Import your brand from your website
Asiri reads your site’s brand colours, then you choose the header layout.
Platform / Trust Centre
Answer security reviews before they’re sent.
Publish an approved view of your security and privacy work, and share restricted documents only after a person grants each request.
Access request
Lagoon PayProcurement · supplier review
- Document
- Penetration test summary
- Agreement
- Signed by both
- Access
- 14 days, then expires
Grant accessDecline
Public · approval required · NDA required
Decide who sees each thing, once.
Every item on your Trust Centre has a tier. Public lines are approved when you publish; restricted documents wait for a person to grant each request.
- PublicAnyone with the link
- Security practices
- Certificates and their scope
- Subprocessor list
Approved once, when you publish
- Approval requiredA named requester
- Information security policy
- Business continuity plan
A person grants each request
- NDA requiredA named requester, after an agreement
- Penetration test summary
- Audit report
A person grants it, for a set time
- Never publishedYour registers, evidence and working notes stay inside the workspace.
Find answers
Let buyers answer their own questions.
Buyers search your published information before they send a questionnaire. Answers come only from passages your team approved, with the source beside each one.
When nothing published answers a question, the page says so instead of guessing, and the buyer can ask you directly or follow updates.
How is customer data protected?
From an approved passage
Customer data is encrypted at rest and in transit. Encryption keys are held in the hosting provider’s key service and rotated every year.
Encryption standard v4 · section 3Do you hold a SOC 2 report?
No answer is established from the published information.
Ask a question Follow updates
Behind each line
Every public sentence points to a record.
A statement on your Trust Centre is written from a control, a policy or a credential your team already keeps. When the record changes, the statement is flagged for review before anyone reads an out-of-date claim.
In your workspaceOn your Trust Centre
- Control AC-02 · Quarterly access reviewLast run 1 Oct · Emeka Obi
Access to customer data is reviewed every quarter.
- ISO/IEC 27001 certificateIssuer, scope and expiry, Mar 2027
Certified to ISO/IEC 27001 for the online store and its supporting operations.
- Encryption standard v3Policy · approved 12 Aug
Customer data is encrypted at rest and in transit.
v4 approved yesterday · statement waiting for review
Asiri evidence checks
Show what was checked, not only what you say.
Claims your company makes are labelled Company provided. Beside them, Asiri shows the checks it actually observed in your workspace, each with its date, and says so when the evidence behind one changes.
- Document reviewedPenetration test summary, version 23 Sep
- Issuer confirmedISO/IEC 27001 certificate and its scope14 Mar
- Policy approval recordedInformation security policy v7 · Ada Okafor12 Aug
- Policy acknowledgements recordedAcceptable use policy v4 · 18 of 20 staff12 Sep
- Connected system sync observedGoogle Workspace2 hours ago
- Administrator two-step enforcementGoogle Workspace administratorsEvidence changed
One restricted request
One document, one request, fourteen days.
Lagoon Pay is reviewing Koru Commerce as a supplier and asks for the penetration test summary, which is marked NDA required.
Penetration test summary NDA requiredDecided by Ada Okafor
- RequestedLagoon Pay · supplier review
- Agreement sentSent to Lagoon Pay
- Signed by bothAgreement on the request
- Access liveGranted by Ada Okafor
- Access expiredEnds on its own date
The tier says an agreement is required. It does not say this particular requester should have the document, so Ada still decides, and records why.
Lagoon Pay can read the summary until 22 Oct, then access ends. The grant, the agreement and the expiry stay on the request.
Fictional company example
Your brand · your domain · your website
Yours from the address bar down.
Your Trust Centre should look like your company and sit where buyers expect it. Set it up once, then link to it from everywhere you already sell.
Use your own domain
Serve the page from a hostname you own. Buyers see your address, not ours.
Install a badge on your website
Copy the badge or link into your footer. It only shows claims the live record backs.
Be found in the directory
List your published Trust Centre with your sector and jurisdiction so buyers can find you.
Every plan includes a public Trust Centre, Free included. Custom domains and saved branding come with paid plans.Compare plans
Before you start
What teams ask before they publish.
Is a Trust Centre included on the free plan?
Yes. Every plan includes a public Trust Centre. Custom domains and saved branding come with paid plans.
Can buyers answer their own questions?
Yes, from passages your team approved. When nothing published answers a question, the page says no answer is established and the buyer can ask you directly.
Does a Trust Centre make all our evidence public?
No. Your team chooses the information approved for public sharing. Restricted supporting documents remain subject to their separate access process and review.
Does publishing on Asiri certify our company?
No. Publication is a company decision. A certification or other independent assurance claim needs its own issuer, scope, dates and supporting evidence.
How is this different from an evidence library?
An evidence library supports internal work and reviews. A Trust Centre presents selected, approved company information to an external audience and separates it from requests for restricted material.
Where should we start?
Identify the information customers routinely ask for, who owns it and which material can be public. Review the current records and agree the document-access responsibilities before sharing.
Publish when you are ready, not before.
Publishing on Asiri does not independently certify the company. External assurance claims need their own issuer, scope and current supporting evidence.