# External Auditor Portal
URL: https://docs.autociso.io/console/iso/auditor-portal/
Description: The Auditor Portal gives your certification body a time-limited, read-only view of your ISMS during the audit, without a full AutoCISO account.

*This is the help text the console shows in the help panel on this page.*

The Auditor Portal gives your [certification body](https://docs.autociso.io/console/iso/certification-bodies/) a time-limited, read-only view of your ISMS during the audit, without a full AutoCISO account.

### Portal Link
- Click **Generate Link**, choose how long it stays valid (7, 14, 30 or 60 days; 30 is the default) and click **Generate**.
- Copy the link and send it to your auditor. It is shown only once, so copy it before you click **Done**.
- The page shows whether the link is **Active** or **Expired** and the days remaining. Click **Regenerate Link** to issue a new one if it expires before the audit is finished.
- The link works until it expires, so the auditor can come back to it during the audit.

### Questions Inbox
Auditors can ask questions from the portal, optionally about a specific control. Questions appear in the **Questions Inbox** on this page as **Unanswered** or **Answered**. Click **Reply**, type your answer and click **Send Response**. The auditor sees it the next time they open the portal.

### What Auditors Can See
Through the portal, auditors have read-only access to:
- An overview: controls assessed, compliant controls and policy count
- [A risk summary](https://docs.autociso.io/console/iso/risk-register/) (counts of high, medium and low risks, no asset details)
- [Your policies](https://docs.autociso.io/console/iso/policies/)
- For each control: its [Statement of Applicability entry](https://docs.autociso.io/console/iso/soa/) and the [Evidence Vault items](https://docs.autociso.io/console/iso/evidence/) attached to it
- Their own questions and your answers

### Security
Portal access is limited to the expiry you chose, and the portal never allows changes to your ISMS data.