How-To Guides
Last Updated:
- 1
Create your account
Go to vendorlens.io/auth and sign up with your work email. You'll receive a verification link — click it to activate your account.
- 2
Set up your company
After signing in you'll land on the Dashboard. Your company profile is created automatically. Head to the Trust Page Editor to fill in your company name, overview, and contact email.
- 3
Add your first section
In the Trust Page Editor, switch to the "Sections" tab and click "Add Section." Choose a section type (e.g. Security Practices), give it a title and description, then save.
- 4
Publish your trust page
Toggle the "Public" switch at the top of the Trust Page Editor. Your trust page is now live at vendorlens.io/trust/your-slug.
- 1
Navigate to the editor
From the dashboard sidebar, click "Trust Page." This opens the full Trust Page Editor with tabs for Company Info, Sections, Styling, and NDA Text.
- 2
Fill in company information
On the "Company Info" tab, enter your company name, overview, security practices, data protection details, incident response information, and a contact email.
- 3
Add and reorder sections
Switch to "Sections." Click "Add Section" to create new content blocks. Each section has a type, title, description, and optional icon. Drag to reorder or toggle visibility.
- 4
Customize branding
Go to the "Styling" tab. Adjust your trust page's primary color, background color, font, and card style. Changes are reflected in real-time in the preview.
- 5
Preview and publish
Click the preview link at the top to see your trust page as visitors will. When satisfied, ensure the "Public" toggle is on.
- 1
Open the Document Vault
From the dashboard sidebar, click "Documents." This shows all uploaded files with their visibility status and download counts.
- 2
Upload a document
Click "Upload Document." Select a file (PDF, DOCX, etc.), give it a title and optional description, and choose a visibility level.
- 3
Set visibility
Each document can be Public (anyone can view), NDA (requires an approved NDA), or Private (internal only). Change this anytime by editing the document.
- 4
Edit metadata
Click the edit icon on any document card to update its title, description, or visibility level.
- 5
Delete a document
Click the trash icon on a document card and confirm. The file is permanently removed from storage.
- 1
How requests arrive
When a visitor views your trust page and wants access to NDA-protected documents, they fill out a request form with their name, email, and company. You'll see it in the "Requests" section of your dashboard.
- 2
Review the request
Click on a pending request to see the requester's details and the NDA text they agreed to.
- 3
Approve or reject
Click "Approve" to grant access. The requester receives an email with a secure link to view NDA-protected documents. Click "Reject" to deny the request.
- 4
Revoke access
Previously approved requests can be revoked at any time. The requester's access token is invalidated immediately.
- 5
Monitor usage
The Requests page shows a progress bar of your monthly NDA request quota. Starter gets 5/month, Pro gets 50/month, Business is unlimited.
- 1
Go to Settings
From the dashboard sidebar, click "Settings." Scroll to the "Custom Domain" section.
- 2
Enter your domain
Type the subdomain you want to use, e.g. trust.yourcompany.com. Click "Save."
- 3
Configure DNS
In your DNS provider (Cloudflare, Route 53, GoDaddy, etc.), create a CNAME record pointing your subdomain to saas.vendorlens.io.
- 4
Verify the domain
Back in VendorLens Settings, click "Verify Domain." We'll check the DNS record. Once verified, your trust page is accessible at your custom domain.
- 5
SSL is automatic
We provision an SSL certificate automatically via Cloudflare. No additional configuration needed — your custom domain will serve over HTTPS.
- 1
Navigate to Settings
From the dashboard sidebar, click "Settings." Scroll to the "E-Signature Provider" section and select DocuSign.
- 2
Enter API credentials
You'll need your DocuSign Integration Key, Account ID, User ID, and HMAC Key. These are found in your DocuSign Admin console under "Integrations > API and Keys."
- 3
Enable the integration
Once all credentials are entered, toggle the "Enabled" switch on. Click "Save Settings."
- 4
Test the connection
Click "Test HMAC" to verify the webhook connection is working correctly.
- 5
Automatic envelope sending
When you approve an NDA request, VendorLens automatically sends a DocuSign envelope to the requester for e-signature. The status updates in real-time.
- 1
Navigate to Settings
From the dashboard sidebar, click "Settings." Scroll to the "E-Signature Provider" section and select SignNow.
- 2
Enter API credentials
You'll need your SignNow Client ID, Client Secret, Username, Password, and Webhook Secret. These are found in your SignNow developer account.
- 3
Enable and save
Toggle the "Enabled" switch and click "Save Settings."
- 4
Test the connection
Click "Test Connection" to verify SignNow can authenticate with your credentials.
- 5
How it works
Just like DocuSign — when you approve an NDA request, an envelope is sent via SignNow for the requester to sign electronically.
- 1
Go to Settings
From the dashboard sidebar, click "Settings." Scroll to either the "Slack Integration" or "Microsoft Teams Integration" section.
- 2
Create a webhook URL
In Slack: go to api.slack.com/apps, create an app, and add an Incoming Webhook. In Teams: right-click a channel > Connectors > Incoming Webhook. Copy the generated URL.
- 3
Paste the webhook URL
Enter the webhook URL in the corresponding field in VendorLens Settings.
- 4
Choose notification events
Toggle which events trigger notifications: new NDA requests, approved NDAs, and/or document access events.
- 5
Test and save
Click "Test" to send a sample notification to your channel. If it arrives, click "Save Settings."
- 1
Go to Settings
From the dashboard sidebar, click "Settings." Scroll to the "PDF Watermark" section.
- 2
Enable watermarking
Toggle the watermark switch on. All PDF documents served through the document vault will now include a watermark.
- 3
Customize the text
Enter custom watermark text. You can use placeholders like {{requester_email}}, {{requester_name}}, {{date}}, and {{company}} to personalize each download.
- 4
Preview
A live preview below the text field shows how the watermark will appear on documents.
- 5
Save
Click "Save" to apply. The watermark is applied server-side when documents are downloaded — original files remain unmodified.
- 1
Create a Turnstile widget
Log in to your Cloudflare dashboard. Go to Turnstile > Add Widget. Set the domain to your custom domain (e.g. trust.yourcompany.com). Copy the Site Key and Secret Key.
- 2
Go to VendorLens Settings
From the dashboard sidebar, click "Settings." Scroll to the "Turnstile Bot Protection" section.
- 3
Enter your keys
Paste the Site Key and Secret Key into the corresponding fields.
- 4
Enable Turnstile
Toggle the switch on and click "Save." NDA request forms on your custom domain will now show a Turnstile challenge.
- 5
Verify it works
Visit your trust page and try submitting an NDA request. You should see the Turnstile verification widget before the form submits.
- 1
Open Team Management
From the dashboard sidebar, click "Team." This shows all current team members and pending invitations.
- 2
Invite a member
Click "Invite Member." Enter their email address and select a role: Owner (full access), Editor (can manage content), or Viewer (read-only).
- 3
They receive an invitation
The invited person gets an email with a link to join. They'll need to create a VendorLens account if they don't have one.
- 4
Change roles
As an owner, click the role dropdown next to any member to change their role. Only owners can modify roles.
- 5
Remove a member
Click the menu icon next to a member and select "Remove." They'll immediately lose access to the company dashboard.
- 1
Go to Billing
From the dashboard sidebar, click "Billing." This shows your current plan, usage, and payment information.
- 2
Upgrade your plan
Click "Upgrade" next to the plan you want. You'll be taken to a secure Stripe checkout to enter payment details. Upgrades take effect immediately with prorated billing.
- 3
Downgrade your plan
Click "Downgrade." The change takes effect at the end of your current billing period. You'll keep access to current-tier features until then.
- 4
View invoices
Scroll down to the "Invoices" section to see all past charges with downloadable receipts.
- 5
Manage payment method
Click "Manage Subscription" to open the Stripe customer portal where you can update your card, billing address, or cancel your subscription.
Long-form guides
Trust center launch checklist
A step-by-step checklist to launch a trust center in a week. Documents, sections, NDA, branding and analytics covered.
9 min read
A security review workflow that does not block deals
A practical workflow for handling buyer security reviews — from first ask to NDA-gated documents to questionnaire shortcuts.
10 min read
How to share a SOC 2 report securely
Step-by-step on sharing your SOC 2 report under NDA — without email attachments. Watermarking, expiry, audit logs and unsafe sharing examples explained.
10 min read
What to include in a trust center
A reference list of sections, documents and statements buyers expect to find in a B2B vendor trust center.
6 min read
Security document access control, in practice
How to apply NDA gating, watermarking, time-limited access and audit logging to security documents you share with buyers.
5 min read
How to create a SaaS trust center
A step-by-step guide to building a professional SaaS trust center. Learn what documents to include, how to gate sensitive content, and how to publish on your own domain.
10 min read
What documents should a SaaS trust center include?
A complete list of documents every SaaS trust center should publish or gate. SOC 2, ISO, DPA, subprocessors, policies, pen tests, insurance and more.
8 min read
SOC 2 report access — public, private or NDA-gated?
Should your SOC 2 report be public, private or NDA-gated? Learn when to share, when to withhold, and how to run a secure buyer workflow.
7 min read
Trust center vs GRC platform — which does your team need?
When does a B2B startup need a trust center vs a full GRC platform like Vanta or Drata? A practical guide to choosing the right tooling stage.
8 min read
Security questionnaire vs trust center — what actually saves time?
Answering security questionnaires one by one is slow. A trust center absorbs the same questions before they reach your inbox. Learn the difference and build a faster sales workflow.
7 min read
Subprocessor list template for SaaS vendors
A practical subprocessor list template for SaaS companies. Track vendor name, purpose, data category, location, security notes, and DPA status in one place.
7 min read
DPA sharing guide for SaaS vendors
A practical guide to Data Processing Agreements for SaaS vendors. Learn what a DPA covers, where to publish it in your trust center, and when to gate access behind an NDA.
7 min read
Security review workflow for SaaS sales teams
A practical workflow for SaaS sales teams handling security reviews. From buyer request to approved access — with checklists for sales, legal, and security.
8 min read
Free resources
Trust center launch checklist (PDF)
A one-page printable checklist covering documents, sections, NDA, branding and analytics — ready to hand to your team.