Trust Center
Stop answering the same nine questions
What goes on it
Everything a reviewer asks for, already there
Each of these comes from the record inside Trusterio rather than from a copy somebody pasted in. Change it internally and the page does not move until you publish.
- Certifications
- ISO 27001, SOC 2 and the rest, with their scope and expiry — drawn from the record, not from a picture of a certificate.
- Policies
- The approved version, at the version people are actually working to.
- Subprocessors
- Who they are, what they process, where they are, and the transfer mechanism.
- What you hold
- The categories of personal data you process and — just as usefully — the ones you do not.
- Documents
- Public ones to download, sensitive ones behind a request.
- A changelog
- Derived from what was published, including what was taken down.
Gated documents
The pentest report, without the email thread
Some documents should not sit on a public page. Those sit behind a request: a named person at a named company asks, you approve or decline, and the copy they get carries their name.
- One click to approveWith an expiry, so access is not permanent by accident.
- Watermarked per recipientTheir name and the date, on every page of the copy they downloaded.
- Every open recordedYou can see who read what, and when — which is the question your auditor asks.
- Scanned before it movesEvery upload goes through a virus scan before it is servable.
What is enforced
A Trust Center is only worth the checks behind it
Anybody can put a page of reassuring claims on the internet. These are the rules that make this one mean something, and all of them run inside the database rather than in a screen that could be bypassed.
Nothing appears without a publication
An internal edit changes nothing publicly. Somebody has to publish it, and the publication is a record with a version and an author.
A contradicted claim is refused
Publish “all data stays in the EU” while a bucket outside it is being read, and the publish fails. Not a warning — a refusal.
What it said in March is still answerable
Publications are versioned, so a question about what the page claimed last quarter has an answer.
The assistant quotes you
A visitor asking a question is answered from sentences you published. It does not compose new ones on your behalf.
Fourteen days. The whole thing.
No card, no sales call, no demo you have to sit through. Your data stays in the EU.