Who can use this feature
Supported on Foundation, Growth, and Scale plans
The Documents tab on a vendor’s profile is where you collect and store security evidence such as compliance reports, security questionnaires, and trust portal links. Scrut will automatically populate Trust Portal links for recognized vendors. Additionally, you can also add documents manually. In this article, we explain how to add vendor documents.
Note:
When you add a vendor from Scrut’s predefined list of known vendors, the system automatically populates the compliance URL (Trust Center/Trust Portal/Security Page) in the Documents tab. This link helps your team to quickly collect and review the vendor's security documentation, instead of spending time on manually searching for this URL.
Add a Vendor Document
Click Risk → Vendors on the left navigation panel and go to the Vendors tab.
Select a vendor from the list and click the Documents tab on the vendor page.
Click Add Document.
From the drop-down menu, select one of the following options:
File: Upload a file by dragging and dropping it, or selecting it from your system.
Link: Copy-paste the document link.
Add from Trust Portal: Available only for vendors whose trust portal is hosted on Scrut. See the section below for details.
Optionally, enter any notes about the document in the Notes field.
Click Submit.
The document will be uploaded to the vendor profile, with Source Type set to Direct Upload (when you upload a file or link).
Fetching Documents from a Vendor’s Trust Portal
For vendors whose trust portal is hosted on Scrut, you can pull publicly available documents directly into the vendor's Documents tab, without leaving Scrut.
Go to the vendor's profile and click the Documents tab.
Click Add Document.
Select From Live Trust Portal.
A list of all publicly available documents from the vendor's trust portal appears. Select the documents you want to add.
Click Submit. The selected documents are added to the Documents tab.
The document will be uploaded to the vendor profile, with Source Type set to Trust Portal.
Points to note:
Documents fetched from a trust portal are static. If you need an updated version, add the document again using the same workflow.
Private documents are not shown in this list. To request access, use the trust portal link available in the same window to visit the vendor's portal directly.