HANDS-ON EVALUATION · FICTIONAL DATA
Three short milestones in a real MatchAudit workspace, running an invented vendor-and-customer scenario. Upload a questionnaire and watch AI draft every answer, open the evidence behind each one, see a stale document become a tracked gap instead of a confident guess, and approve what AI flagged yourself.
Already approved? Return to your sandbox with your work email.
Requesting access takes about two minutes and is reviewed by a person. The sandbox is an evaluation on invented data — it is not a production workspace and must not be used for real customer information.
“Describe your incident response process and the notification timeline for security incidents affecting customer data.”
Confirmed security incidents affecting customer data are notified within 24 hours of confirmation.
Every company, person, document, date and result in the sandbox is invented. Nothing of yours is needed to start.
Each approved request is provisioned its own workspace, seeded separately and kept apart from every other organisation.
Explore freely, break things, start again. A reset returns the workspace to its exact starting state.
After 5 days, access ends and the sandbox workspace and its synthetic account are deleted.
WHAT YOU ACTUALLY DO
A guided evaluation under the top bar tells you what to do next, in the real workspace. You can also close it and explore on your own.
Drop a dummy questionnaire of your own, or use the sample. AI files it under the customer, lists its questions and drafts every answer from the fictional evidence library, with no further clicks. Add a dummy NDA too and see its dates read.
AI does the first passOpen a drafted answer and the document it cites, at the cited page. Then find the question whose only evidence is out of date: instead of a confident guess you get a tracked gap and a suggested request.
Traceable, and it refuses to guessSee which answers AI approved automatically and why, fix and approve one it flagged, then prepare the simulated submission that freezes exactly which answers and document versions were approved.
A clear approval state on every answerThree milestones in total. Each one is confirmed from what actually happened in the workspace, not from clicking “next”, and an answer AI approved on its own never counts as yours.
THE SCENARIO
The sandbox runs the same fictional scenario as MatchAudit’s public sample response pack, so what you work on hands-on and what you can show a colleague afterwards line up exactly.
All invented. No such vendor, bank or document exists.
Six domains, as a regulated customer would actually scope them.
Total in scope42 requirements
REQUEST ACCESS
Tell us who you are and what you want to evaluate. We review every request by hand — it keeps the sandbox small enough that the people in it get a working environment rather than a queue.
No email yet, or the form not working? Write to info@matchaudit.io and a person will pick it up.
A confirmation link lands in your inbox straight after you submit. Nothing moves until you click it.
A person checks it against what the sandbox is for. Approved or not, you hear back by email.
Your own seeded workspace, ready to use, with 5 days of access and a reset button.
BEFORE YOU ASK
No. The sandbox is a reviewed, time-boxed evaluation on fictional data, not a free tier of the product. Approved access runs for 5 days, and you can reset the workspace to its starting state at any point during that window. Subscribing is a separate, deliberate step — requesting sandbox access never starts a paid subscription and never asks for a card.
Yes, dummy or sample ones. Upload a dummy questionnaire, NDA or policy, or pick one of the fictional samples, to see the AI classify it, read it and draft answers. Do not upload real policies, questionnaires, credentials or customer information. Everything you upload is deleted when you reset the sandbox or when your access ends. If you have a live supplier assessment you want to see handled with your own evidence, talk to our team instead.
Access is granted to qualified business email addresses after a short manual review — we look at whether your company plausibly responds to supplier assessments from regulated customers. You confirm your email address first, then receive a single-use entry link once a reviewer approves the request. For later visits, use matchaudit.io/sandbox/login with the same approved work email to receive a fresh secure link during the five-day access period. The form itself takes about two minutes.
Each approved request gets its own separately provisioned workspace, seeded with the fictional scenario and kept apart from every other organisation in MatchAudit. When the 5-day grant expires, access is cut off and the sandbox workspace and its synthetic account are purged after a short grace period.
No. No bank, TPRM platform or customer portal is connected to the sandbox. The submission you create at the end of the guided evaluation is a sandbox-only snapshot — it demonstrates what a submission record looks like, and nothing leaves the workspace.
Only if you ask. Marketing consent is a separate, optional checkbox on the form and is not required for access. Without it, we email you about this request: the address confirmation, the access decision, and the entry link.
There are two faster routes, depending on whether you have a live assessment on your desk.
The completed output of this exact scenario — answers, sources, gaps and the submission record — with nothing to request or install.
See the sample packSubject to availability, we will take a real supplier assessment you have received and produce a sourced draft from your own evidence. No card, no subscription.
Request a complimentary draftSecurity, legal or procurement need convincing before you evaluate anything? Send us their questions — we answer supplier assessments about ourselves too.
Talk to our team