We use cookies and similar technologies to improve your experience and analyse usage. By continuing you agree to our Privacy Policy.
A SOC 2 document portal that respects how sensitive that report actually is
Your SOC 2 report contains detailed control descriptions you do not want emailed around. But every prospect asks for it.
VendorLens gives you an NDA-gated portal for your SOC 2 report and Type 2 letter. Buyers request access, sign an NDA, and get a watermarked, time-limited download — all without sales touching email attachments.
Use cases
Replace SOC 2 over email
Buyers click a link, sign the NDA, and the report is delivered with a per-request watermark.
Track who has the report
Every access request, NDA signature, and download lives in the audit log.
Bridge the gap pre-Type 2
Share the Type 1, the bridge letter, and a summary while you wait for Type 2 to land.
How it works
Upload the SOC 2 PDF
Mark it as NDA-required so it only appears behind a signed NDA.
Configure your NDA
Use the built-in template or upload your own. Optional DocuSign or SignNow signature.
Share the trust portal link
Buyers see the report listed but must request access first.
Approve and watermark
On approval, the buyer gets a time-limited URL with their name and email watermarked diagonally on every page.
Manual process vs VendorLens
| Topic | Manual process | With VendorLens |
|---|---|---|
| SOC 2 sharing | Attach to email after NDA back-and-forth | Self-serve NDA + watermarked download |
| Watermarking | Manual PDF editing per request | Automatic on every download |
| Access expiry | Never — PDF is on their laptop forever | Configurable token expiry, default 24h |
| NDA storage | Hunting through email and Drive | Stored against the request in the audit log |
Frequently asked
Related pages
Continue exploring related solutions, industries and comparisons.