Safeguard Docs
Compliance ConnectorsSetup by categoryDigital Signature

Concord

Connect Concord to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.

Record your Concord connection as digital signature evidence. Automated collection is not available for this provider yet.

CategoryDigital Signature
Connect withAPI token
What a connection producesConnection record

Connect with an API token

  1. In Concord:

    1. From your Concord account, click the lightning bolt icon (Automations).
    2. Select Integrations and open the Concord API section.
    3. Click Generate a new API Key.
    4. Copy the private API key from the pop-up window; it is displayed only once.

    Where to find the other values:

    • Base URL (optional): Leave blank for your live Concord account. Concord's sandbox (UAT) environment signs in at https://uat.concordnow.com/#/login; use the sandbox only for testing.

    Concord shows the secret only once, so copy it before you leave the page.

    API key generation is only offered on paid Concord plans. If you lose the key you must generate a new one. Concord documents no read-only or scoped API key. The production API base URL is not stated in the fetched help articles.

    Source: help.concord.app, help.concord.app, checked 2026-10-07.

  2. On Compliance › Connectors, open Concord, click Connect, choose API token and fill in:

    FieldWhat to enter
    API token / Personal access tokenRequired. Stored encrypted and never shown again.
    Base URL (optional)—
    Account / Org / Workspace (optional)—
  3. Click Connect with token.

Frameworks

Concord publishes no API for what these tests check, so its evidence is an attestation: connect it to record the connection, then attest the result. An accepted attestation counts toward each control below.

FrameworkEvidenceControlsTests
SOC2AttestationCC6.2, CC6.31
ISO/IEC 27001AttestationA.5.181
HIPAA Security RuleAttestation164.308(a)(3)1
PCI DSSAttestation7.2.41
NIST CSF 2.0AttestationPR.AA-051

These tests are switched on per workspace by the Safeguard team.

On this page