Can my IT provider see my AffirmReady workspace?
KB-055 | Applies to: All plans | Last reviewed: October 27, 2026 | Version 1.0
If an outside IT provider helps with your computers or Microsoft 365, this article explains what they can see in AffirmReady and how to give them access.
The short answer
Only if you invite them. Your IT provider can't see anything in AffirmReady unless an Owner of your company invites them to your team. You choose their role, and you can remove them at any time.
Which role to give them
- Editor if they'll do part of the work, such as recording where evidence lives or updating answers about your systems.
- Read-only if they only need to review your progress or see what evidence you need from them.
- Avoid making an outside provider an Owner. Owners control your team, billing, and data export.
How to invite them
- Select Team in the menu.
- Under Invite someone, enter their work email and choose Editor or Read-only.
- Click Send invitation.
They sign in with their own password and authenticator app. Never share your own login with them. See KB-006 for more on roles and invitations.
What they can see
Anyone on your team, including your IT provider, can see your company's self-assessment answers, notes, evidence register, and policies. A Read-only member can't change anything. Billing is visible only to Owners.
When the work is done
On the Team page, click Remove next to their name. Their access ends right away.
Good to know
- AffirmReady doesn't connect to your Microsoft 365 or any of your systems. See KB-019.
- Your evidence files stay in your own systems. AffirmReady records only where they live. See KB-014.
- To ask your provider for the evidence you need, use KB-038. If they manage your Microsoft 365, see KB-021.
- Your SPRS affirmation is your company's own statement, made by your senior official, not by your IT provider. See KB-009.
Still need help?
Email support@affirmready.com and include your company name. Our team is available Monday through Friday, 8:00 AM to 5:00 PM Eastern, and replies within one business day.
For CMMC Level 1 readiness purposes only. Not legal advice. Your company is responsible for the accuracy of its self-assessment and affirmation.