Trust center
A page where a company shows its security, privacy and compliance information.
A trust center is a page, or a small site, where a company publishes what buyers' security teams want to check: certifications such as SOC 2 or ISO/IEC 27001, how data is stored and protected, subprocessors, policies and how to request reports.
It saves both sides time. Instead of answering the same security questionnaire by email for every deal, the company points buyers to one place, often with reports available after an NDA.
Key characteristics
- Certifications, policies and subprocessors in one place.
- Lets buyers' security teams check claims themselves.
- Often gates detailed reports behind an NDA.
- Common for B2B and security products.
Example
A B2B software company adds a trust page listing its SOC 2 report, data locations and subprocessors, and its sales cycle stops stalling on security questionnaires.
Go deeper
Frequently asked questions
What is the difference between a trust center and security.txt?
A trust center is for buyers. A security.txt file, defined in RFC 9116, tells security researchers how to report vulnerabilities.
Related terms