Table of Contents
Summary
Congratulations! Rather than sending a security assessment questionnaire back and forth with your vendor, you've received access to their Whistic Trust Center.
The Whistic Trust Center is designed for sellers to share their security information with partners and prospects. The seller's Whistic Trust Center likely contains all of the information you will need to assess their security. It may also contain documentation, certifications, NDAs, and anything else to make your security assessment simple and fast. You were likely invited to use the Whistic Trust Center through an email invitation.
🔐 Access and Navigation
1. Open the invitation email and follow the link. If someone other than you should have received the Whistic Trust Center invitation, there is a link in the email you can follow to reassign access. More detailed steps on reassignment can be found HERE.
2. Upon following the link, you will either be directed to:
- The login page if you have an existing account:
- Or a registration page if you are a first-time user some fields being pre-filled based on what the sender inputted (these cannot be adjusted by the recipient, if they are correct please reach out to Support for assistance).
3. After registering or logging in, you will land on the Dashboard or be directed to the shared Whistic Trust Center.
While on the Task List dashboard, you can locate the Trust Center share under All Tasks or Whistic Trust Centers Shared With Me. Select View Trust Center.
The Whistic Trust Center may be protected by an NDA. In this case, the NDA will appear and request that you agree to it before accessing the Whistic Trust Center contents.
4. The page below will open. You can review any of the following to assess the sender's security:
- A - About: Contains pertinent information and details about the sharing company.
- B - Trust Center Quick Links: Offers a quick way to jump to the section of the Trust Center that is most important to you.
- C - Audits and Certifications: Badges that will often include the certification documentation.
- D - Questionnaires: Published and shared self-assessments from the sharing company. Also includes the documents attached to the questionnaire.
- E - Additional Documents: Published supporting documents.
- F - Security Team: Important members of the sharing company and Trust Center managers.
5. You can also use the new Bulk Download feature to download all corresponding documents in a questionnaire or documents folder. Simply select the button in the upper corner of the right panel, as seen below.
6. Once the NDA is accepted, you will be able to retrieve a copy of the NDA from inside the profile. To locate the NDA, on the top right, you will see "View NDA". After you have clicked "View NDA" the NDA will populate, and there will be an option to Print or Export a copy. NDAs are only required once for all profile shares and recipients within a company domain.
7. Trust Centers show when questionnaires were created and updated. These new fields will also show on the questionnaire itself, in addition to the existing dates of Requested and Shared.
8. Celebrate! You've just completed a security review!
If you use Whistic to assess vendors, you can also find the share in your Vendor Catalog. If the share is later canceled, you will lose access to the "Trust Center View," but the questionnaires and documents will remain in the Vendor Details page.
⏰ Trust Center Expiration
You may notice an expiration date on the Trust Center being shared with you or perhaps the Trust Center share has already expired.
- Before a Trust Center has expired you will see the following at the top of the screen informing you of the duration of which you have access to the Trust Center.
- If there is no Trust Center expiration notification at the top of the screen, there is not an expiration date that the sender has set.
- If the share has expired, please reach out to the sender of the Whistic Trust Center and request that they initiate a new share.
🔧 Troubleshooting
- Session Timeouts: A session timeout can occur if you wait longer than 15 minutes before attempting to download or view a document. Simply refresh the screen and attempt the download or view again.
- Access Issues: If you receive a "Page Requires Authorization" or "You Need Different User Permissions to Access" message, your Whistic or SSO Admins may need to grant additional permissions.
- Missing Information: If the Whistic Trust Center share doesn't contain updated information or you have further questions, reach out to the sender directly. The sender's email is usually located on your dashboard within the same line as the "View Trust Center" button.
- PLEASE NOTE: Whistic is a third party when it comes to Whistic Trust Center shares from a vendor to recipient, so our team will not be able to provide or update documentation as we are not the owner of the data.
❓ FAQ
- If the page says "Page Requires Authorization", there are 3 things to consider:
- The recipient's Whistic or SSO Admins will likely need to grant additional permissions for this recipient. Alternatively, the Trust Center could be reassigned/shared with someone else.
- If your organization is a Whistic Customer and you do not have the correct permissions to view the Whistic Trust Center, you will receive a Page Requires Authorization message that now includes your Whistic Admin, which you can reach out to directly for assistance!
- If you are getting an "Unexpected server response", the quickest resolution will likely be either:
- Refresh the page and immediately interact with the documents.
- Or try a fresh browser session (i.e. Google Chrome Incognito). A session timeout can occur if you wait longer than 15 minutes before attempting to download or view a document - "An error occurred while loading the PDF". Simply refresh the screen and attempt the download or view again. You may need to do this a couple of times and perhaps in a fresh browser session.
- It's possible the page session or link has expired. Please refresh your page or link on the corresponding Trust Center link on your dashboard.
- This is likely because the Trust Center share has expired. The Trust Center has been archived by the owner or the link has a typographical character. Here is that message: "Trust Center Note Available - We're sorry, but this Whistic Trust Center is no longer available."
- If the Whistic Trust Center share you received does not contain updated documentation or you have further questions regarding the material that is published on the Whistic Trust Center, we recommend reaching out to the Sender of the Whistic Trust Center directly.
- Generally, the vendor's email will be located on your dashboard within the same line as the "View Trust Center" button. If there is a generic email or an email listed, we recommend connecting with the AE/CSM or checking out the Sender company's trust page for further assistance.
- Some documents may have a click-wrapped NDA to help enforce the NDA agreement with every viewer of the report. This is added by the sharer of the Trust Center.
- These documents while not being able to be opened in the platform, can be downloaded.
- Once downloaded, open the doc with Adobe Acrobat. You will be able to click acceptance of the NDA, and then the report can be opened.
- Use the Bulk Download feature available in questionnaire sections and document folders. Simply select the bulk download button in the upper corner of the right panel to download all corresponding documents in that section.
- If you do not have access to an organization's trust center, privacy links or their specific URL-containing security information, you will need to reach out to the sender for those details.