Skip to content
Contact us
  • There are no suggestions because the search field is empty.

Trust Centers: Overview

Trust Centers 

  • Are a simple and secure way to publish information about your security posture and compliance, and share it with your prospects and customers.
  • Allow you to build trust and show that your organization is taking cybersecurity seriously.
  • Help you spend less time filling out security questionnaires and fielding requests for security policies and compliance documentation. 

Multiple Trust Centers 

Trust Exchange users on free accounts can publish one Trust Center; users on paid Trust Exchange accounts can publish up to five Trust Centers. 

If you are a single company with multiple, distinct product lines, we recommend publishing one Trust Center per product line. Doing this enables you to share unique security information relevant to each product line, making it easier for your customers and prospects to get the information they actually need. 

Trust Center launch steps 

Creating and publishing a Trust Center is a quick and easy way to proactively and securely share your security posture and related documentation.

What can you share on a Trust Center?

Communicate the following information on Trust Centers:

  • Security ratings: Security ratings are an evaluation of the external security posture of your publicly accessible assets. Including your security rating highlights your security posture.

  • Security contact: Share contact information for your security representative, such as your Chief Information Security Officer (CISO) or Chief Technology Officer (CTO).

  • Company description, logo and cover image: Customize Trust Centers to represent your company by adding a logo, cover image, and a short description to help users understand the service your company provides.
  • Compliance badges: Select the compliance badges you want to display. 

  • Security questionnaires: Save completed security questionnaires to Trust Centers, which can reduce assessment time for your business partners.

  • Security documentation: You can also provide other documentation, such as compliance certifications (for example: PCI DSS, SOC 2, ISO 27001) and business-specific materials. Providing this information through Trust Centers in UpGuard ensures that your partners have the materials necessary to move forward with you.

  • Privacy and security pages: Add links to other related pages, such as your privacy policy or sub-processors page.

You can invite anyone to view a published Trust Center, and configure access and NDA settings for Trust Centers collectively to ensure appropriate protections are in place. Users on a paid Trust Exchange plan can also set custom domains and watermarks for Trust Centers.  

See also: