Skip to content

Publishing your Trust Centre

How a company writes its public Trust Centre, chooses which documents can be downloaded or requested, publishes a reviewed snapshot, and decides document requests.

Updated

The Trust Centre is a public page where customers and buyers read how you protect personal data and security, and download or request your documents. You write it as a draft, review it, and publish a snapshot. Nothing on it is copied automatically from your internal records.

Who can do this

An owner or editor of your workspace can edit, publish and withdraw the Trust Centre, and decide document requests.

Find it

Open Trust Centre in the sidebar, under Connections & trust. The areas are grouped under Overview, Content, Access, Appearance and Settings.

Set its address

Before you can publish, the Trust Centre needs a public address. Set it under Address & installation. If it is missing, the publication checks show Set public address.

Write the page

  1. Under Company details, introduce your Trust Centre: the Headline, a Public overview, the Public contact email, your Organisation website and the Next review date. The review date shows as your next planned review. It is not an independent verification date.
  2. Under Security & privacy, add sections. Choose a topic under Section to add, or Add custom topic, and write a reviewed public summary for each. Describe only controls you can substantiate, and do not imply a certification you do not hold.
  3. Add FAQs and Updates if you want them.
  4. Press Save draft as you go.

Use only information your organisation has approved for public sharing. Keep personal records and internal incident details off this page.

Documents

Under Resources, upload each document as a PDF in the Document library. Give its Title, Document type, Scope, Issue date and Expiry date. New documents are internal drafts.

Review the current file version and choose its Approved access:

  • Internal only
  • Public download
  • Request approval
  • NDA and approval

A clean malware scan is required before you approve it. Approving records your review. It does not issue Asiri verification. Replacing a file returns the document to an internal draft.

For documents behind an NDA, publish your confidentiality terms under NDA terms. Each publication creates a permanent version. Updating the terms does not rewrite what earlier buyers accepted.

You can also link the privacy notices you publish from Policies & notices, so visitors always see the version in force.

Publish

  1. Open Readiness and resolve anything under Publication checks to resolve.
  2. Press Review and publish. Check the preview on Mobile, Tablet and Desktop.
  3. Write a Public update summary telling visitors what changed.
  4. Press Publish snapshot.

Publishing replaces your public page with this saved draft. Earlier versions stay in your history.

To take the page down, press Withdraw publication, give a Withdrawal reason (internal), and press Confirm withdrawal.

Document requests

When a buyer asks for a document, it appears under Access requests. Choose the request, choose Grant access or Refuse access, and write the Recorded reason. Both decisions need a reason. Press Record decision. Granted access lists what you have granted.

Common questions

"Does publishing give us a badge?" No. Publishing disclosures does not change badge eligibility or confer independent assurance.

"Will our edits go live as we type?" No. Visitors see the last snapshot you published.

Can’t find what you need? Contact us.