About

Trust is where you build the security and compliance pages you share with your customers and prospects. It helps you answer security questionnaires and due-diligence requests with one page you control, instead of sending documents by email one at a time.

There are two kinds of trust center:

• Public Trust Center: one page for everyone. Visitors can browse your frameworks, controls and other content, and request access to your documents.
• Private trust pages: restricted pages you share with named people, such as a prospect or partner, under an NDA. You can create as many as you need.

You review requests from visitors on the Access Requests tab.

Find the Trust Center

Go to Manage › Trust. The page is titled Trust Center and has three tabs:

• Trust Centers: your public trust center and your private trust pages.
• Access Requests: requests from visitors. A red count shows how many are pending.
• Configuration: notifications, NDA terms, draft sharing, watermarking and branding.

On the Trust Centers tab, the Public Trust Center card shows whether it is Live or in Draft, and which frameworks it includes. Private Trust Pages are listed below it in a table:

• Name
• Status: Published, Draft or Expired
• Framework
• Description
• Owner
• Last update

Select the public trust center card, or a row in the table, to open it. To return to the list, select the back arrow at the top left of the page. Use the search box above the table to find a private trust page.

Create a private trust page

1. Go to Manage › Trust › Trust Centers.
2. Select New Page. If you have no private trust pages yet, select Create private trust center instead.
3. Enter a Name and a Description. Both are required.
4. Select Create.

The new page opens as a Draft, on the Sub Processors tab. Add your content, then publish and share it.

To rename a private page or change its description, select the pencil next to its name. To delete it, use the trash button. The public trust center can't be renamed or deleted.

Edit a trust center

Open a trust center to edit what it shows. At the top you see its name, a Published or Draft badge, and the buttons Preview, Share and Publish. Below that, a summary row shows:

• Version: select it to see previous versions
• Last published
• Last updated
• Owner
• Shared contacts

Your content is organised on these tabs:

• Frameworks: select Add framework to show a framework. Each framework card has a menu with Download report, Upload report or Remove report, and Remove framework.
• Documents & Reports: select Add document and choose Governance Documents, Procedures, Policies or Reports. Each row has a preview (a download for reports) and a menu with Unlink. Only approved documents can be added, unless you turn on draft sharing.
• Security Links & Files: upload files, or select Add security link and enter a name and a link. The Watermark uploaded files switch adds a watermark to the files you upload.
• Controls: select Add control. You first select control sets, then choose the controls to show. Visitors see controls grouped by control family.
• Sub Processors: select Add subprocessor and pick from your Vendors. A private page picks from the public trust center's list.
• FAQ Library (FAQ on a private page): select Add question to write a new question or choose one from the Question Library. You can edit an answer; the edit applies to that trust center only.
• Custom Content: one section with a title and text. The text can include links, images up to 2 MB, and tables. Turn on Include custom content to show it.
• Access (private pages only): the people who have access, with their Name, Email, Access expires date and Status, and a Recall button.

The public trust center always shows sub processors and FAQ. On a private page, the Include subprocessors and Include FAQ switches control whether they appear.

Preview a trust center

Select Preview to see the page as a visitor sees it, without leaving the editor. The preview opens in a drawer with an Admin preview badge. Use the close button at the top of the drawer to return to editing.

Visitors only see the version you last published.

Publish a trust center

1. Open the trust center and add your content.
2. Select Publish.
3. Confirm in the Publish Trust Portal? window.

Publish is available only when the trust center has content and changes that are not yet published. If it has no content, a message asks you to add a framework, document, link, control, FAQ, or custom content first.

Each time you publish, the trust center gets a new version. Visitors with an active link see the updated content, and your later edits stay in Draft until you publish again.

Share a trust center

Share becomes available after the first publish. Select it to open the share drawer, which has two options:

• Shareable link: copy the link and send it yourself. The link only works together with a four-digit code, which is built into the link.
• Share by Email: enter a Name and an Email, and choose an Expires on date (it starts one month from today). The person receives an email with the link and a code.

To end a person's access to a private page, open the page, go to the Access tab and select Recall next to their name.

Review an access request

When a visitor to your public trust center asks for documents, the request appears on the Access Requests tab. Requests are split into Pending Requests and Past Requests, newest first. Each request shows the requester, their email, how many documents they asked for, the date, and a status. Pending requests have a Review button.

To review a request:

1. Go to Manage › Trust › Access Requests.
2. Select Review on a pending request. The Review Access Request panel lists the documents requested.
3. Choose one of the four actions:
   • Deny: the requester receives an email saying the request was denied.
   • Ignore: the request is dismissed and no email is sent.
   • Approve and Create a Private Trust Center: creates a private trust page named "Trust portal request" followed by a number, containing the requested items. The page is published and the requester receives an email with a link and a code. The access does not expire on its own; use Recall on the page's Access tab to end it.
   • Approve and Send as Attachment: emails the requester a download link to a zip file of the documents. The link works for 7 days.

The requester is emailed when you approve or deny a request. Ignored requests are dismissed silently.

To be emailed when a new request arrives, add yourself or a colleague under Configuration › Request Notification.

Configure your trust centers

Go to Manage › Trust › Configuration. These settings apply across your trust centers. The tabs are:

• Request Notification: under Notification Recipient, add up to 10 users who receive an email for each new access request. Select the trash icon next to a recipient to remove them.
• NDA: edit the visitor terms and conditions, then select Save.
• Draft Sharing: turn on the switch to allow in-progress policies and procedures to be shared on your trust centers. By default, only approved ones can be added. This saves as soon as you change the switch.
• Watermark: use Enable watermark, Watermark text, Include requester name and Include requester email, then select Save.
• Branding: choose Brand colors for the buttons (Primary color, Text color) and for the hero banner (Text color, gradient start and end), with a live preview. These apply to the public trust center. Select Save.

The Custom Domain tab is not available yet.

Set your NDA terms

Visitors must agree to your NDA terms before they can view a trust center. The terms ControlMap provides are only a starting point, so replace them with your company's own NDA terms and have your legal team review them.

1. Go to Manage › Trust › Configuration › NDA.
2. Edit the terms in the editor.
3. Select Save.