I received the CSIS notes, still waiting for the CBSA notes, ordered them around the same time last month. The CSIS notes is a letter, exactly as the photograph describes in this link: https://www.thestar.com/news/privacy-blog/2015/05/what-happens-when-you-request-your-csis-file.html
What does your CD say ?
The CBSA reply was surprising to me. I submitted it on Jun 19 with the incorrect authorization form. However, they still provided me the information on July 3.