Evidence files back up what you declare: SOC 2 reports, ISO certificates, penetration test summaries, policies, insurance certificates, completed questionnaires and so on.
Uploading a file
- Pick the Section and the Claim this evidences. Only claims for the chosen section are listed; Other / section in general is always available.
- Optionally set the Evidence type, the Issuer / auditor, the Period covered, an expiry date and a description.
- Choose the Visibility:
- Shared with trusted peers: companies you've approved can download it.
- Internal only: it never leaves your organization.
- Choose the file and select Upload.
Managing files
- Filter the list by section with the Section drop-down.
- The pencil button changes a file's section, claim, visibility, issuer and notes. The other buttons download or remove it.
- Files past their expiry date are marked Expired, and the sections they support show Evidence Expired once published. The dashboard warns you 60 days ahead.
- Partners see the evidence register as it was when your version was published. Files you add or remove later reach them with your next published version.
What you may not upload
BordersHub is for trust, compliance and business information only. Your company is responsible for everything it and its members upload or write, in any form: evidence files, your company's name and logo (both shown on your public registry page), members' names, titles and profile pictures, trust profile answers and other text, and support ticket messages and attachments. Any of these can lead to the content being removed and to action against the member's or the company's account. Under the Terms of Service (section 9), you must never upload:
- sexually explicit, pornographic or obscene material, nudity or other adult content, or gratuitously violent or shocking material;
- material that infringes copyright, trademarks or other intellectual property, such as pirated software, or paid standards, reports or media you have no right to share;
- anything unlawful, defamatory, malicious (such as malware) or that violates someone's privacy;
- files unrelated to your trust, compliance or business information.
Files removed by BordersHub
BordersHub doesn't routinely review your files, but it may remove and permanently delete a file that breaks these rules or the law, for example after another company reports it and BordersHub finds the report founded, or that is the subject of a credible legal complaint, without telling you first (section 6.4). A removed file can't be restored. Your Audit Log normally shows which file was removed, when, and why, under "BordersHub Support".
Removing the file isn't necessarily the end of it. Breaking these rules is a serious breach of the Terms: BordersHub may also suspend the member who uploaded it or your whole company, and, for serious or repeated breaches, close your company's account immediately. None of this is refunded.
If a published version listed the file, that version's record doesn't change (records never do), but the file is shown as Removed from BordersHub after publication and can't be downloaded. Upload a suitable replacement and publish a new version. If you think a file was removed by mistake, raise a support ticket.
Standard questionnaires & frameworks
If a buyer expects a standard questionnaire (such as CAIQ, SIG Lite or HECVAT) or a framework (such as SOC 2, ISO 27001 or ISO 9001), fill it out outside BordersHub and upload the result here. See Standard questionnaires & frameworks for the ones commonly requested in each industry, with links to their official sources and an upload button for each.