Can my own auditors or compliance team get access?

Yes. Ask your NORBr support team, and each auditor receives a personal 7-day invitation on their work email, scoped to the audit period.

Giving your assessor direct access avoids forwarding chains. Documents stay current, sit in one place, and each download is watermarked, so you know the evidence your auditor reviews is the latest version.

What your auditor can find

• NORBr's PCI DSS Attestation of Compliance.
• ASV scan reports, with the executive summary in the portal and the technical report available on request.
• Security documents describing the infrastructure.

Why it helps your own compliance

PCI DSS asks you to monitor your third-party service providers. NORBr's evidence is what you hand over for that requirement. Direct access lets your assessor check it without your team acting as an intermediary.

Every claim can also be verified independently. The assessor behind the Attestation of Compliance is named, validity dates are stated, and NORBr B.V. appears on the Visa Global Registry of Service Providers.

Practical points

Invitations are personal, so each auditor needs their own. Users sign in with a magic link at trust.norbr.com. Only the work email address is kept, used to send the link and watermark downloads.