive (80 questions) self-assessment. Yes/Partial/No scoring with category breakdown and readiness percentage.
- **Analyse Vendor Response** — Upload completed vendor questionnaires for automated keyword scoring, red flag detection, and risk rating. AI deep analysis for weak responses.
- **Compliance Mapping** — View coverage across NIST CSF 2.0, ISO 27001, and SOC 2 frameworks based on gap assessment answers.
- **Trust Center Builder** — 6-step wizard to build a branded, standalone HTML trust center page. 22 frameworks, 20 security domains, 21 policies, 30 common questions. Export and host on your website.
- **Activity History** — Track all questionnaire activity with per-user audit logging and outcome notes.
- **Company Profile** — Store company details that flow into AI responses, exports, and Trust Center.

### Answer Library Categories (19)
Security Program & Governance, Access Control & Identity, Data Protection & Privacy, Network & Infrastructure Security, Incident Response & Business Continuity, Vendor & Third-Party Risk, Application Security, Cloud Security, Endpoint & Device Security, Security Awareness & Training, Physical Security, Compliance & Audit, AI/ML Security, Privacy & Data Protection (Regulatory), Secure Development Lifecycle, Mobile Security, IoT/OT Security, M&A Due Diligence, Cryptography & Key Management.

### Security
- AES-256-GCM encrypted database (application-level encryption)
- Argon2id password hashing (m=64 MiB, t=3, p=1)
- Multi-user support with admin and viewer roles
- Active Directory and Microsoft Entra ID authentication
- Session timeout with configurable duration
- Brute-force login protection (5 attempts, 15-minute lockout)
- OS keychain integration (Windows Credential Manager / macOS Keychain)
- All IPC commands protected by session guards
- Ed25519 licence validation

### AI Integration
- 10 supported providers: OpenAI, Anthropic, Google, Azure, Mistral, Groq, Perplexity, DeepSeek, Ollama, Custom
- Bring Your Own Key — API keys stored locally in OS keychain, calls go directly to provider
- AI-powered answer generation, refinement, and vendor response analysis

### Licensing
- **Community (free)** — Answer Library (view and search), standard gap assessment, questionnaire import with basic matching
- **Professional ($299/year)** — Full access: AI integration, fuzzy matching, XLSX export, vendor analysis, Trust Center, comprehensive gap assessment, compliance mapping, custom answers, multi-user, AD/Entra auth, branded exports
- Activation-based expiry: 365 days from first activation
- In-app renewal notifications at 30 and 7 days before expiry
- Expired licences downgrade gracefully to Community (data preserved)

### Export Formats
- Professional XLSX (3-sheet: cover page with company branding, formatted questionnaire, assessment summary)
- CSV (machine-readable, re-importable)
- HTML (Trust Center export — standalone, no external dependencies)
- JSON (full data backup/restore)

### System Requirements
- Windows 10/11 (x64)
- macOS 12+ (Intel and Apple Silicon)
- 100 MB disk space
- Internet connection required only for AI features

### Known Limitations
- macOS build available but not production-tested
- DOCX import extracts tables only (no free-form text parsing)
- Drag-and-drop uses Tauri native file drop events (requires window focus)

---

*Ridgeline Cyber Defence — ridgelinecyber.com*
