A lot happens in Secureframe between your logins: tests change status, tasks get assigned, auditors leave comments, vendors complete questionnaires, integrations quietly disconnect. The Notifications Hub gives you one place inside Secureframe to see all of it: a bell in the top navigator that collects notifications relevant to you, so nothing depends on catching the right email or checking the right page. Notifications links directly to the item it's about, so you can go straight from "something changed" to acting on it.
Note: The Notifications Hub is currently in Early Access. Reach out to your customer success manager if you don't see the bell in your account. The Hub complements email notifications, it doesn't replace them.
Opening the Notifications Hub
Click the bell icon in the top navigation from any page in Secureframe. A dot on the bell means you have unread notifications.
The panel opens with your notifications, newest first. Unread notifications are marked with a dot; timestamps show relative time (like "2h ago") for recent items and the date for older ones.
Notifications about critical items, like a failed test or a disconnected integration, are flagged with an error icon so they stand out.
The list updates automatically while you work, so new notifications appear without any refresh on your end.
Reading and managing notifications
Open the item. Click any notification to go directly to the item it's about: the test, task, comment, or vendor in question. Clicking a notification also marks it as read. (If the underlying item has since been deleted, the notification appears without a link.)
Filter to unread. Use the Unread toggle at the top of the panel to see only what you haven't looked at yet. The toggle shows a count of your unread notifications. Just opening the panel doesn't mark anything as read; notifications stay unread until you click them or mark them read yourself.
Mark as read or unread. Hover over a notification to mark it as read without opening it, or flip a read notification back to unread if you want to keep it as a reminder.
Mark all as read. Open the panel's overflow menu (⋯) and select Mark all as read to clear everything at once.
See more. The panel shows your most recent notifications; if there are more, click See more to expand the panel and load older ones.
When you're all caught up, the panel shows "You're up to date."
What you'll be notified about
The Hub covers activity across Secureframe. What lands in your Hub depends on your role. Task owners see their assignments, admins see program-wide events, auditors see audit activity.
Notification | When it's sent | Who receives it |
Mentioned in a comment | Someone @mentions you in a comment | The mentioned user |
Task assigned | A task or onboarding item is assigned an owner (including self-assignment) | The task owner |
Task overdue | A task passes its due date while still incomplete (checked daily) | The task owner |
Test at risk | A passing test transitions to at-risk | Admins and the test owner |
Test failed | A test transitions to failing | Admins and the test owner |
Integration disabled | An integration connection is disabled, pausing automated evidence collection | Admins |
Audit comment | Someone comments on a test in one of your audits | Admins and the audit's assigned auditors |
Audit test response changed | A test response is submitted (notifies auditors and admins) or marked action-required (notifies admins) | Admins and/or the audit's auditors, by direction |
Audit test added | A custom upload test is added to an audit | Admins and the audit's assigned auditors |
Questionnaire question assigned | A security questionnaire question is assigned to a reviewer | The assigned reviewer |
Vendor submitted | A vendor completes their portal submission | The review's owner and admins |
Vendor access pending | A vendor portal request has been sent and is awaiting the vendor | The review's owner and admins |
Knowledge base question needs review | A review is requested on a knowledge base question, or its review cycle elapses (checked daily) | The question owner |
FAQ
Does the Hub replace email notifications? No, the Hub is an in-app companion to email. The same events power both, so you can rely on whichever fits how you work.
How long are notifications kept? Notifications are retained for 30 days, then automatically removed. Anything older than that won't appear in the panel.
Why did I get a notification hours after the event? Most notifications arrive within moments of the event. Two types (overdue tasks and knowledge base review cycles) are based on time passing rather than someone taking an action, so they're detected by a daily check.
Does opening the panel mark my notifications as read? No. Notifications are only marked read when you click them, use Mark as read on a row, or use Mark all as read.
Why don't I see the bell? The Notifications Hub is in Early Access and is enabled per organization. If your organization has access and you still don't see it, try refreshing; otherwise, contact your customer success manager.
Can I turn off the Notifications Hub? Currently we don't offer toggling or customization capability. This is a fast-follow that we are currently working on, but the Hub overall should not be obstructive to the rest of the platform.