Due diligence, audits, tenders: the relentless questionnaire cycle wearing out your teams in 2026

In short.
Due diligence, audits, tenders: three types of questionnaire, one problem. The time they consume appears in no budget, because it is taken from the experts’ time. Traditional approaches (answer libraries, templates) fail because they go out of date faster than anyone can maintain them.

Monday morning. In the open-plan office of your legal department, a senior lawyer opens his inbox. He has received a due diligence questionnaire of 180 questions. Deadline: Friday. On the floor above, your CISO receives a client security audit at the same time: 247 questions, same deadline. Meanwhile, your sales team is juggling a €2.3 million public tender whose technical response must go out in ten days.

Three teams. Three questionnaires. One week.

This scenario is not exceptional. In 2026, it is the daily reality of most French companies that operate in regulated sectors, deal with demanding clients, or manage complex transactions. And behind this daily reality lies a structural problem that few organisations have actually put a figure on.

The invisible time: what questionnaires really cost

To grasp the scale of the problem, you first have to put a figure on what nobody measures: the real cost of handling questionnaires manually.

Take a CISO whose annual salary is around €120,000. According to feedback from Optivalue.ai customers, 40% of a security team’s time is spent answering questionnaires: not securing the company, not steering strategic projects, but searching for documents, filling in Excel cells and checking that the certifications cited have not expired.

Convert that figure into working days. Out of 220 working days a year, that is 88 days (nearly four months) spent on tasks that could be described, with all due respect, as skilled administrative work at a very high salary cost.

The same holds on the legal side: each contract review takes between 2 and 5 hours. With 15 contracts a month, half of a general counsel’s time goes on linear reading, not strategic analysis. And for Procurement teams, a full supplier assessment takes 2 to 4 hours of work on average. For a panel of 210 active suppliers, that is 6 person-months a year devoted to supplier compliance alone.

Three types of questionnaire, one problem

The variety of contexts often hides how similar the symptoms are. Whether it is an M&A due diligence, a certification audit or a tender, teams invariably run into the same difficulties.

1. Due diligence: the race against time

A data room opens. It contains 1,247 documents. The investment committee meets in ten days. Your analysts dive in: each takes a workstream, and they read, compare, cross-check. Eight days later, the report is ready: 140 pages. But a change-of-control clause in a major client contract has been missed. Page 47 of an 82-page contract, in a subfolder nobody opened.

The board will discover the risk after closing. Cost: €2.8 million from a client walking away.

It is not a question of competence. It is a question of volume and time. Your analysts are hired for their strategic judgement. They spend 80% of the due diligence reading and 20% thinking. The ratio should be the other way round.

2. The compliance audit: the regulatory layer cake

January: NIS2 comes into force. March: ISO 27001 audit. May: first CSRD reporting. September: CNIL inspection. November: Sapin 2 anti-corruption audit.

Your compliance team has not grown. Nor has your budget. Each new framework triggers the same cycle: read the requirements, map the evidence, identify the gaps, prepare the answers. Three months of work per framework. You have six.

Yet 60% of documentary evidence serves several frameworks at once. An access management policy counts for NIS2, ISO 27001 and GDPR alike. But nobody has time to do that cross-referencing. So each audit is prepared from scratch, with the same documents found, checked and formatted all over again.

3. The tender: talent assigned to the wrong task

Tuesday, 9:15. A €2.3 million tender lands. 180 technical, regulatory and functional questions. Deadline in 12 days.

Your best pre-sales engineer stops the POC he was preparing for another prospect. He opens old deliverables, looks for the answers from the last similar tender, and sends 14 emails to internal experts. Three of them are on leave.

D-2: the answers are in, but the legal section contradicts the security section on the subcontracting policy. The tender goes out. You lose. The client cites “inconsistencies” in its debrief.

How many tenders has your team let slip this year for lack of time? That lost revenue appears in no report.

Why traditional approaches are no longer enough

Faced with this situation, companies have long chosen one of three responses: hire more, create templates, or prioritise (in other words, accept not covering everything).

All these approaches reach their limits in 2026.

Hiring more does not solve the structural problem. If 40% of a team’s time is spent compiling answers, adding a person to the team means devoting 40% of their time to the same problem. The workload follows headcount.

Templates improve consistency but not speed. Finding the right version, checking it is still up to date, sourcing the evidence for each answer: all of that remains manual. And the certification that expired last month does not appear in any template.

Prioritisation is the most honest response, and the riskiest. Assessing 30% of your supplier panel means leaving 70% in a blind spot. An incident at the unassessed subcontractor is not bad luck: it is the foreseeable consequence of an unresolved capacity constraint.

What document AI fundamentally changes

This is where a radically different approach comes in: not automating for the sake of automating, but solving the real problem, that of scattered knowledge.

Optivalue.ai turns tender, audit and compliance questionnaires into clear, sourced and compliant answers. The platform does not generate generic answers: it analyses your existing document base (internal policies, certifications, contracts, audit reports) and produces answers grounded in your own documents, with the exact source (document, page, date) for every claim.

The principle rests on two AI teams working in sequence. The first analyses and generates. The second checks, sources and recommends. The human expert reviews, adjusts and approves. Nothing goes out without them.

Customer testimonials show time reductions of 90% and an average annual ROI of 428%.

In practice, this is what it changes:

• A 247-question security questionnaire handled in 47 minutes instead of 2 days
• A 1,247-document due diligence mapped in 45 minutes, with critical risks identified and sourced
• 210 suppliers assessed in one week instead of one quarter
• Multi-framework audit preparation in which evidence common to NIS2, ISO 27001 and CSRD is automatically pooled

Sully Group, a 900-employee IT services company, measured the impact precisely: “We went from 2 days per questionnaire to less than 2 hours. A single file a month pays for the full annual subscription.”

The real transformation: the role of the expert

The question many people ask at this point: “Is AI replacing my teams?”

The answer is no, and that is precisely where the value lies.

Your CISO does not become redundant. They stop being a document compiler and go back to what they were hired for: a security strategist. The time freed up moves to the SOC, the IAM overhaul, the NIS2 plan: the projects that will make them indispensable again.

Your general counsel does not disappear. They focus their attention on the 3 critical clauses the AI has identified, instead of reading 42 pages to find the same 3 clauses, hoping not to miss a fourth one on page 34.

Your M&A analysts are not replaced. They go from 80% reading and 20% thinking to the reverse. Their added value (strategic judgement, negotiation, structuring the deal) is multiplied.

The AI prepares, but you keep control and responsibility.

Where to start?

Optivalue.ai is up and running in less than 7 minutes. Create your account, upload your documents and get your first answer as soon as you sign up. The accepted formats cover everything your teams produce: Excel, Word, PDF, web forms.

The recommended approach: choose a questionnaire that has been lingering in your team for several weeks, the one most representative of your usual workload. Upload it with your document base. Measure the result.

Not a promise. A test.

This article is the cornerstone article of our editorial strategy. Each persona has a dedicated article that goes deeper into their specific use case:

• CISO/CIO → [NIS2 and security questionnaires]
• General Counsel → [Contract review and document risks]
• M&A department → [Due diligence and data room]
• Procurement Director → [Assessing 100% of suppliers]
• Sales / Bid Manager → [Tenders and win rate]
• Compliance / ESG → [Multi-framework and pooling of evidence]
• CEO → [ROI and strategic responsiveness]

Ready to measure the difference? Request a personalised demo →