# Supplier questionnaire response exercise

SYNTHETIC SUPPLIER ONLY. Nothing in this pack describes Aona or another real company’s controls. No questionnaire or evidence is sent to an AI service or customer.

Read demo-policy.txt, compare answer-library.csv and prepared-answer.md, then review the separate restricted-evidence-canary.txt decision. Keep the policy-only limitation and source reference. Use review-record.md for the actual owner process without copying confidential evidence into this training pack.

## Guide and sources

Canonical guide: https://aona.ai/resources/guides/security-questionnaires-ai-input-controls/
Source review: 2026-09-21
- OAIC: Use of commercially available AI products: https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/guidance-on-privacy-and-the-use-of-commercially-available-ai-products