Non-Disclosure Agreement (NDA) Workflow

The ability to access the NDA is exclusive to billing accounts. If scorecard xx.com has shared 'public' evidence in the Evidence Locker of their scorecard and activated the NDA feature, they can utilize the NDA option as shown in the attached screenshot. If scorecard xx.com needs to request evidence or security documents from zz.com's scorecard, follow this procedure: 

1. Setting up NDA
2. Ask for Evidence
3. Access to evidence.

Setting up NDA

Step 1: Set up NDA on zz.com scorecard.

Step 2: Click on ‘Manage NDA’ to access the ‘Edit NDA’ setting within your admin profile on zz.com scorecard account.

Step 3: Ensure zz.com scorecard has been added to your (xx.com) scorecard’s portfolio to request evidence from zz.com.

Ask for Evidence

Steps to Request Evidence from zz.com by xx.com

Step 1: Locate the zz.com scorecard and navigate to its Evidence Locker

Step 2: Click on the publicly shared evidence, and a pop-up window will prompt you to add the contact to whom the request should be sent, designate other contacts (optional), or specify additional required documents.

Step 3: Once completed, please click on "request evidence."

Step 4: An email will be sent to the designated contact (admin) on xx.com's scorecard to either accept or decline the request.

Step 5: The admin from xx.com can view the pending request under the evidence locker. They can upload any additionally requested documents.

Step 6: If accepted and uploaded, If the document owner grants access to the document, you will be notified via email. Then user from xx.com will be able to download the documents from zz.com's scorecard. 

Access to Evidence

Step 1: In the case of NDA-signed documents, a pop-up window will appear requesting agreement to the NDA. Check the "Agree" radio button to automatically download the required document.

Step 2: Once the NDA has been signed, the evidence will be downloaded. Alternatively, you may click on download again later at any time after the NDA has been signed or for all the evidence under the same NDA.

Note: Your Evidence Locker functions as a repository of documents that you can share
with partners monitoring your Scorecard. Only the first user from each organization
needs to sign NDA. SecurityScorecard will skip this step for additional users with
emails using the same domain.

FAQ

What is maximum supported length of characters for NDA

The maximum supported length of characters for NDA is 10000