Table of Contents
Summary
Now that you have customized your Whistic Profile to contain all of the information you would like to deliver to a prospective customer, this guide will cover how to share that Profile with individuals and the Trust Catalog.
If you would like to run a few tests, we recommend sending them to company websites other than your own. Otherwise, we'll need to temporarily provide a company feature for those kinds of tests to function correctly. We also recommend using temporary or personal emails to receive your shares, to avoid your main account being linked to other companies. This can cause login issues especially if your company utilizes SSO.
Steps
Share With Individuals (New Share):
1. Navigate to Whistic Profile from the left navigation menu
2. Using the drop-down in the middle of the page, select the Profile that you would like to send
3. Select Share
4. In the window that appears add recipient's information.
5. Do you want to send multiple profiles and/or to multiple people? If yes, click the checkboxes on all profiles at the top that you wish to share with one or more users.
To Add Another Recipient, feel free to use that option at the bottom of the form. You will notice the information appears under the recipient list section at the top. Continue adding additional recipients until finished. You can remove or edit a recipient once you have added them.
Optional - Add a Note for the recipient at the bottom.
The option can be suppressed. Do the following only if you would like to hide this option.
Go to Admin / Company Settings / Profile and enable the Hide Profile Share Recipient Note
6. Once all recipients have been listed, select Share
Once shared, the request is managed through the Customer Catalog. There, you can remove & add recipients, adjust expiration dates, cancel shares, and override NDA requirements. For more information on managing a sent profile, go HERE.
Add Recipient to an Existing Share:
Shares are managed on a user-to-user basis. To add a new user to an existing customer follow the steps below.
-
Navigate to the Customer Catalog from the left navigation menu
-
Click on the company that you want to share the profile to
-
Edit the Profile from the list
-
Click add recipient
Email Verification for Public Profile Shares:
To enhance the security of your shared Profile, new users requesting approval to access a profile are now prompted to verify their email address as part of registration.
How it works:
-
When a user attempts to access protected content (e.g., viewing a locked document or registering via a Profile link), they are prompted to enter their email address.
-
A verification email is sent to the provided address.
-
The user must click the verification link in the email to confirm their address.
-
Once verified, their access request appears in your Dashboard task list without any label.
-
If the user has not completed verification, their request will display a badge indicating they are unverified.
This additional verification step ensures that you are fully informed of user registration status to make informed decisions on profile sharing, reducing the risk of unauthorized access and protecting your sensitive documentation
Share To Trust Catalog:
The Trust Catalog provides your customers and potential customers to find and review your security posture without needing to request it from you directly. For more information about the Trust Catalog and how it is used, please click HERE.
1. To publish a profile to the Trust Catalog, please click Profile Settings located at the top right of the Whistic Profile in the ellipsis (3 dot) menu
2. Once the Settings page has opened, scroll down to the Sharing section of the Profile settings and locate the Publish to Trust Catalog option. Provide a profile product or service name. Select any pre-existing options or Add New Product/service to create a new profile product/service name.
3. There will be an option to Require Admin Approval, which will allow your team to manage who accesses your information and require approval on a case-by-case basis. To enable approval, slide the toggle to the on position (as shown in the screenshot above)
4. Click Publish to share the profile to the Trust Catalog.
By publishing to Trust Catalog, you acknowledge and agree that your Profile, questionnaire responses, and associated documentation will be available to customers who access Trust Catalog. Changes that you make to your Profile will be updated in Trust Catalog. You can update this preference at any time.
Note: If you have questions about a pre-existing or Basic Profile that does not show up in the list of managed profiles please reach out to support@whistic.com
FAQ
-
Why won't Whistic accept my email address?
- Whistic accepts the most common English email formats, lengths, etc. For example name.name_name@domain.com. If you are having any issues with email validation, please refresh the page and try again.
-
Can Profile recipients re-share my Profile with anyone else?
- Yes, as shown in the reassignment guide, recipients can add more profile recipients if they feel they need assistance with the NDA, security profiles, etc.
- Re-sharing is limited to users who legally commit to act on behalf of the original company recipient. This most notably happens at initial user registration. The original share recipient company website cannot be altered later. However, there is no email address/domain limit.
- These shares will be shown in your customer catalog.
-
Why is the share button greyed out?
- If the share button is greyed out, this may be due to the Whistic Profile Status being set to Inactive. To check and/or update the status, please jump to the Profile Settings and change the status to "Active".
-
I see an Auto Share in my Customers list, what does that mean?
- When your Profile is set as a SUBSCRIPTION share, any update that you make to your Profile will trigger an Auto Share to the recipients who have received a profile share from you. Expired shares will not trigger an Auto Share.
-
Will the recipient be notified of my Profile share expiration date?
- Yes, Profile recipients will see a red indicator at the top right-hand side of the Profile, letting them know when their access to the Profile will expire.
-
What happens after my Profile share expires or is canceled?
- If the recipient doesn’t have a paid account on Whistic, they will lose access to everything upon expiration/cancellation.
- If the recipient is a Whistic customer, they will retain access to the Questionnaires (in the Assessment Activity) and the Documents (in the Doc Repository), but will lose access to view your Profile (from the Assessment Activity). This applies regardless of whether they have actually started an assessment.
Additional Resources
Please click HERE if you need guidance on how to cancel a Whistic profile share as the sender.
Guest Pass: Securely Share Your Profile(s) Without Requiring A Login