OneClickComply
    Book a demo

    NDA-Gated Trust Centre

    A trust centre that gates sensitive documents behind an NDA and your approval

    The OneClickComply Trust Centre is a public security page for IT, security and compliance leads who answer customer due diligence. Policies and reports can sit behind a Request access button, so a buyer asks, signs an NDA, and you approve or reject each request before anything is shared. Document sharing is gated by plan.

    Book a demo
    Request with NDA
    default access mode
    Magic link
    temporary access for approved requesters
    Approve or reject
    every access request reviewed
    THE PROBLEM

    Why sending security documents by email does not scale

    Customers want your security policies, audit reports and penetration test summaries, but you cannot post them publicly. So they go out by email, one attachment at a time, with no record of who has them, whether an NDA was signed or when access should end. A trust center that asks for an NDA and tracks each approval replaces that thread with a queue you can review, and leaves a record of who was given what.

    FEATURES

    How NDA-gated access works

    Gated documents with Request access

    Documents you choose to gate show a Request access button on your public Trust Centre page. Visitors ask for access instead of downloading the file directly. Document sharing is controlled by the trust_centre.document_sharing entitlement, so availability depends on plan.

    NDA captured on every request

    Each access request records whether the requester has signed the NDA. The Access requests tab shows NDA signed or not, so you can see at a glance which requests are ready to approve.

    Approval refused until the NDA is signed

    In the default request with NDA access mode, the platform refuses to approve a request whose NDA is not signed. Until the NDA is recorded, the Approve action stays disabled.

    Review, approve or reject

    Work through requests in the Access requests tab and approve or reject each one. Every decision is yours, so nothing is released by default.

    Expiry, extension and magic-link access

    Approved access can carry an expiry date, and you can extend it later. On approval the requester receives a temporary magic link by email to your Trust Centre.

    A branded public page

    Use the Page builder to set your logo, company description and footer links, and add statistics or the embed script for your own site. Published frameworks and controls sync from Standards. A custom domain is available through the white_label_trust_centre add-on, and availability depends on plan.

    See NDA-Gated Trust Centre working on your own setup.

    Book a demo
    BENEFITS

    What you gain from gated document sharing

    Sensitive documents released only after an NDA and an explicit approval

    One queue of access requests instead of a trail of email attachments

    Time-limited access that you can extend when a review runs on

    A public page that shows your published frameworks and controls alongside the gated files

    Your logo, description and footer links on the page, with an optional custom domain

    FAQ

    NDA-Gated Trust Centre: common questions

    An NDA-gated trust centre is a public security page where your most sensitive documents are not freely downloadable. A visitor requests access, the NDA is recorded, and you approve or reject the request before the document is shared.

    Nothing in practice. Trust center is the US spelling and trust centre is the UK spelling, and both describe a page that shows customers your security and compliance posture.

    You mark a document as gated and it shows a Request access button on your public page. Each request records the NDA status, and in the default request with NDA mode a request cannot be approved until the NDA is signed.

    The approval is refused in request with NDA mode, and the request shows as NDA not signed. Once the NDA is recorded against the request, you can approve it.

    You decide. An approved request can have an expiry date, you can extend it later, and the requester gets a temporary magic link by email on approval. This is controlled per request, not as a fixed period.

    Yes, through the white_label_trust_centre add-on, and availability depends on plan. You can also embed the Trust Centre on your own site with the embed script. The custom domain applies to the Trust Centre only, not the rest of the platform.

    Frameworks NDA-Gated Trust Centre supports

    Read what each framework asks for and how OneClickComply covers it.

    See NDA-Gated Trust Centre on your own stack

    Book a 30-minute demo and see how NDA-Gated Trust Centre works with the tools and frameworks you already have.

    Book a demo See pricing