You can forward assessment questions to external email users without a ControlMap account for both compliance assessments and vendor risk assessments. You will need to assign a user for other actions  such as action item or policy review or evidence assignments. ControlMap can be client facing and you can invite client users under Settings → Users within the client.

Is there a write up on the users levels and what they can access?  We would like to send an evidence request to an individual at our customers company but our customer only wants that individual to see the evidence requests assigned to them and limit everything else, is there a user role that would fit this requirement?

Here is some of the information on User Roles in our help center. https://help.controlmap.io/hc/en-us/articles/18154934059803-Users-Roles-Employees-in-ControlMap We are discussing updating roles to include a read-only role and custom roles for differing view access of CM.