Outside auditor access

An auditor seat gives an outside auditor read-only access to your team until a date you set. Their access ends on that date without anyone having to remember to remove it, and their activity in Exam readiness and your archive is logged for your team.

Only admins can invite, extend, or end an auditor’s access.

Invite an auditor

On Team Members, press Invite a New Team Member. You can also start from Exam readiness > Auditor Next Week > Invite the auditor.
Enter the auditor’s email address and choose the Auditor role.
Set Access ends on. It is required, must be after today, and defaults to one week from today. Access runs through the end of that day.
Create the invitation.

The auditor seat is not billed. The invitation can be accepted only by the email address it was sent to.

Auditor setup

The auditor accepts the invitation.
They set up two-factor sign-in, with an authenticator app or a passkey, before they can open anything. This applies even if your team does not require two-factor sign-in.
They land on Your audit access, which lists each firm where their access is live and when it ends. Open takes them to that team’s Reports page, or to Archived Messages if Exam readiness is not turned on for the team.

What an auditor can open

Reports - generate and download reports and packets. Downloads ask for the auditor’s own second factor.
Review periods, Coverage baseline, and Drills - read only.
Archived Messages - your team’s business conversations, to read.
Search - search archived messages.
Contacts - read only.
Settings - read the general sections, including the settings change log, but change nothing.

If eDiscovery and eDiscovery productions are both turned on for your team, auditors can also read review sets and productions.

What an auditor cannot do

Download conversation PDFs or emails
Export search results or save searches
Export the settings change log
Connect or manage integrations
Change any setting, review period, baseline, or drill
Open the Auditor Next Week page
Use the API

What is logged

Every Exam readiness page an auditor opens, every conversation and message they read, every search results page, and every download is logged for your team. Reading Settings and Contacts is not logged.

On Team Members, the auditor’s row shows “Access ends” and the date, with three actions for admins:

Extend - set a later end date.
Access log - download a CSV of the auditor’s logged activity.
End access - end access now. The auditor is immediately signed out and cannot access your account.

When the end date passes, access stops and the auditor is signed out within the hour. Each invitation, extension, early end, and access log export is recorded in the settings change log.