How long does access last?
Prospects and auditors receive a 7-day invitation. Clients and partners get an account valid two years, then deleted automatically. Access can be reopened on request.
In detail
Access duration depends on who you are, and it is always limited in time.
Duration by audience
- Prospects receive a 7-day invitation, enough to review the evidence during an evaluation.
- Auditors receive a personal 7-day invitation on their work email, scoped to the audit period.
- Clients and partners get an account valid two years, after which it is deleted automatically.
Access can be reopened on request. A prospect who needs more time, or an auditor starting a new audit cycle, simply asks again.
Why access is time-limited
The Trust Center holds sensitive compliance documents. Limiting access in time reduces the number of open accounts, keeps the audience current and supports data minimization. It also means no forgotten account keeps access years after the need has passed.
The same principle applies to personal data. The Trust Center keeps only the user's work email address, used to send the access link and to watermark downloads, and deletes it with the account.
For operators, the practical point is simple: when your security team or your assessor needs NORBr's evidence, ask your support team, and access is opened for the time the task requires.