1. [Platform](/platform)

   * Platform

   * [Overview](/platform)

   * [Vendor Risk](/product/vendor-risk)

   * [Breach Risk](/product/breach-risk)

   * [User Risk](/product/user-risk)

   * [Trust Exchange](/product/trust-exchange)

   * [Risk Automations](/product/risk-automations)

2. [Trust Exchange](/product/trust-exchange)

   * Trust Exchange

   * [Overview](/product/trust-exchange)

   * [Questionnaire AI](/product/trust-exchange/questionnaire-ai)

   * [Trust Center](/product/trust-exchange/trust-center)

   * [Security Profile](/product/trust-exchange/security-profile)

   * [Content Library](/product/trust-exchange/content-library)

   * [Disclosure Controls](/product/trust-exchange/disclosure-controls)

   * [Subprocessors Listing](/product/trust-exchange/subprocessors-listing)

   * [Paid Plan](/product/trust-exchange/paid)

# Share sensitive documents securely

Require an NDA before access, watermark every download, and see exactly who viewed or downloaded what—all from one Trust Center.

[Get a demo](https://www.upguard.com/contact-sales)

[Explore Trust Exchange Paid](/product/trust-exchange/paid)

## A public folder is not a Trust Center

Sharing sensitive evidence like SOC 2 reports, penetration test results, and internal policies shouldn’t mean losing control of your files. Sending unprotected PDFs over email or leaving them ungated leaves you blind to who is accessing your data and what they do with it.

You need a way to share exactly what buyers need, while keeping the governance and audit trails your legal and security teams require.

## Gate access instantly

Require an NDA across all your Trust Centers before anyone can view or request access to your documents and questionnaires. When one person from an organization accepts the agreement, it seamlessly covers their entire company.

* **Combine NDA and access protection:** Ensure the NDA is agreed to first, then grant access automatically or hold it for your manual approval.
* **Customize the signing process:** Collect custom fields like job title and company address in the NDA signing form, and require your own team to countersign before access is granted.
* **Control the perimeter:** Manually approve organizations that already signed your NDA outside the platform, while automatically blocking signatures from free or temporary email providers.
* **Manage programmatically:** Use the API to approve or revoke a user’s NDA, and seamlessly pull Trust Center access and log data directly into your own systems.

## Protect what leaves your Trust Center

Turn on watermarking once at the Trust Center level, and it automatically protects your files going forward. Every PDF download up to 32MB receives a permanent mark with no manual work required.

* **Identify every download:** Apply a watermark containing the downloader’s name, email, company domain, and the exact date and time of the download.
* **Preview before publishing:** Preview the watermark to ensure your documents look exactly the way you intend.

## A reliable record of every interaction

Every access decision is logged, not just remembered. The Access log records every view, download, approval, denial, revocation, NDA signature, and countersignature, detailing exactly who, what, and when.

* **Export for your records:** Filter the Access log to exactly what you need, then export it as a CSV or Excel file for audit or reporting.
* **Apply granular controls:** Turn access protection on or off for individual documents or questionnaires. Sensitive files can carry heavier controls than public ones.
* **Protect existing access:** Turning on NDA or access protection never revokes access someone already has. You decide if and when to require it again.

Save time and streamline your trust management process

[Get a demo](https://www.upguard.com/contact-sales)