What the service is for
The service is for answering your organization's own RFPs, RFIs, security questionnaires, due diligence questionnaires and similar requests from your organization's own documents. Everything below follows from that.
Content you upload
Upload only content that your organization is entitled to use for this purpose.
- Do not upload documents you do not have the right to hold or process, including another company's confidential material obtained without permission.
- Do not upload personal data beyond what the documents themselves contain and the questionnaire needs. Special categories of personal data, such as health or biometric data, should not be uploaded unless the questionnaire requires it and your organization has the legal basis to process it.
- Do not upload content that is unlawful, or that infringes someone's rights.
Access and security
The platform isolates each organization's data. Do not try to get around that.
- Do not attempt to access, probe or interfere with another organization's data, index or files.
- Do not scan, test or attack the service without written permission. Security researchers who find a problem are welcome to report it to security@evidra.xyz.
- Do not share accounts, and do not give a member a role that lets them approve answers they should not approve.
- Do not use automated tools to scrape the site or to send requests at a rate that degrades the service for others.
Answers and evidence
The evidence attached to an answer is there so a person can check it. Do not present an answer marked Unverified, or an answer edited beyond what its evidence supports, to a third party as a verified statement without reviewing it. Do not remove the evidence appendix from an export to hide where an answer came from when the recipient has asked for sources.
Resale
Do not resell access to the service or answer questionnaires for other organizations through your account, unless a signed agreement allows it.
Enforcement
If we believe this policy has been broken, we tell the organization's Approver and ask for the problem to be fixed. Where the problem is a security threat to other customers, we may suspend the account first and explain afterwards. Questions about this policy go to hello@evidra.xyz.