Learn how the public profile functionality can help you manage your risk & compliance information with customers, vendors, and auditors
This article discusses sharing Trust Portal profiles by making them public. For more controlled access to Trust Portal profiles, head here.
Table of contents:
- Why should I make a Trust Portal profile public?
- How do I make a profile public?
- Locked content in a public profile
Why should I make a Trust Portal profile public?
A public Trust Portal profile can be shared with anyone using a hyperlink. You can use this functionality to easily share your public risk & compliance information.
The people you share the link with don't have to create a 6clicks account and can access all the unlocked content in this Trust Portal profile.
Sharing your risk & compliance information using a public Trust Portal profile means that the content these people see is maintained via your usual 6clicks activities, and you don't have to worry about sharing out-of-date information with customers or auditors.
If the information you need to share is sensitive or confidential, you should not use a public profile to share it. Instead, control access by sharing a private profile with specific users you trust.
How do I make a profile public?
Head to Trust Portal and click on the 3 dots to the right of the profile that you want to make public.
Check the box for Public and click Yes to proceed.
The icon for a public profile is different from a private one.
Click on Share profile, and copy the link to share the profile with anyone.
Lock specific content in the profile by clicking the lock icon near the name of the content.
If you make your profile public, all items in the profile will be visible to external users by default.
Ensure that you have reviewed the items and locked or removed any sensitive information before making the profile public.
Public profiles can also be made private again by unchecking the Public checkbox.
The below changes will take place.
- The link won’t work anymore for anyone trying to access the profile using the link.
- Users need to be specifically invited to the profile to view it, now that it is private.
- If you make this profile public again, the link will work again.
Locked content in a public profile
Locked content is only accessible to users in User Management.
Click on the 3 dots next to Trust Portal and select User Management.
Users in here will have access and can view all public profiles in your Trust Portal.
These users don't need to be invited to see a specific public profile.
If an assessment, a control set or a document in a public profile is locked, anyone can request access to it. For example, this control set in this public profile is locked, but the profile is still public.
Someone with the link can click on the control set and request access to it.
They would need to fill out a request form so that the access requested can be verified.
You would receive an email that looks like this if someone requests access to locked content.
You will find the request from within User Management, and can approve/reject it.
If the access request is approved, the person will receive an email that looks like this.
The person is now added to the Users list in User Management and will have access to the locked content only if they log into 6clicks.
If you have multiple public profiles, this user can now see the other public profiles.
Since this user was only ever explicitly granted access to a control set in Acceptable Use, if both of these profiles become private, this user can still see Acceptable Use which they were specifically given access to, but not the other one.
To learn more about giving specific users access to private profiles, head here.