Managing access to your Trust Portal content

What are Access Requests?

When you mark content as ON REQUEST or CLIENT, visitors to your Trust Portal can see it's available but cannot view or download it. Instead, they must request access from you.

Access requests allow you to:

• Control who sees sensitive documents (SOC 2 reports, penetration tests, etc.)
• Understand why someone needs access before granting it
• Set time-limited access that expires automatically
• Maintain an audit trail of who accessed what and when

How Access Requests Work

The Request Flow

1. Visitor sees ON_REQUEST document on your Trust Portal
                    ↓
2. Visitor clicks "Request Access" and fills out form
                    ↓
3. You receive notification in Trust Center
                    ↓
4. You review request details and decide
                    ↓
5a. APPROVE → Visitor gets email with secure access link
    OR
5b. DENY → Visitor gets notification that access was not granted

What Information Requesters Provide

When someone requests access, they submit:

Viewing Access Requests

Access the Requests Dashboard

1. Navigate to Trust Center → Access Requests
2. You'll see all requests organized by status:
   • Pending - Awaiting your review
   • Approved - Access granted (active or expired)
   • Denied - Access not grantedViewing Access Requests

Reviewing a Request

Step-by-Step Review Process

1. Click on Accept on a pending request to see full details
2. Review the information provided:
   • Who is requesting (name, email, company, job title)
   • Why they need access (their stated reason)
   • What they want to access (list of documents)
   • When they submitted the request
3. Verify the requester if needed:
   • Check if the email domain matches their company
   • Look up the company to verify legitimacy
   • Cross-reference with your CRM or ongoing deals
   • Check if they're already a client in Ceeyu
4. Assess the request:
   • Is the reason legitimate and specific?
   • Do they have a valid business need?
   • Is the relationship appropriate for the documents requested?
   • Do you need additional information before deciding?Approving Access Requests

When to Approve

✅ Approve access when:

• The requester is a legitimate prospect in an active sales cycle
• They're an existing client or partner with valid need
• They're an auditor or compliance professional conducting due diligence
• The reason is specific and relates to a real business process
• The email domain matches a recognized company
• You've verified their identity through other channels

How to Approve

1. Click Accept on the pending request
2. Set access duration
   • Choose a preset: 1 week, 4 weeks
3. Click Accept Request

What happens next:

• Requester receives an email with a secure access link
• They can view/download the approved documents until expiration
• The request moves to "Approved" status in your dashboard
• Access activity is logged in analytics

Denying Access Requests

When to Deny

❌ Deny access when:

• The email domain is suspicious (free email like Gmail for corporate docs)
• The reason is vague or generic ("just want to see it")
• The requester's company is a known competitor
• The relationship doesn't justify access to sensitive docs
• You cannot verify the requester's identity
• The request seems automated or spam-like
• You need more information and they haven't responded to follow-up

How to Deny

1. Click Reject on the pending request
2. Click Confirm Denial

What happens next:

• Requester receives a notification that access was not granted
• The request moves to "Denied" status
• No access is granted