Security questionnaires and DDQs
Which DDQ software handles investor due diligence questionnaires?
Short answer
4 tools document investor or asset-manager DDQ workflows: Inventive AI, Tribble, Thalamus AI and RequestFX. Fund teams should test with an ILPA-style or allocator DDQ they actually received, since generic vendor-risk DDQ support does not carry over automatically.
Tools that qualify, with the evidence
| Tool | Evidence | Source | Starting price |
|---|---|---|---|
| Inventive AI | Dedicated DDQ automation for investor (LP) and customer/vendor DDQs: parses multi-tab Word, PDF and Excel files and exports answers back into the original file. | inventive.aias of Oct 2026 | $10,000/yr |
| Tribble | Dedicated DDQ automation for asset managers and institutional investors: parses XLSX, DOCX or PDF DDQs, drafts from fund documents and prior DDQs with confidence scores and source links, routes to compliance reviewers and runs a consistency check before export. | tribble.aias of Oct 2026 | Custom |
| Thalamus AI | The DDQ page describes auto-fill across Excel, Word and investor portals from one approved library, multi-stakeholder approval workflows and staleness flags when an underlying fact changes. | thalamushq.aias of Oct 2026 | Custom |
| RequestFX | Preloaded templates for SIG, CAIQ, HECVAT and investor DDQs such as ILPA and AIMA | requestfx.comas of Oct 2026 | $299/mo |
Why this question matters
Investor DDQs ask fund managers about strategy, operations, compliance and performance. They share the questionnaire format with vendor-risk DDQs but draw on different documents and different reviewers.
Which one fits your situation
- If you also answer customer security reviews, start with Inventive AI.
What to test in a trial
- Use last year’s completed investor DDQ and this year’s blank version.
- Check that compliance review routing covers performance and regulatory statements.
Caveats
- Very few tools in this directory document investor DDQs specifically.
How we decided who qualifies
Only RFP, DDQ and questionnaire response tools with a published profile are checked. A tool is named here only when its record shows the rule above, either in a sourced research fact or in the reviewed profile, and we publish an answer only when at least three tools qualify. A tool missing from the table may still do this; it has not been documented in a way we could source. Read the research methodology for how facts are dated and corrected.
More questions on this topic
Is an investor DDQ the same as a vendor DDQ?
No. An investor DDQ assesses a fund manager for allocators. A vendor DDQ assesses a supplier for a customer.