Skip to main content
VISO TRUST generates notifications to keep the right people informed about assessments, risk events, and relationship activity. Admins have granular control over how notifications are routed and who receives them. Notification settings are in Settings → Org Profile → Notifications.

​
Organization contacts

Before configuring notification routing, designate your organization’s primary contacts: Support Contact: the primary contact vendors see during interactive assessments. This person’s name and email appear in assessment communications sent to vendors. Setting a clear support contact improves vendor trust and streamlines communication. Incident Response Contact (optional): a designated recipient for all risk advisory notifications across your entire vendor portfolio. Ideal for a centralized security operations or compliance team that needs to triage every advisory regardless of which Business Owner owns the relationship.

​
Notification routing

All three routing controls live on the Overrides card under Settings → Org Profile → Notifications. Click the edit icon to open the Notification Settings dialog. Editing them requires Admin access.

​
Business Owner notifications

By default, Business Owners receive notifications about the relationships they own: assessment updates, risk advisory alerts, lifecycle reminders, and more. Turning the Business Owner Notifications toggle off stops all of them. Use this when another team is centrally managing all communication, or when you’re triaging notifications through a shared inbox before routing them.
This toggle rewrites the per-relationship setting on every relationship in your organization, and clears the Business owner column across the notification matrix. Turning it back on re-enables them everywhere. Any per-relationship exceptions you had set are not preserved.

​
Override all email recipients

Set an address under Override All Email Recipients and every notification email your organization sends is delivered there instead of to its intended recipient. This is useful for a ticketing system, a shared inbox, or a non-production tenant.
This redirects every email, including vendor-facing ones. Collection requests, reminders, and submission confirmations addressed to a third-party contact are sent to the override address instead of to the vendor. As a result, vendors stop receiving them and assessments stall. Treat the override as a way to intercept all mail, not as a way to consolidate internal mail.
The override address must be on visotrust.com or on one of your organization’s verified domains. The dialog rejects anything else and lists the domains it will accept. Clear the field to go back to normal delivery.

​
BCC all emails

Set an address under BCC All Emails to receive a blind copy of every notification email your organization sends. Recipients still get their email as usual and can’t see the BCC address. Use this to archive outgoing mail or to give a compliance team visibility without changing who gets what. The BCC works independently of Override All Email Recipients. If both are set, the override address receives each email and the BCC address receives a blind copy. The BCC address follows the same domain rule as the override. It must be on visotrust.com or on one of your organization’s verified domains. Clear the field to stop sending blind copies.
If the BCC address is also a recipient of an email, that mailbox receives two copies.

​
Notification types

The notification settings matrix groups notifications into categories. You can toggle each notification on or off per recipient. Depending on the category, recipients include the Business owner, Assessment lead, Subscribers, the creator of the item, your organization’s admins, and the vendor’s third party contact. You can’t disable some notifications, particularly those sent directly to vendors.

​
Assessments

  • Assessment started
  • Assessment submitted
  • Assessment completed
  • Assessment cancelled
  • Assessment forwarded
  • Assessment expired
  • Assessment expiration extended
  • Assessment reminder
  • Invalid assessment recipient email

​
Remediation

  • Remediation requested
  • Remediation reminder
  • Remediation artifacts provided
  • Remediation declined
  • Remediation forwarded
  • Remediation target date missed

​
Monitoring & risk alerts

  • Risk advisory
The Incident Response Contact (configured above) additionally receives every risk advisory across your portfolio.

​
Lifecycle & recertification

  • Relationship onboarded
  • Upcoming recertification

​
Relationship management

  • Relationships imported
  • Relationship import failed

​
Organization

  • Undeliverable email to a user
This fires when a VISO TRUST email to one of your own users bounces, meaning the user did not receive it and the address needs correcting. The in-app notification links straight to Settings → Users so you can fix or reactivate the address. See Reactivating a bounced email.
This is distinct from Invalid assessment recipient email under Assessments, which fires when an email to a vendor contact bounces. One is your user’s address; the other is the third party’s.

​
Mentions

Users tagged in comments on a relationship or assessment receive a notification, regardless of their role or subscription status on that relationship.

​
Previewing notification content

To see exactly what a notification looks like before it goes out, click any notification type in the Settings matrix. A preview shows the email subject and body, including how placeholder data (vendor name, relationship name, etc.) is populated. Use this to validate that your support contact name appears correctly and that the communication tone matches your organization’s expectations.

​
Per-relationship notification settings

In addition to org-wide settings, individual relationships have their own notification configuration. Open the relationship’s Relationship configuration dialog (gear icon) and use the Contacts section to:
  • Enable or disable notifications for the Business Owner on that specific relationship
  • Add or remove Subscribers who receive updates for that relationship
Relationship-level settings don’t survive the org-wide controls. Toggling Business Owner Notifications at the org level rewrites this setting on every relationship, and an email override applies to all relationships regardless of what is set here.