Access for your auditor

The audit view shows one standard read-only: the chapters, and per clause how you meet it, the proof, the documents and files that go with it, the latest evidence and, for ISO 27001, the Statement of Applicability. Members use it from the Team plan to prepare an audit.

From the Business plan owners and admins also make a link for an external auditor under Auditor access. Choose one or more standards and until when the link works, at most 90 days. For a combined audit, one link covers all the standards you tick; the auditor switches between them at the top of the page. The auditor needs no account.

With The auditor may open files ticked, the auditor opens the evidence and the attached files one at a time in the browser. A whole pack cannot be downloaded through the link. Every file the auditor opens is noted in the activity log under the label of the link, so give each link a clear label, such as the name of the auditor. Untick it when the auditor should only read.

Links made before November 2026 keep showing what they showed: the figures and the dates of the evidence, without the texts or files. Make a new link to show more.

You can stop a link at any time, and you see when it was last used. Share the link only with your auditor: anyone with the link can read those standards until it ends.