Contractbook
Connect Contractbook to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Record your Contractbook connection as digital signature evidence. Automated collection is not available for this provider yet.
| Category | Digital Signature |
| Connect with | API token |
| What a connection produces | Connection record |
Connect with an API token
-
In Contractbook:
- Log in to Contractbook and navigate to your profile settings.
- Create an API key there and copy it immediately; it is shown only once upon creation.
Where to find the other values:
- Base URL (optional): Contractbook's API reference lists production
https://api.contractbook.com/v3/and staginghttps://api-staging.contractbook.com/v3/(staging accounts come from help-public-api@contractbook.dk).
Contractbook shows the secret only once, so copy it before you leave the page.
Contractbook's public documentation does not cover every step.
The API docs say only "navigate to your profile settings. There you can create an API key"; exact menu and button labels are not documented publicly (the help center requires login). Contractbook documents no read-only or scoped key; it recommends separate tokens per service so they can be revoked individually. The API docs page is rendered from an OpenAPI file; its text was read from that file (https://api.contractbook.com/v3/docs/public//v3/openapi-v3.json), which the page loads.
Source: api.contractbook.com, checked 2026-10-07.
-
On Compliance › Connectors, open Contractbook, click Connect, choose API token and fill in:
Field What to enter API token / Personal access token Required. Stored encrypted and never shown again. Base URL (optional) — Account / Org / Workspace (optional) — -
Click Connect with token.
Frameworks
Contractbook publishes no API for what these tests check, so its evidence is an attestation: connect it to record the connection, then attest the result. An accepted attestation counts toward each control below.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Attestation | CC6.2, CC6.3 | 1 |
| ISO/IEC 27001 | Attestation | A.5.18 | 1 |
| HIPAA Security Rule | Attestation | 164.308(a)(3) | 1 |
| PCI DSS | Attestation | 7.2.4 | 1 |
| NIST CSF 2.0 | Attestation | PR.AA-05 | 1 |
These tests are switched on per workspace by the Safeguard team.
Related
- Digital Signature connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks