Skip to main content

Outline

Introduction

Receiving a third-party risk assessment request from a customer doesn't need to disrupt your workflow. Below is a step-by-step guide to receiving, completing, and submitting your assessment.

Step 1: Open the Assessment Request

The process begins in your email inbox:

  • Sender: no-reply@safeone.io

  • Subject Line: Third Party Assessment Request or Action Required: Attestation Request

Open the email to view the details of your customer's request. Depending on what they need, you will see one of two call-to-action buttons:

  • Upload Now: Displays if your customer requested attested compliance documentation (such as a SOC 2 report or ISO 27001 certificate).
  • Start Assessment: Displays if your customer requested a specific compliance questionnaire.

Note: Your request email may also include a summary of your digital footprint that the customer has already gathered, helping reduce duplicate work.

Didn't Receive a One-Time Passcode?

Normally, SAFE emails you a one-time passcode as soon as you open your invitation link.

However, if you (or anyone using your invitation link) previously set a password or selected Forgot Password during an earlier, unrelated assessment, you will not receive an OTP. You are expected to sign in with that password instead.

If you don't remember your password:

  1. On the sign-in screen, select Forgot password.
  2. SAFE emails you a security code.
  3. Use the code to set a new password.
  4. Sign in with your new password.

Note

The password-reset email is delivered normally even when the invitation link's one-time passcode is not. If you're stuck, resetting your password is the fastest way back into your account.

Still stuck? Check your spam folder, make sure you're using the exact email address your SAFE contact invited, or reach out to them directly.

Step 2: Fulfill the Request

Follow the instructions below based on the type of request you received.

Option A: Uploading Attestation Documents

If you clicked Upload Now:

  1. You will be directed to a secure document upload page.

  2. Drag and drop your official compliance report (e.g., SOC 2, ISO 27001) into the designated upload area.

  3. Allow a few minutes for SAFE to automatically process and validate the file. You can monitor the processing progress directly on your screen.

  4. Once processing completes, review the questions and edit the responses as needed.

  5. When you're ready, click Submit to send the questionnaire back to your customer for review.

Option B: Completing a Questionnaire

If you clicked Start Assessment, you will enter the SAFE One portal. The Summary Card at the top of the portal displays your real-time progress by tracking questions that are Answered, Pending, or Flagged.

You can complete the questionnaire using either of two methods:

Method 1: Use AI-Assisted Autofill (Recommended)

This is the fastest way to complete the questionnaire:

  1. Locate the upload section within the portal.

  2. Drag and drop any existing security collateral—such as a completed SIG or CAIQ questionnaire, internal policy documents, or third-party compliance certifications.

  3. The SAFE AI engine will scan your files and automatically populate the corresponding answers across the questionnaire.

  4. Review the populated responses. Questions answered by the AI will be clearly tagged as Auto Answered.

Method 2: Manual Data Entry

  1. Select any question to expand it.

  2. Choose your response from the provided options.

  3. Attach supporting evidence or add a rationale in the text field to provide extra context for your customer.

Step 3: Review and Submit

  1. Filter Remaining Items: Click the Pending tab to isolate any unanswered or flagged questions that require manual review.

  2. Save for Later: If you cannot complete the assessment in one sitting, your progress saves automatically. You can exit and return to the portal via the original email link at any time.

  3. Submit: Once every required question is answered, click the Submit button in the top-right corner of the portal.

After submission, your customer will be automatically notified so they can proceed with reviewing your security posture and advancing your partnership.

Need help during the process? Contact your customer directly using the contact details provided in your initial email request.

Troubleshooting: Not Receiving Your Login Code

If you're having trouble logging in to complete your questionnaire, try these steps in order.

  • You already have a password set up. If you've logged in before and set a password (for example, using "Forgot Password"), the link in your invitation email will now take you straight to the login page instead of sending a new code — just enter your email and password there. You do not need a new code.
  • You don't see the code in your inbox. Check your spam or junk folder — the message comes from noreply@safeone.ai. If your organization filters incoming email, ask your IT team to allow messages from this address.
  • The code field won't let you type, or you've requested several codes in a row. This is a safety measure that temporarily locks the code field after repeated attempts. Wait 15–30 minutes, then open the link one more time and enter the code you receive.

Still stuck? Try again in a private/incognito browser window, in case a saved session is interfering. If that doesn't resolve it, contact [vendor support contact] with your email address and the approximate time you tried to log in.

Did this article help?

Let us know by leaving a star rating at the top of this article.