Help & Documentation
Everything you need to know about Simple Trust Portal
Quick Navigation
Introduction
Simple Trust Portal is a two-part platform designed to help you share security documents securely:
- The Dashboard (Internal): Where you upload documents, configure settings, and manage access requests. Only you and your team can see this.
- The Trust Portal (Public): A public-facing page for your organization where clients and prospects can view your security posture and request access to documents.
Getting Started
1. Create Your Account
Visit the signup page and create your account. You can sign up with your email and password, or use Google Sign-In for faster access. After signup, you'll be redirected to log in.
2. Set Up Your Organization
After logging in for the first time, you'll be guided through onboarding to create your organization. Enter your organization name to get started.
3. Configure Your Trust Portal
Go to Settings to upload your organization logo. This helps brand your public portal immediately.
4. Upload Documents
Navigate to Documents and upload your first security documents (SOC 2, ISO certifications, privacy policies, etc.).
5. Share Your Trust Portal
Click the "View Trust Portal" button in the sidebar to see your public page. Copy the URL and share it with clients or prospects who need to review your security documents.
That's it! 🚀
You are now ready to start sharing your security documents. Simple Trust Portal is designed to keep the essentials quick and easy.
When you need more control, you can configure NDA requirements, set up PDF watermarking, invite team members, and manage access requests. Read the sections below for full details on these features.
Dashboard Overview
The dashboard provides a quick overview of your organization's trust portal activity:
📄 Total Documents
The number of documents you've uploaded. Click to view your documents page.
📋 Pending Requests
Access requests awaiting your review. Click to view pending requests.
⬇️ Total Downloads
Number of times documents have been downloaded through share links.
🔗 Active Shares
Number of currently active share links (approved access requests).
Recent Activity
View the 10 most recent events in your organization, including document uploads, access approvals, team changes, and more.
Document Management
Uploading Documents
- Click the "Upload Document" button
- Select a file (max 30 MB)
- Enter a title and optional description
- Choose if the document should be publicly downloadable
- Click "Upload"
Supported formats: PDF, DOC, DOCX, TXT, RTF, MD, JSON, TSV, XLS, XLSX, CSV, ODS, PPT, PPTX, ODP, images (JPG, PNG, GIF, WEBP, BMP, SVG, TIFF), and archives (ZIP)
Public vs. Private Documents
✅ Public Documents
Visible on your trust portal and downloadable by anyone without watermarks. Best for marketing materials, public certifications, etc.
🔒 Private Documents
Require approval to access. Downloaded with watermarks (for PDFs) containing requester information. Best for sensitive security documents.
Editing Documents
Click the edit icon (pencil) next to any document to:
- Update the title and description
- Change public/private visibility
- Replace the file with a new version (creates a new version while preserving the old one for audit compliance)
Version History
When you replace a file, the system automatically tracks all versions for compliance and audit purposes.
How it works:
- Each time you replace a file, a new version is created (v2, v3, etc.)
- Old versions are preserved and remain accessible
- External users with approved shares automatically get the latest version
- A version badge (e.g., "v3") appears next to documents with multiple versions
Viewing version history:
- Look for the version badge (e.g., "v3") next to the document title
- Click on the badge to open the version history modal
- View all versions with upload dates, uploader names, and file sizes
- Download any previous version using the download button
Benefits:
- Compliance: Maintain complete audit trail for SOC2/ISO 27001
- No broken shares: External users can still access documents even after replacement
- Rollback capability: Download and restore previous versions if needed
- Transparency: See exactly who uploaded each version and when
Reordering Documents
Click and drag the "handle" icon (⋮⋮) on the left of any document row to change its order. This determines the display order on your public trust portal.
Downloading Documents (Preview)
Click the download icon to preview how documents will look when downloaded:
- Public documents: Downloaded without watermarks
- Private PDFs: Downloaded with example watermarks so you can preview how they'll appear to requesters
- Private non-PDFs: Downloaded without watermarks (watermarking only works for PDFs)
Deleting Documents
Click the delete icon (trash) to permanently remove a document. This action cannot be undone.
Note: Audit logs for the document will be preserved, but any active share links containing this document will no longer work for this specific file.
Watermark Configuration
Watermarks are automatically added to PDF documents downloaded through share links. They help track document distribution and deter unauthorized sharing.
Enable/Disable Watermarking
Toggle the "Enable PDF Watermarking" checkbox to turn watermarks on or off for your entire organization.
Watermark Position
Select any combination of positions using checkboxes:
- Header: Small text at the top of each page
- Footer: Small text at the bottom of each page
- Diagonal: Large bold text rotated 45° across the page center
You can enable any combination (e.g., Header + Footer, or all three for maximum security). At least one position must be selected when watermarking is enabled.
Customizing Watermark Text
Create custom watermark templates using merge fields that are automatically replaced with real data:
Available merge fields:
{email} - Requester's email{name} - Requester's name{company} - Requester's company{date} - Download date{org_name} - Your organization name{id} - Request ID (UUID)Example: "Confidential - Provided to {company} on {date}"
Becomes: "Confidential - Provided to Example Corporation Inc on 2025-11-20"
Preview Your Watermark
Before saving, you can preview how your watermark will look:
- Configure your watermark template and position settings
- Click the "Preview on Sample PDF" button
- A 2-page sample document will open in a new tab with your watermark applied
- The preview uses example requester data so you can see exactly how watermarks will appear
Tip: Preview your changes before saving to ensure they look the way you want.
Template Length Validation
There is a character limit for the watermark template to ensure text fits on the page. The live counter will turn red if your text is too long.
Important Notes
- Watermarks are only applied to PDF files
- Public documents are never watermarked
- Keep templates concise for best readability
- Changes apply to all future downloads immediately after saving
NDA Settings
Require external users to accept a Non-Disclosure Agreement (NDA) before requesting access to documents.
Enabling NDA Requirement
Toggle "Require NDA Acceptance" to make NDA acceptance mandatory for all access requests.
Custom NDA Text
Enter your custom NDA text in the textarea. You can:
- Write your own NDA from scratch
- Click "Insert Standard Template" to use a pre-written NDA template
- Modify the standard template to fit your needs
How It Works
When NDA is enabled, external users requesting access to documents will be required to check a box agreeing to the NDA before they can submit their request.
Access Requests
How External Users Request Access
External users visit your trust portal at simpletrustportal.com/trust/your-slug and fill out a request form with:
- Name
- Company name
- Optional message explaining their access needs
- Document selection (specific documents or "all documents")
- NDA acceptance (if required)
Note: If you have set up a custom domain (e.g. trust.yourcompany.com), users will access your portal there. Contact support to enable custom domains.
Viewing Requests
The Requests page in your Dashboard shows all access requests with filtering options:
- All: View all requests
- Pending: Awaiting your review
- Approved: Approved with active share links
- Rejected: Denied requests
Click "View Details" to see the requester's message, requested documents, and download history.
Approving Requests
- Click "View Details" on a pending request
- Review the requester information
- Select which documents to approve (all requested documents are selected by default)
- Click "Approve Request"
- A share link is automatically generated for the approved documents
- An email notification is automatically sent to the requester with the share link
- The email status (Sent, Delivered, etc.) is displayed in the requests table
Share Link Details:
- Valid for 7 days from approval
- Allows up to 10 downloads
- All downloads are tracked with timestamps and IP addresses
- Approval emails are sent automatically in the background
Rejecting Requests
Click "Reject" on a pending request to deny access. When you reject a request:
- The request status changes to "Rejected"
- You can choose whether to send an email notification (enabled by default)
- If email is sent, the email status is tracked and displayed in the requests table
- Silent rejections (no email) are marked as "Not Sent" in the email column
Tip: Uncheck "Send rejection email" for spam requests or when you've already contacted the requester through other channels.
Download Tracking
For approved requests, you can view the download history:
- Go to the Requests page and click "View Details" on an approved request to see specific downloads for that share link.
- Go to the Audit Logs page and click the "Downloads" filter button to see all document downloads across your organization.
Email Notifications
Simple Trust Portal automatically sends email notifications to keep everyone informed about access requests and approvals. All emails are sent in the background without slowing down your workflow.
Automated Email Types
📬 Team Notifications
When: A new access request is submitted by an external user
To: All organization members (both Admin and Member roles)
Contains: Requester details, company name, number of documents requested, and a direct link to review the request in your dashboard
✅ Approval Notifications
When: You approve an access request
To: The requester
Contains: Personalized approval message, secure share link, expiration date (7 days), download limit (10 per file), and important usage information
❌ Rejection Notifications
When: You reject an access request (optional, enabled by default)
To: The requester
Contains: Polite notification that their request was not approved, with contact information
Email Delivery Tracking
All outgoing emails are tracked so you can verify delivery. The email status appears in the "Email" column of the Requests table:
Important: "Delivered" means the email was accepted for delivery by the recipient's mail server, but it may still end up in the recipient's spam folder. If someone reports not receiving an email, always ask them to check spam first.
Viewing Email Status Details
Click "View Details" on any approved or rejected request to see email delivery information, including when the email was sent and its current status.
What If Emails Aren't Being Received?
If requesters report not receiving emails:
- Ask them to check their spam/junk folder - automated emails are often filtered there
- Check the email status in the Requests table to see if it was delivered, bounced, or marked as spam
- Verify the email address was entered correctly
- If needed, manually share the link displayed in the approval modal
Important Notes
- Emails are sent in the background - your workflow is never interrupted
- Email delivery typically occurs within seconds to a few minutes
- You can manually copy and share links even if email delivery fails
Profile Management
Manage your personal account information and security settings.
Accessing Your Profile
Click the "Profile" link in the header (next to Help) while logged into the dashboard.
Updating Your Name
To update your display name:
- Enter your new name in the "Full Name" field
- Click "Save Profile"
- Your name will be updated across the dashboard and in audit logs
Changing Your Password
To change your password:
- Enter your current password for verification
- Enter your new password (minimum 8 characters)
- Re-enter your new password in the confirmation field
- Click "Change Password"
Email Address
Your email address is displayed on the profile page but cannot be changed. If you need to update your email, please contact support.
Team Management
Admin Only: Team management features are only available to organization administrators.
Inviting Team Members
- Click "Invite Team Member"
- Enter the person's email address
- Select their role (Admin or Member)
- Click "Send Invite"
- An invitation email with login credentials is automatically sent to the new member
- A temporary password is also displayed - you can share it via other secure means if needed
The new member will receive an email with their login credentials and a direct link to log in. They should change their password immediately after first login for security.
Roles Explained
👑 Admin
Full access to all features including team management, organization settings, and all dashboard functions.
👤 Member
Can manage documents, watermarks, NDA, access requests, and view audit logs. Cannot access team management or organization settings.
Changing Member Roles
Click the role dropdown next to any team member and select "Admin" or "Member" to change their permissions. Changes take effect immediately.
Resetting Passwords
Click the "Reset Password" button next to a team member to generate a new temporary password. You can choose to:
- Send email to user (default): The new password will be automatically emailed to the team member.
- Manual communication: Uncheck the email option and share the password securely yourself.
The temporary password will always be displayed on screen for your reference, regardless of whether an email is sent.
Note: Password reset is only available for members who sign in with an email and password. Members who sign in via Google or SSO must manage their credentials through their identity provider.
Removing Team Members
Click the trash icon next to a team member to remove them from your organization. They will lose access immediately.
Important: You cannot remove yourself from the team. Another admin must remove you, or you can delete the entire organization from Settings.
Organization Settings
Admin Only: Organization settings are only accessible to administrators.
Organization Name
Update your organization's display name. This appears throughout the portal and on your trust portal.
Trust Portal URL Slug
Customize your trust portal URL. For example, if you set the slug to "acme-corp", your trust portal will be accessible at:
simpletrustportal.com/trust/acme-corp
Note: If you have a custom domain enabled, this will be trust.yourcompany.com.
Organization Logo
Upload a logo to personalize your trust portal. Recommended specifications:
- Square format (1:1 ratio)
- At least 256x256 pixels
- PNG or JPG format
- Transparent background (PNG) works best
Audit Logs
Audit logs provide a complete history of all activities in your organization for security and compliance purposes.
What's Logged
Filtering Logs
Use the filter buttons at the top of the list to view specific activity types (e.g., "Downloads", "Uploads"). This helps you quickly find relevant events.
Log Information
Each log entry includes:
- Event type and description
- User who performed the action
- Exact timestamp (displayed in your local timezone)
- IP address
- Additional metadata (varies by event type)
Pagination
Logs are displayed 25 per page. Use the pagination controls at the bottom to navigate through your audit history.
Exporting Logs
Click "Export to CSV" to download all filtered logs for external analysis or compliance reporting.
Trust Portal (Public)
Your trust portal is a public page where external users (prospects, customers, partners) can view your security posture and request access to documents.
Accessing Your Trust Portal
From your dashboard, click "View Trust Portal" in the sidebar to open your public trust portal in a new tab. Share this URL with external parties.
URL format: simpletrustportal.com/trust/your-slug
Note: If you have set up a custom domain (e.g. trust.yourcompany.com), users will access your portal there. Contact support to enable custom domains.
What Visitors See
- Your organization name and logo
- Your organization description
- List of all your public documents (downloadable immediately)
- List of private documents (request required)
- "Request Access" button
Requesting Access (From Visitor Perspective)
- Click "Request Access to Documents"
- Fill out the form with name, email, and company
- Optionally add a message explaining the access need
- Select which documents to request (or check "All Documents")
- Accept NDA if required
- Submit the request
- All organization members receive automatic email notification
- Wait for approval from the organization
- Receive email with secure share link when approved
- Access documents through the time-limited share link (valid 7 days)
Common Workflows
📋 Complete Access Request Workflow
External User Requests Access
User visits your trust portal and submits an access request with their information
Team Notified by Email
All organization members (both Admin and Member roles) automatically receive an email notification with request details and a link to review it
Review Request in Dashboard
Request appears in your Requests page with "Pending" status
Approve or Reject
Click "View Details" and choose to approve or reject the request
Automatic Email Sent (If Approved)
A unique share link is generated and automatically emailed to the requester with instructions
Monitor Email Delivery
Track email delivery status in the Requests table (Sent, Delivered, Bounced, etc.)
Requester Downloads Documents
Requester accesses the share link and downloads watermarked PDFs (valid for 7 days, up to 10 downloads per file)
Track Downloads
View download history with timestamps and IP addresses in the request details
🎨 Setting Up Watermarks
- Go to Watermark in the sidebar
- Ensure "Enable PDF Watermarking" is checked
- Select position checkboxes (Header, Footer, Diagonal) - enable all three for maximum security
- Customize the template using merge fields
- Click "Preview on Sample PDF" to see how it looks
- Click "Save Watermark Settings"
- Test by downloading a private PDF from the Documents page
👥 Adding Your First Team Member
- Go to Team in the sidebar (Admin only)
- Click "Invite Team Member"
- Enter their email address
- Select role (Admin or Member)
- Click "Send Invite"
- Copy the temporary password displayed
- Securely share the password with the new member
- Have them log in and change their password
Frequently Asked Questions
Q: How long do share links stay active?
A: Share links are valid for 7 days from the time of approval and allow up to 10 downloads per file. For example, if you approve 3 files, the requester can download each file up to 10 times.
Q: Can I watermark non-PDF files?
A: Currently, watermarking only works for PDF files. Other file types are downloaded without watermarks.
Q: Why was I logged out after an hour?
A: Sessions expire after 1 hour of inactivity. If you're actively using the portal, your session automatically renews with each interaction. If you select "Remember me" when logging in, your session will last for 30 days.
Q: What's the maximum file size I can upload?
A: The maximum file size is 30 MB per document. This limit can be increased if needed by contacting support.
Q: Can I replace an existing document file?
A: Yes. Click the edit icon (pencil) next to the document and use the "Replace File" option. This creates a new version while preserving the old one for audit compliance. You can view all versions by clicking the version badge (e.g., "v3") that appears next to documents with multiple versions. See the Version History section for more details.
Q: What's the difference between Admin and Member roles?
A: Admins have full access including team management and organization settings. Members can manage documents, watermarks, NDA, and access requests, but cannot access team management or organization settings.
Q: How do I customize my trust portal URL?
A: Go to Settings (Admin only) and set a custom "Trust Portal Slug". For example, "acme-corp" becomes yoursite.com/trust/acme-corp
Q: Are email notifications sent automatically?
A: Yes, with one exception. When an external user requests access, all organization members (both Admin and Member roles) receive an email notification. When you approve a request, the requester automatically receives an email. When you reject a request, you can choose whether to send an email (enabled by default). All email delivery is tracked and displayed in the Requests table with status indicators (Sent, Delivered, Bounced, Failed, Not Sent, etc.). See the Email Notifications section for full details.
Q: Can external users download public documents without requesting access?
A: Yes. Documents marked as "Public" are immediately downloadable by anyone visiting your trust portal without any approval process or watermarks.
Q: What happens if I delete a document that's part of an active share?
A: The document will no longer be available for download through active share links. Consider this before deleting documents with active shares.
Q: Can I see when documents were downloaded by external users?
A: Yes. Go to Requests, click "View Details" on an approved request, and check the "Download History" tab to see all downloads with timestamps and IP addresses. Note that downloads of public documents are not tracked as we do not collect user information unless they explicitly request access.
Q: How do I change my password?
A: Click "Profile" in the header, then use the "Change Password" section. You'll need to enter your current password, then your new password twice. If you forgot your password and are locked out, use the "Forgot Password" feature on the login page.
Q: Can I change my email address?
A: No, email addresses cannot be changed. If you need to update your email, contact support.
Q: Can I sign in with Google?
A: Yes. You can use Google Sign-In to create an account or log in. Click the "Continue with Google" button on the login or signup page.
Important: If you sign up with Google Sign-In, password-based authentication is disabled for security. You must always use Google to log in, and password features (change password, forgot password, password reset) will not be available.
Q: Can I set up SSO for my organization?
A: Yes. SSO is included in the One Plan but is not available during the first free month period. Once you are on a paid plan, please contact support to set this up as it requires manual configuration for security reasons.
Troubleshooting
Issue: Can't upload documents
Solutions:
- Check that your file is under 30 MB
- Verify the file type is supported (see Documents section)
- Ensure the file is not corrupted
- Try a different browser if issues persist
Issue: Watermark not appearing on PDFs
Solutions:
- Verify "Enable PDF Watermarking" is checked in Watermark settings
- Confirm the document is marked as "Private" (public docs are NEVER watermarked)
- Check that the file is actually a PDF
- Try downloading again to see the watermark
Issue: Share link not working
Solutions:
- Check if the link has expired (7 days from approval)
- Verify download limit hasn't been reached (10 downloads per file max)
- Ensure the full URL was copied correctly
- Check the error message - it will explain if the limit was reached or the link expired
Issue: Logged out unexpectedly
Solutions:
- Sessions expire after 1 hour of inactivity unless you checked "Remember me" during login (extends session to 30 days)
- Check if your browser is blocking cookies
Issue: Can't access Team or Settings pages
Solutions:
- These pages require Admin privileges
- If you should have access, ask another admin to promote you
- If you're the organization owner, contact support
Issue: Trust portal not showing my logo
Solutions:
- Ensure you uploaded a logo in Settings
- Try refreshing the trust portal page
- Clear your browser cache
- Re-upload the logo if needed
Issue: Requester not receiving approval emails
Solutions:
- Most common: Ask the requester to check their spam/junk folder - even if status shows "Delivered"
- Check the email status in the Requests table - may show "Bounced" or "Spam"
- Verify the requester's email address was entered correctly
- If needed, manually copy and share the link from the approval modal
Note: "Delivered" only confirms the email was accepted, not that it reached the inbox - it may have gone to spam.
Issue: Emails showing "Failed" status
Solutions:
- You can manually copy and share links from the approval modal as a workaround
Still Need Help?
If you couldn't find the answer you're looking for, we're here to help!