How to add NDA protection to your Trust Page

Your Trust Page is a repository for your security and compliance documentation. To protect your business information, you can require a non-disclosure agreement (NDA) prior to access.

Non-disclosure agreement protection requires a representative from an organization to accept your set NDA terms before anyone from their org can view, or request access to view, documents and questionnaires on your Trust Page.

How NDA protections work

NDA protection (like access protection) is applied at the organization level. A single individual from an organization needs to agree to the NDA, and that agreement covers the entire organization. Individuals within the same organization are not required to agree separately.
NDA protections can either be turned on or off. If on: the NDA must be agreed to before any and all documents or questionnaires on your Trust Page can be opened/ downloaded.

Tip: You can manually approve an NDA for orgs that have already agreed to an NDA outside of the platform.

NDA protections + access protection

If NDA and access protection are used simultaneously: the NDA must be agreed to before access can be granted.
If NDA protection is on, but access protection is off: the NDA must be agreed to before documents/questionnaires can be accessed. Once agreed to, the corresponding documents/questionnaires are immediately accessible (no additional review/approval is needed).
Review who has access to your page with the Access and Access Log tabs.

Enable (or disable) NDA protections

You can update the NDA and access protection settings for your Trust Page at any time. However, NDA protection is not applied retroactively, so any organization that had previous access will continue to have access.

Click the Trust Exchange icon from UpGuard’s left-hand navigation.
Click Trust Page.
Click Settings or Publish (if your page isn’t published)*.
Click Configure settings.
Toggle on NDA protection (or toggle it off to turn off default access protection).
If turning on NDA protection, you will need to supply terms in the text box that appears. Because your NDA is a legal agreement between you and a third party, UpGuard does not provide NDA wording, nor is UpGuard party to the agreement you form with those third parties.
Click Save changes.

NDA protections are now in place (or turned off) based on your selection.

Tip: You can also enable access protection from this settings page.

Accessing NDAs that accounts have agreed to

You can always review NDAs that someone has agreed to through the Access tab of your Trust Page. This page will list organizations and their current state.

You can download any NDA, which includes the details and a timestamp for when they agreed to your terms. Users can also access a copy of this document at any time when they access your Trust Page.

Updating your Trust Page protection settings

You can update the NDA and access protection settings for your Trust Page at any time. However, NDA protection is not applied retroactively, so any organization that has had previously granted access will continue to have access.

To adjust the access status for an individual organization, such as requesting they agree to new NDA terms, you can update statuses from the Access tab.

You can select from the following statuses:

Require NDA: You can require a signed NDA from any organization that wishes to access your Trust Page.
Manually Approve: You can manually approve organizations that have agreed to an NDA separately from the UpGuard platform. You can optionally use this status to retain a legacy status for any organizations who had prior access to your Trust Page and do not need to agree to an NDA to continue access.

Once an NDA has been agreed to, you can download a copy of the NDA from the NDA column for the specified account.

If you have enabled access protection, you will also have the option to Revoke Access entirely.