NDA (non-disclosure agreement)

A contract in which one party agrees to keep the other's confidential information private, often asked for before sharing a SOC 2 report or pen test summary.

Vendors often share detailed security documents only after the reviewer accepts an NDA. On a trust center that can be a click-through of the vendor's own text, with a record of who accepted it and when, rather than a signed PDF.

What an NDA needs to say, and whether a click-through is enough for your purposes, is for your own counsel to decide.

What a reviewer wants to see

• The NDA text visible before the request is sent
• A record of acceptance
• A clear scope of which documents it covers