Trust Center, included in the plan
One link for every security review.
Your controls, your reports, your rules.
When a buyer asks for your SOC 2, send one link. It shows the controls you pass and keeps your reports behind the access you choose.
Included in the $299/mo plan. No trust-page vendor to buy.
What is on the page
Everything a buyer checks, on one page.
The controls you pass, your SOC 2 report and the documents buyers ask for. It fills itself from the same workspace your agent works in for SOC 2.
Compliance
Documents
- SOC 2 Type II report Request access
- SOC 2 bridge letter Request access
- Penetration test report Request access
- Architecture overview Download
Controls
- Two-step verification is required for everyone
- Access is removed the day someone leaves
- Every account belongs to a named person
- Every code change is reviewed by a second engineer
- Tests must pass before anything ships
- Production branches cannot be force-pushed
- Customer data is encrypted at rest
- Traffic is encrypted in transit with modern TLS
- Data is deleted on request
- Backups run on a defined schedule
- Restores are tested, not assumed
Straight from your SOC 2 workspace. Only the ones that pass, and never a total.
Your SOC 2 Type I or Type II report, the bridge letter, and your pentest report: ours, or a PDF from another firm.
Any PDF a buyer asks for, up to 25 MB, shared from the same page.
Access, per document
You choose who reads each document.
Each document is public, opens after your agreement, or waits for your approval. Requests that need you join a waitlist.
- They ask
Your buyer picks the documents they need and sends one request.
- They confirm their email
Nothing opens until they click the link we send, valid for 24 hours.
- It waits for you
Anything behind approval joins your waitlist. You and your admins get an email.
- You approve
They get a download link for 7 days. Deny or revoke any time, and every download is logged.
Your brand, your domain
trust.yourcompany.com, with one CNAME.
Your color, your logo, your domain. It looks like part of your site, because it lives on it.
Your banner color
Your logo and your domain
LiveCertificate issued and renewed for you.
Included
Free with the SOC 2 plan.
No trust-page vendor, no second bill. It comes with the plan.
$299/mo
For teams under 10 people. 10 or more get a rollout plan and a price on a call.
- SOC 2 programPolicies, controls and evidence, run by your agent
- Included
- Pentest, every monthAn AI pentest of your app, with the report
- Included
- Device CheckerEvery laptop on your team, checked
- Included
- Trust CenterThis page, on your domain
- Included
Frequently asked
Questions.
01Does the Trust Center cost extra?
No. It is included in the $299 a month plan for teams under 10 people, next to the monthly pentest and the Device Checker. The same plan will include ISO 27001 (from November 9), HIPAA and GDPR at no extra cost when they launch.
02Can each document have its own access?
Yes. Every document is public, opens after the agreement, or opens after your approval. After the agreement is the default for a new document.
03How does a buyer get a gated document?
They pick the documents, accept your agreement and confirm their email from a link that is valid for 24 hours. Agreement documents open then. Documents that need approval wait for you, and once you approve, they get a link valid for 7 days.
04Can I use my own domain?
Yes. Point trust.yourcompany.com at us with one CNAME record. The certificate is issued and renewed for you.
05Can I match it to my brand?
Yes. You set the banner color, and the text on it turns white or ink to stay readable. Your logo links to your website.
06Is it public as soon as I set it up?
No. Nothing is public until you publish it, and you can unpublish at any time.
07Can I see one that is live?
Ours: trust.complianceeverywhere.com. It runs on the same Trust Center you get.
Get the report.
Then send one link.
The Trust Center comes with the SOC 2 plan, next to the monthly pentest and the Device Checker.